Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b962b98a-9ab5-35f8-9a2c-3e65dbb33585.roa
File:                     b962b98a-9ab5-35f8-9a2c-3e65dbb33585.roa (raw, json)
Hash identifier:          kc0KjYZXqLgA5PLvSfRmLb1Lro/KpnT5ZaDCxdwjKgc=
Subject key identifier:   D6:62:EF:D2:A2:CB:FA:43:93:84:E7:E3:F1:8B:14:8F:76:CD:E5:84
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F78E836F0CD42D748793DA000
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b962b98a-9ab5-35f8-9a2c-3e65dbb33585.roa
Signing time:             Mon 12 Oct 2026 01:00:13 +0000
ROA not before:           Mon 12 Oct 2026 01:00:13 +0000
ROA not after:            Sun 10 Jan 2027 02:00:13 +0000
asID:                     36539
IP address blocks:        38.98.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:78:e8:36:f0:cd:42:d7:48:79:3d:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct 12 01:00:13 2026 GMT
            Not After : Jan 10 02:00:13 2027 GMT
        Subject: CN=6f285984-97c5-413d-84b7-be8b44eb84a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d0:3d:41:a7:6d:8d:27:4d:3a:28:e2:63:97:
                    e6:dd:ca:d0:e2:ec:aa:e5:a4:ce:1c:4c:6f:55:d6:
                    ff:0c:dc:17:97:08:a6:45:2f:7a:22:21:79:5d:a0:
                    a4:b1:18:b9:54:69:a8:86:25:2d:6a:28:55:91:74:
                    da:92:87:87:49:76:79:7e:9b:d8:fe:a3:e4:fa:27:
                    f9:8e:0c:74:e2:32:36:2c:ce:3c:4c:ec:80:d9:ab:
                    3e:e2:65:5b:c3:16:7b:8d:7c:00:d7:47:ba:5d:1b:
                    85:d0:2e:02:91:d3:04:f9:26:7b:90:aa:90:a7:01:
                    6d:e5:d6:c7:11:34:20:b7:4c:f6:fb:aa:30:a9:d7:
                    b0:1a:a8:2c:50:d6:34:99:9f:42:38:c7:b5:96:c3:
                    62:5d:35:ce:6a:5d:00:fa:1b:06:4b:42:b6:ca:a7:
                    cc:a1:db:9f:03:c9:99:b1:d4:4f:4a:2e:15:13:58:
                    0a:4a:68:9e:71:91:73:5d:59:73:67:f3:8e:18:f3:
                    62:e5:6f:d4:1e:32:81:ea:94:78:69:51:10:ef:9e:
                    99:7a:a0:49:61:8c:4b:9b:af:96:26:35:a6:d5:ed:
                    fa:39:76:cb:37:92:10:17:39:cf:31:06:d3:0e:b5:
                    b8:05:99:df:13:54:e5:07:c8:e3:0b:47:f6:42:ac:
                    01:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:62:EF:D2:A2:CB:FA:43:93:84:E7:E3:F1:8B:14:8F:76:CD:E5:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b962b98a-9ab5-35f8-9a2c-3e65dbb33585.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.98.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:17:1d:00:b3:75:4b:4f:9c:17:2e:db:8a:b4:56:9e:8e:1c:
         68:81:14:ae:29:cb:c9:8a:00:09:da:1b:60:95:8a:fb:07:4b:
         f8:5c:03:a1:70:bb:5c:bf:9b:f0:70:41:3b:4d:28:de:3f:b3:
         98:28:2a:41:43:bd:0c:a7:74:0b:d0:af:48:c8:8f:b9:0c:2d:
         7c:6e:55:4a:b9:09:84:a7:7a:2e:d1:d6:cb:7e:a0:dd:25:4f:
         12:6f:4d:53:1c:2a:bd:0d:24:3f:f4:45:cb:72:2b:65:6d:c8:
         a2:42:96:b0:75:d6:e6:c9:c8:10:e4:c7:09:b3:a2:7d:23:da:
         01:24:f5:6d:da:7c:25:46:20:3c:a2:e1:30:99:64:56:4c:3d:
         eb:42:12:71:fa:28:5d:59:b2:ce:79:47:8b:4e:3b:ae:32:c5:
         0a:e1:da:6e:b5:a9:a2:f6:40:24:53:b4:a0:b1:64:ce:75:65:
         0c:c5:32:ae:26:74:05:7f:d6:f7:bc:52:2f:3e:87:c4:44:37:
         9b:ca:3c:88:9c:5f:dd:2a:3f:29:7c:9c:0f:a0:40:10:96:fa:
         ee:11:10:81:b5:a5:e6:5e:2e:99:4a:08:b0:95:dc:b3:ea:26:
         4f:84:16:c2:b7:84:9f:15:55:65:d6:22:71:ea:5c:3f:5b:8c:
         05:87:7b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 18:49:15 2026 by rpki-client