Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c256502d-0ea5-39a5-814f-abe49429529e.roa
File:                     c256502d-0ea5-39a5-814f-abe49429529e.roa (raw, json)
Hash identifier:          DB+Qp0y3cbtNEVPXIpxwCR5xrsqnVBhNUpIQqsl0yec=
Subject key identifier:   C0:05:58:9A:42:EE:BD:4C:22:52:71:66:E2:84:79:E0:43:BD:83:30
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E11B43860CA77E631C7C938C0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c256502d-0ea5-39a5-814f-abe49429529e.roa
Signing time:             Fri 05 Jun 2026 09:00:12 +0000
ROA not before:           Fri 05 Jun 2026 09:00:12 +0000
ROA not after:            Thu 03 Sep 2026 09:00:12 +0000
asID:                     265525
IP address blocks:        38.255.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:11:b4:38:60:ca:77:e6:31:c7:c9:38:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jun  5 09:00:12 2026 GMT
            Not After : Sep  3 09:00:12 2026 GMT
        Subject: CN=c0c77145-ebea-48ba-ac8a-0ede831ddca5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:9e:92:2a:3f:7d:56:3f:b2:e0:b4:03:cb:b3:
                    e6:af:b1:42:c5:d5:5f:8c:92:e3:b9:b8:7e:3f:c5:
                    c7:7e:0c:3b:63:ec:f4:6f:32:27:82:df:be:3c:1d:
                    b0:ae:9b:4c:38:87:8c:8a:35:9a:28:de:01:9b:74:
                    20:d8:09:e3:f8:32:2f:9c:39:0b:75:b6:03:86:ca:
                    0e:8a:3c:76:5e:be:ff:1b:6b:5f:2f:14:80:e4:14:
                    3a:45:48:25:c2:95:12:51:f4:f7:5c:91:4b:07:ff:
                    b7:3c:6d:d0:72:81:ef:ee:10:c9:b0:bc:08:48:0d:
                    7c:ea:f0:27:c8:88:ab:82:9c:3f:ce:63:b4:64:4f:
                    23:c1:7d:77:54:a5:e2:17:32:fa:7f:4f:9f:a5:33:
                    20:cc:77:ef:46:d3:56:db:b0:2b:0b:0d:ee:b5:d0:
                    70:5f:f3:5c:f3:91:49:9a:1c:7b:da:d3:9b:8a:03:
                    25:f5:1e:fc:17:93:37:4d:fc:86:a6:c1:6d:46:a5:
                    02:fb:75:15:02:c6:4c:ce:81:8a:59:c0:c5:5e:40:
                    5c:b1:2f:c2:25:d3:4d:35:39:cd:bc:8c:86:79:f4:
                    99:b9:7a:6e:27:d0:c3:7f:6f:2f:a9:5d:1a:0b:1f:
                    01:8d:d4:10:2c:07:d0:05:34:a0:9f:55:7e:0d:c6:
                    08:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:05:58:9A:42:EE:BD:4C:22:52:71:66:E2:84:79:E0:43:BD:83:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c256502d-0ea5-39a5-814f-abe49429529e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.255.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:61:c2:b6:04:74:f1:54:b0:9a:93:43:18:d5:6f:ae:af:92:
         16:35:df:71:b4:62:12:df:19:92:b5:d7:0d:4d:f5:8d:e8:4e:
         88:f2:6f:e4:8c:05:b9:98:78:e7:b4:86:7e:0d:38:40:15:32:
         0d:e2:18:4d:13:18:c1:f5:c6:44:1e:6b:83:b3:47:14:c6:bb:
         75:9c:41:47:f4:f8:ce:ba:d5:0d:1c:79:f1:86:2b:28:9f:fe:
         80:df:f2:ed:c6:b5:31:3c:5d:a5:5a:07:55:24:43:ce:d7:2d:
         77:a7:8b:35:ef:28:b3:2e:21:34:cb:11:28:0e:70:93:84:cc:
         1e:62:f2:25:46:17:60:1d:a7:1c:2b:f6:84:54:42:a6:ad:63:
         35:22:96:5d:a4:34:d7:1c:76:cc:60:42:65:99:02:30:56:ec:
         bf:48:b1:96:f1:fb:c0:d4:22:80:63:b0:72:d6:75:1f:43:98:
         72:e9:3c:b1:a6:6a:bc:fe:b2:47:3e:9f:be:7c:33:14:af:85:
         69:18:58:fb:e0:db:74:d7:3d:21:d8:21:1e:b4:0c:3b:ce:ad:
         0f:1d:b8:39:44:d3:02:ed:c2:64:18:ae:e8:b5:b2:35:0c:8c:
         75:d8:1c:c4:01:80:a7:f7:ab:8f:9a:0d:33:07:7e:2d:e1:76:
         20:9e:c8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 22:39:55 2026 by rpki-client