Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c6db1d34-76fc-36e7-9276-34dfecc365f0.roa
File:                     c6db1d34-76fc-36e7-9276-34dfecc365f0.roa (raw, json)
Hash identifier:          n2UXv2bCwgfwB6DVf8yFtdOZH4M2IyN1NKu2Q/yidlE=
Subject key identifier:   8F:87:B8:15:D3:71:9C:B9:55:7A:96:88:16:4A:7A:02:F1:4E:BE:AF
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D1F49FCB1DC4CB9BE628118C0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c6db1d34-76fc-36e7-9276-34dfecc365f0.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     0
IP address blocks:        38.69.176.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:49:fc:b1:dc:4c:b9:be:62:81:18:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=2eccc506-e95f-4a8f-9d72-1ff995587fc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:8e:c1:5a:28:92:37:74:af:7b:c6:7e:24:92:
                    57:65:86:9a:33:b8:e0:ac:36:db:8f:d7:b2:81:18:
                    28:d3:58:83:40:3f:a6:0a:df:42:05:59:0a:79:00:
                    31:06:87:07:56:f3:a4:89:e3:00:83:db:19:16:a3:
                    02:0c:5e:98:24:45:74:7c:c6:b7:ac:c7:a3:f2:bb:
                    7c:bd:e2:c3:03:98:d9:c0:bc:7a:cd:43:98:36:11:
                    ee:8b:f7:36:7d:de:86:73:8a:52:12:95:74:fb:77:
                    d3:ae:72:15:35:00:5e:e1:d8:fd:46:3d:ed:3c:25:
                    a3:de:54:d3:19:ab:ff:8c:af:37:62:a5:69:29:d1:
                    1e:62:85:21:1e:a2:77:dc:4d:07:39:2e:a9:87:13:
                    c7:d4:24:a2:eb:f8:2b:d1:56:35:c2:39:dd:45:84:
                    b8:4d:b7:90:5f:9f:2f:97:b1:ee:3f:bf:a0:fe:c7:
                    28:06:12:13:9c:b0:ec:9f:dc:a7:4e:49:9e:48:3c:
                    90:2d:51:16:1c:02:57:49:9b:73:99:a0:f0:fc:2d:
                    0c:e2:d2:58:bb:a1:6d:1e:72:4c:b6:77:dd:1b:82:
                    df:a8:51:66:c9:9b:71:70:65:29:15:6a:22:49:94:
                    a3:36:0d:4d:90:95:07:84:74:46:94:fd:56:95:cf:
                    85:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:87:B8:15:D3:71:9C:B9:55:7A:96:88:16:4A:7A:02:F1:4E:BE:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c6db1d34-76fc-36e7-9276-34dfecc365f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.69.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:9c:82:55:e4:71:b2:9e:0a:e5:c6:89:e4:98:a7:9d:c0:32:
         9b:d4:ec:7a:60:4b:f5:cf:32:dd:97:c2:55:4e:9e:87:27:b1:
         c3:b4:00:27:3c:ef:48:8a:2d:98:6b:52:6d:f5:5a:1d:1a:99:
         3f:b4:3d:06:aa:1d:70:4e:83:19:73:e1:22:ce:f1:87:d2:46:
         04:94:c0:42:1d:f7:90:83:b5:1f:80:2a:f2:3a:92:ea:42:4d:
         c9:1e:12:e2:97:94:ea:ae:52:f1:55:b6:a8:6c:0e:ed:d4:ba:
         66:bd:21:d5:1b:9d:f7:0d:b5:3e:58:80:34:79:b4:86:4b:ad:
         10:28:6a:41:c9:73:10:12:aa:dc:7c:f3:21:81:74:3f:9d:76:
         1e:ba:69:e6:77:4a:86:83:92:b0:1c:ac:99:83:3a:ca:82:95:
         56:66:3d:fd:aa:d9:41:87:dc:df:19:92:15:90:b2:b1:fd:5d:
         a6:97:22:2c:cb:02:2c:18:63:a4:90:da:0f:47:7d:ee:8b:be:
         c3:6f:db:21:04:35:91:f6:2c:44:f7:ba:7f:7f:42:0d:fd:80:
         a3:cc:57:47:ac:08:30:d7:ff:e1:68:6b:dd:d0:c4:b2:31:8f:
         96:4c:4a:34:fd:c8:ee:18:00:a7:9b:a0:76:ce:a0:ec:54:59:
         d7:b3:ce:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 18:21:02 2026 by rpki-client