Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c323119a-883a-302d-ac20-7359fa37bc88.roa
File:                     c323119a-883a-302d-ac20-7359fa37bc88.roa (raw, json)
Hash identifier:          8FT8BhDu6yWXd7ak8C4lBpKb0UZtgGVo649GYDeCVvU=
Subject key identifier:   41:E2:D7:8D:ED:6A:C0:F2:7F:63:D3:44:FE:E3:AD:48:4E:00:17:89
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584EA79503EB2F44DB9E7EA0F480
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c323119a-883a-302d-ac20-7359fa37bc88.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     273843
IP address blocks:        38.92.20.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:95:03:eb:2f:44:db:9e:7e:a0:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=8447a2b5-aaee-4cf2-9975-ae1b60f7f220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:12:b3:7e:27:ba:16:ce:ae:d3:5b:f6:ee:b0:
                    2d:b1:26:03:5b:37:28:da:34:94:5a:f7:46:2a:e6:
                    b3:4c:c2:8c:16:dd:ef:89:6b:7e:6c:98:7f:23:cf:
                    58:bc:e3:e0:84:87:b7:bb:46:2b:15:48:e8:a4:5b:
                    9e:dd:7a:97:b4:01:ca:6e:e6:f8:e7:85:5e:78:75:
                    3e:98:47:cb:58:b6:c1:4d:ca:b6:e0:74:58:75:71:
                    30:1e:94:a0:cb:f6:72:09:d9:88:52:d7:83:74:40:
                    52:ed:d8:8f:2a:64:b2:48:48:fa:2e:da:7b:b8:17:
                    3e:51:6d:30:cc:8b:ba:f0:23:06:44:ef:bf:fa:5d:
                    c2:58:59:3c:84:9f:2b:03:ca:90:d6:4f:7e:07:dd:
                    01:26:bc:86:e0:37:b0:69:70:5a:32:9f:f0:74:d3:
                    78:cf:ba:2d:50:de:d6:53:ed:66:b4:2f:b1:1d:3f:
                    3e:95:5e:95:77:ba:e3:94:bd:0e:52:11:ac:05:c9:
                    7e:c8:b2:18:d2:7e:6f:30:18:bc:fe:19:f5:90:1a:
                    3d:7a:2d:e8:ac:5e:e5:ae:ba:0e:58:59:a3:1b:7c:
                    ba:57:51:b3:11:b7:97:25:2b:67:66:d0:17:0c:4c:
                    db:b3:46:6b:fc:82:66:fd:64:b4:79:41:6a:a2:6e:
                    9d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E2:D7:8D:ED:6A:C0:F2:7F:63:D3:44:FE:E3:AD:48:4E:00:17:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c323119a-883a-302d-ac20-7359fa37bc88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.92.20.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:a3:71:c3:7e:a9:bd:ca:4e:2d:4c:a9:14:75:7e:31:de:7a:
         82:ea:52:aa:7a:c4:08:78:cb:97:08:e3:42:bb:a9:ee:f7:b7:
         c4:30:f9:e0:42:5a:21:19:b5:ea:a3:5b:73:89:1b:82:c3:e8:
         e5:20:30:96:24:ab:f0:cc:1d:1a:13:37:0e:2e:b0:0e:7f:e1:
         29:07:71:71:d0:be:30:7e:12:b0:40:02:95:fd:a2:5b:7f:35:
         d4:59:d5:eb:50:b0:3e:11:2f:8b:3a:4f:a3:fb:47:ab:f4:4e:
         64:9d:fb:7e:a9:f1:a9:2d:7c:b0:cf:65:64:d6:0e:b8:cc:e5:
         88:3e:bc:7a:0d:9b:29:5e:34:e6:9d:28:2d:a6:6c:d1:8e:e7:
         18:23:e8:ab:1e:ce:1d:e2:ad:ce:2a:14:7b:b8:05:9f:b9:45:
         14:25:0e:39:ba:74:6e:9f:b5:dc:ed:ea:21:e3:25:02:cb:42:
         46:b7:e2:9d:1c:ac:3f:13:af:f0:36:9f:f3:d7:51:cb:fb:99:
         40:6d:70:95:db:be:4f:a5:ef:9d:c9:f5:40:3f:c5:f1:ff:73:
         76:07:09:06:29:ba:f7:87:04:33:a1:0c:ba:a3:41:80:a3:36:
         c5:fe:ee:fc:a8:2d:77:61:66:c4:11:87:34:81:dc:6b:c4:dc:
         35:f8:27:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:28:23 2026 by rpki-client