Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d108572b-f150-32d2-81c4-9d17185769b6.roa
File:                     d108572b-f150-32d2-81c4-9d17185769b6.roa (raw, json)
Hash identifier:          FrYKry6sHeExyZm3mMmJgyoQsDjudEUCBAXbHzEO1PM=
Subject key identifier:   29:35:0A:84:9C:EA:F3:62:63:FB:00:94:E0:07:E6:6C:50:4C:33:C1
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584EA7951AC1BA3ABBBD95C2AA00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d108572b-f150-32d2-81c4-9d17185769b6.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     32455
IP address blocks:        38.77.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:95:1a:c1:ba:3a:bb:bd:95:c2:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=41a961f8-1910-4fd7-aa95-a11585316e52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d7:a1:3f:05:20:a2:f7:da:32:ad:06:2d:a6:
                    05:09:d5:bd:5f:cf:fa:f9:8a:46:23:49:93:e9:69:
                    53:87:e0:e3:c4:49:7a:d9:69:04:9b:8d:5c:87:dc:
                    f0:55:39:3a:d9:bd:ba:8a:6f:6f:a5:31:fc:b2:6d:
                    ee:bd:47:81:e3:62:42:64:7e:69:2b:2c:79:23:a3:
                    2d:7d:b8:6d:ae:cd:e3:fa:dd:5a:c8:0a:0f:4d:db:
                    1d:d8:b7:c0:7a:15:60:24:02:c9:ba:b1:57:29:43:
                    d9:17:1c:c3:eb:ea:92:54:cf:33:68:34:ec:1d:0c:
                    cf:45:e7:8c:cb:8d:d1:55:97:72:1d:df:f4:01:63:
                    0e:d5:b8:76:0e:cd:b9:8c:7e:19:59:aa:33:a8:55:
                    f8:7e:7b:52:32:8c:d3:82:5b:cd:f2:a4:8d:33:a6:
                    1c:fc:43:b2:b9:9b:6f:86:44:21:ed:52:de:07:51:
                    2e:6f:cc:4e:1b:26:3e:59:01:ce:a6:25:df:be:31:
                    fb:85:a9:67:95:08:34:1a:6a:68:53:1c:57:de:e0:
                    26:11:f5:fa:37:a0:e6:3e:fe:2c:35:cb:b8:c6:4d:
                    ac:05:a8:d7:9a:37:59:1d:42:ab:a7:b1:4c:2b:fa:
                    3c:f0:62:c1:0e:4e:05:25:22:ec:0e:34:28:a2:13:
                    43:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:35:0A:84:9C:EA:F3:62:63:FB:00:94:E0:07:E6:6C:50:4C:33:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d108572b-f150-32d2-81c4-9d17185769b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.77.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:0f:45:86:92:0b:5d:36:d4:af:ef:7b:37:c1:ec:d1:8f:8e:
         ff:f8:8c:2d:de:75:67:42:ba:6c:4e:64:22:1f:93:f3:68:bb:
         7c:51:ea:61:c6:b3:53:18:15:40:c8:3b:15:32:89:4e:8e:f1:
         52:0c:bc:cd:81:2f:91:38:26:dd:58:63:a3:f3:aa:f1:0b:6c:
         5c:1c:5f:30:85:32:97:6e:ed:96:c8:2a:e5:1a:71:bf:18:fa:
         64:31:d6:9e:a2:26:49:ed:b1:b0:28:48:93:ca:2a:6e:d3:c8:
         c5:94:49:92:b9:e5:3f:9c:6e:ce:74:33:9f:5b:0e:9d:0e:67:
         ec:b0:1d:5d:28:d0:2f:89:dc:4f:d7:59:23:cb:09:88:9e:eb:
         d4:05:cf:77:cc:33:e8:c7:56:46:9e:1d:58:1b:7f:f9:df:20:
         0a:a6:8b:ba:4a:4e:ca:30:df:73:af:8c:19:5b:db:0b:d8:6d:
         67:b5:be:43:ce:f2:c0:2d:09:f0:d6:f0:8b:29:04:74:ed:1a:
         49:b0:f2:5c:e2:8a:a1:68:4b:9e:5a:c4:27:1f:63:06:3a:65:
         a9:0a:b3:cb:b7:35:d9:59:26:e4:37:d9:bb:ff:9b:2c:8a:28:
         26:c1:67:73:4d:ca:c5:cb:57:1d:fb:92:aa:2d:25:4e:21:8f:
         5f:09:1e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:12:38 2026 by rpki-client