Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c58360b9-f0a8-397a-93e3-24f9a496fa40.roa
File:                     c58360b9-f0a8-397a-93e3-24f9a496fa40.roa (raw, json)
Hash identifier:          HhK3JNoGcUaMCPdq3gUGUP1eSckZTh3H3xVERSl6PPU=
Subject key identifier:   29:1C:A9:F9:0D:6B:6D:D3:F8:68:49:5F:0D:6D:13:46:0D:6E:AC:60
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E043601EF6DC571199390F680
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c58360b9-f0a8-397a-93e3-24f9a496fa40.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     55066
IP address blocks:        38.76.248.0/24 maxlen: 24
                          38.76.249.0/24 maxlen: 24
                          154.51.10.0/24 maxlen: 24
                          154.51.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:36:01:ef:6d:c5:71:19:93:90:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=f21b89fc-18d8-4b38-8934-b47fae317c31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8d:13:c2:91:e9:53:e0:e6:92:4e:7e:e0:30:
                    40:bb:20:33:19:e5:2e:c4:59:f4:c1:2c:45:1f:9c:
                    d2:7a:9d:23:68:07:20:6b:6e:ec:4f:4a:29:12:56:
                    f3:54:91:5a:5c:22:c5:a6:91:63:57:9c:ae:5e:93:
                    db:19:ed:81:0b:bb:ae:2e:c5:43:e8:0e:f8:3d:15:
                    fe:58:5a:9f:14:4b:54:1b:59:38:de:d8:41:36:b1:
                    fd:dc:86:06:3c:3b:b6:a8:43:f4:6b:a8:8c:07:a7:
                    57:d2:2b:27:24:65:70:67:e0:f1:ef:99:a3:9c:1a:
                    87:c1:32:46:ba:62:ba:ad:bb:fb:d2:81:e6:10:17:
                    83:8d:79:83:63:26:1a:23:dc:67:3c:3d:90:b9:d9:
                    f1:4c:7d:6c:01:cf:27:63:7e:5c:93:f5:33:f9:27:
                    6f:d2:20:d5:e7:85:31:27:8a:75:dd:9d:1c:e3:ea:
                    b0:6b:67:85:5d:3e:45:b8:60:f4:2d:d7:bc:46:7e:
                    f6:eb:ee:f3:17:6d:84:4c:54:48:a4:9c:54:ec:27:
                    cf:80:e7:99:f0:33:8a:23:f7:31:0e:3d:e9:e4:fd:
                    37:cb:29:68:23:3e:46:32:a3:aa:5b:6e:ac:1d:de:
                    bf:52:c6:d2:b8:a4:2a:28:50:46:5c:32:20:54:ce:
                    3d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:1C:A9:F9:0D:6B:6D:D3:F8:68:49:5F:0D:6D:13:46:0D:6E:AC:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c58360b9-f0a8-397a-93e3-24f9a496fa40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.76.248.0/23
                  154.51.10.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:7d:7d:da:15:94:2a:4d:1e:21:03:1e:5d:29:68:39:03:ac:
         4d:32:de:1c:46:07:13:a7:a3:8c:98:3c:31:d3:d9:e3:2a:97:
         4d:cc:8e:da:de:68:cb:81:ef:89:5c:eb:d4:8d:63:a1:fe:cd:
         d9:24:b1:8e:b6:31:cc:ac:0d:e9:e4:b1:ec:84:fd:11:62:d8:
         d9:08:fc:b2:72:25:11:fc:79:a8:45:f7:26:07:01:df:5d:36:
         21:c2:dd:79:02:19:be:bc:e5:3c:66:67:21:47:17:86:8b:8d:
         e1:62:19:07:87:82:b9:0b:cd:a5:0e:f4:aa:cb:c8:01:2f:02:
         e2:38:a7:24:41:9b:f3:89:7b:f6:b8:84:b7:b0:ca:2d:6c:eb:
         93:65:a4:db:53:74:ec:c0:67:b8:2a:6f:38:c5:50:2d:44:60:
         b8:bd:fe:b6:e3:21:05:ff:ea:12:e7:e0:d7:3b:ac:e9:5c:fc:
         9e:8d:8a:50:f7:51:be:07:23:87:86:fe:63:28:d8:19:0e:7a:
         e6:84:ff:9b:59:49:91:3e:17:cc:d8:bb:70:df:a1:08:f3:21:
         28:1a:eb:4a:cd:72:52:a1:d7:de:60:5f:43:07:60:e5:6c:c6:
         c5:76:b7:7a:69:46:20:54:83:10:b0:ca:a6:7a:41:69:ee:a7:
         e6:55:b7:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 7 00:32:26 2026 by rpki-client