Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/cc562341-5f80-33bf-a574-8ca3c5dc036c.roa
File:                     cc562341-5f80-33bf-a574-8ca3c5dc036c.roa (raw, json)
Hash identifier:          KlN8GC12JvsjR0TuF/CLb4JBdAnAkPEJZq1FyWx01Ns=
Subject key identifier:   3B:1B:59:CA:63:3F:B7:3B:AB:AA:73:1E:18:FE:1D:65:77:27:D4:2F
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D1B19E69EEE2997A3B53FDF40
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/cc562341-5f80-33bf-a574-8ca3c5dc036c.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     266734
IP address blocks:        38.56.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:19:e6:9e:ee:29:97:a3:b5:3f:df:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=ea841499-8247-4a8f-b7ea-e9fa8c35cde7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3e:36:46:cb:c0:b5:f0:3a:b3:f7:17:91:71:
                    d8:ce:2d:b8:5a:d9:17:64:4a:4c:1a:44:52:03:05:
                    89:9d:9e:5b:29:2e:3d:ef:bd:c4:c8:28:c2:2b:dc:
                    88:72:02:23:e5:d5:f9:6a:f1:a4:15:c1:00:b2:5f:
                    b4:55:0f:01:f5:15:ab:32:74:f6:eb:2d:ff:c6:61:
                    65:76:8e:a3:93:4d:c7:29:35:72:dd:03:43:16:42:
                    e0:56:a2:32:d7:7e:bf:c6:79:03:d5:bb:6a:3a:28:
                    2d:a6:e5:0e:20:f2:d4:8d:a6:77:6e:9f:c3:ed:f7:
                    4a:62:5f:e8:dc:0e:a7:80:51:c1:d3:5b:72:85:28:
                    59:3c:39:5a:53:1f:da:2c:40:3f:60:8b:e5:69:80:
                    e1:7a:b4:47:4b:d4:ad:e7:b8:cb:75:97:69:de:23:
                    7d:c4:fe:5f:f0:47:7d:62:a6:45:db:60:df:79:98:
                    9b:01:3f:45:41:6b:20:a5:fe:89:dd:12:dd:43:34:
                    d2:2c:95:ea:b2:5c:96:b7:10:62:2a:a0:32:ad:0f:
                    a7:28:6d:d1:28:08:c4:1e:3c:95:b6:a6:35:18:c7:
                    39:35:ee:ad:d3:35:23:b8:0e:c8:79:4c:88:d4:75:
                    7b:73:09:1e:3b:43:c1:fe:9d:73:a4:66:6b:77:90:
                    76:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:1B:59:CA:63:3F:B7:3B:AB:AA:73:1E:18:FE:1D:65:77:27:D4:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/cc562341-5f80-33bf-a574-8ca3c5dc036c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.56.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:53:5b:58:c3:58:fd:ad:13:d5:d7:c6:8b:55:1b:1d:93:57:
         00:f7:4c:9a:e3:d5:fa:06:e8:93:0a:31:cf:28:dc:29:2d:79:
         80:59:35:d0:c3:2b:bc:2a:25:ea:33:a8:8f:ac:a0:3c:2b:36:
         44:b0:86:3f:0e:d3:a7:d3:dd:a0:5e:b9:ef:20:13:4f:40:2d:
         5e:85:5e:1a:18:96:97:39:e6:30:15:4c:0e:43:7f:fe:64:48:
         f4:ee:ec:b7:ef:0d:76:c0:ad:0b:4e:9d:42:90:f3:3b:ad:02:
         4b:0f:c2:47:e8:ed:b6:a8:24:8f:f8:14:2f:ac:ce:db:a2:6f:
         e2:b2:55:31:57:09:ce:d5:aa:be:89:7e:49:99:1d:be:87:ec:
         0a:c1:f2:57:c9:21:c3:ca:00:6b:35:95:4d:9f:37:9d:eb:b8:
         14:18:4c:82:6d:fb:2a:4f:5e:de:2f:fc:9b:80:f3:eb:5b:69:
         96:6b:6d:08:86:45:ec:3f:8d:aa:57:b0:12:31:b0:2b:f6:33:
         08:d0:ba:f5:19:6a:95:a8:67:f9:eb:00:11:87:88:66:9b:6a:
         51:9c:f1:15:73:7b:7a:58:79:d6:8d:37:38:46:0c:96:a3:3d:
         cb:d1:8c:14:d2:3d:9c:9a:b4:16:3f:92:5b:b8:15:56:ff:6b:
         2f:6a:f8:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 18:23:42 2026 by rpki-client