Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d2981796-274c-3162-870d-8fea0cac58b4.roa
File:                     d2981796-274c-3162-870d-8fea0cac58b4.roa (raw, json)
Hash identifier:          iT74Wx7jbpWM+hezejQpKdN6Afv3C0sWyZtXLZsyfRY=
Subject key identifier:   64:22:63:64:94:A6:3C:2A:D8:25:EA:37:12:53:93:80:9A:34:27:B9
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D20AF49DB9F0058F8BF9A0800
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d2981796-274c-3162-870d-8fea0cac58b4.roa
Signing time:             Wed 11 Mar 2026 01:00:32 +0000
ROA not before:           Wed 11 Mar 2026 01:00:32 +0000
ROA not after:            Tue 09 Jun 2026 01:00:32 +0000
asID:                     25980
IP address blocks:        38.110.37.0/24 maxlen: 24
                          38.123.246.0/24 maxlen: 24
                          38.131.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:20:af:49:db:9f:00:58:f8:bf:9a:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Mar 11 01:00:32 2026 GMT
            Not After : Jun  9 01:00:32 2026 GMT
        Subject: CN=323c0e40-d7ea-4844-b717-eae838e6d2cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:04:f7:76:b7:7c:aa:e5:03:10:d2:fa:af:fb:
                    80:e7:1b:74:ef:e6:8b:a1:8b:49:81:ec:ab:39:0f:
                    4d:5a:04:5e:84:3a:76:fe:5a:a5:bd:54:f3:f2:27:
                    d7:ec:f4:8f:4f:06:b2:ea:d7:61:47:c3:45:1c:6c:
                    2f:95:a5:34:a1:21:fc:15:57:22:9e:dd:2f:7b:d1:
                    f0:e7:53:82:81:2a:5e:32:cc:18:2f:0d:8d:99:e4:
                    0d:8f:76:ae:27:50:4b:92:fc:a8:a9:86:a3:9f:49:
                    2d:23:74:75:a9:a4:e4:4d:11:ad:70:41:8d:3c:2a:
                    e9:c5:5d:7d:ae:d5:9e:b8:4a:69:9a:f9:91:c1:5a:
                    11:bc:ec:b3:91:9d:cf:fd:48:42:13:9b:1b:24:84:
                    e8:42:a7:ef:03:aa:53:25:de:a3:55:29:c7:e5:57:
                    15:c1:fa:8b:56:cc:05:00:5c:3b:ed:cf:49:94:d1:
                    ab:58:cd:6e:1f:36:88:0e:f9:84:80:8d:df:ea:d2:
                    f4:60:81:01:83:6c:db:b1:2f:8c:4b:95:85:75:88:
                    e8:a9:20:43:d2:73:df:61:18:ed:09:38:f2:af:39:
                    13:ac:37:4e:31:a5:0a:c9:e6:42:1a:f3:93:4b:8f:
                    2e:b0:51:48:38:72:4a:09:1e:b7:5e:a9:f5:6c:4a:
                    63:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:22:63:64:94:A6:3C:2A:D8:25:EA:37:12:53:93:80:9A:34:27:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d2981796-274c-3162-870d-8fea0cac58b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.110.37.0/24
                  38.123.246.0/24
                  38.131.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:2b:e1:2b:bf:68:b7:08:35:f5:23:29:64:c0:61:4b:32:ed:
         df:b7:cb:d3:94:5b:31:ad:38:fd:37:f8:6c:79:35:12:dd:e6:
         53:35:95:f1:7e:9e:28:66:33:36:3c:8d:c7:09:61:22:d4:bb:
         07:a2:cd:a8:74:0d:9d:02:fa:db:93:f7:7f:ef:53:2d:b4:66:
         9e:f2:82:4f:f9:fb:c0:23:88:8d:13:2d:39:6a:6f:70:db:c4:
         5a:99:62:7f:98:d5:7e:19:92:37:b0:be:88:6b:fa:34:35:e7:
         cf:d0:a0:be:2f:67:95:4c:5a:62:3e:e2:f8:5b:e7:ff:d0:46:
         d4:ee:5d:4e:c7:03:4a:34:81:5e:63:39:48:79:0b:a5:a2:25:
         39:80:d5:9f:59:75:c9:71:84:49:2c:3c:c2:b9:a2:5e:b1:ee:
         96:95:15:d5:c8:10:98:66:54:b5:7e:fe:1e:45:47:8d:e4:09:
         a8:4d:e7:51:bd:16:57:a3:7f:81:79:b7:c5:69:45:a5:e2:16:
         8b:c2:84:50:5b:67:a9:99:3e:34:0c:97:29:b0:1e:69:4a:24:
         2d:07:38:ed:ae:eb:52:17:2f:13:72:29:b7:54:c6:6e:2c:e3:
         bc:d7:7d:6b:aa:9b:d1:eb:d1:76:ca:4b:33:5a:25:19:2f:5b:
         90:ee:6b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 18:25:23 2026 by rpki-client