Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/da7bba2d-df04-33bd-850f-6270928bab48.roa
File:                     da7bba2d-df04-33bd-850f-6270928bab48.roa (raw, json)
Hash identifier:          IflEqxI3dtcxqY93o48/4bodFOno3qm2k05RgEliiHM=
Subject key identifier:   77:44:96:78:DF:F5:D1:46:11:ED:C9:EC:A1:10:0A:C4:24:FD:90:4C
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F89A84AFB8B963EB2AE6A9480
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/da7bba2d-df04-33bd-850f-6270928bab48.roa
Signing time:             Sun 18 Oct 2026 01:00:13 +0000
ROA not before:           Sun 18 Oct 2026 01:00:13 +0000
ROA not after:            Sat 16 Jan 2027 02:00:13 +0000
asID:                     36273
IP address blocks:        38.192.0.0/17 maxlen: 24
                          38.192.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:89:a8:4a:fb:8b:96:3e:b2:ae:6a:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct 18 01:00:13 2026 GMT
            Not After : Jan 16 02:00:13 2027 GMT
        Subject: CN=e0cab80a-ae44-4f02-ae60-813580fa23de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:be:a5:84:63:87:46:0a:78:e5:ae:f7:a9:7d:
                    fb:d5:db:96:f0:f6:7f:37:c4:84:bb:21:db:7c:6d:
                    01:e8:b6:2b:d6:be:1f:67:49:12:52:a2:51:81:6d:
                    9e:cc:73:12:76:ef:a0:5c:98:f3:e6:58:f3:38:c6:
                    25:3d:a9:7c:0e:c9:51:38:52:ff:8c:30:ff:6a:68:
                    9c:af:22:2f:7a:5c:f7:e6:bc:60:81:4a:aa:a0:34:
                    e7:56:2a:e6:cd:52:dc:aa:a7:cc:5c:19:4a:bb:f8:
                    2f:1b:e0:1c:5a:5b:cc:ea:29:d9:c3:ed:11:ce:5c:
                    31:af:0a:0e:c3:75:a0:df:6b:aa:81:ea:5e:4d:ae:
                    41:c8:49:0d:77:b6:67:11:bd:af:d1:22:55:92:92:
                    06:96:79:ad:ba:16:c5:f8:14:9f:59:cd:3d:91:54:
                    ac:d5:0b:a8:27:6b:96:ea:40:7e:0a:d6:d1:04:9c:
                    0b:10:a7:9e:67:26:29:f0:d5:9d:87:1b:d1:31:ea:
                    60:94:1d:d9:95:e0:b2:f5:fe:2a:a0:ae:68:dc:86:
                    13:0f:e4:cd:4f:92:6f:f5:b5:39:c3:e0:f5:ce:b7:
                    9d:e5:85:bf:2a:8e:f8:8b:39:1c:3f:d0:e0:9a:e1:
                    55:f7:1b:c3:0c:92:39:5f:77:a4:60:10:8a:fc:9b:
                    33:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:44:96:78:DF:F5:D1:46:11:ED:C9:EC:A1:10:0A:C4:24:FD:90:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/da7bba2d-df04-33bd-850f-6270928bab48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.192.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:4c:b4:93:56:02:a1:00:91:9d:d3:2c:ac:f7:f0:0b:7f:fd:
         fc:d3:e7:21:80:a3:fd:b9:59:3c:88:10:c7:3a:e4:a9:bf:d9:
         d7:d2:c7:8e:27:35:8e:01:55:34:b2:2a:e9:2e:94:41:2f:f0:
         56:93:be:1e:e1:a9:9b:1c:23:f4:c8:74:07:a8:31:a3:86:3d:
         40:3f:23:f2:ee:b1:2a:c5:d2:ae:8e:84:9f:16:53:97:87:ce:
         4d:d0:69:5f:4b:96:bb:2d:ad:cc:36:bb:20:0d:65:a9:1b:32:
         7b:c0:e2:ba:e3:6f:0b:4a:da:90:40:2d:96:ce:5d:4c:9c:8a:
         d3:72:f8:f2:c2:39:a9:be:1a:09:93:c7:2b:98:cf:a0:34:fe:
         f6:8b:3e:cf:d1:e5:aa:5e:29:65:39:e4:e6:39:00:f2:da:44:
         e4:b5:b4:5d:f2:8a:bc:09:1c:eb:8f:9f:35:6d:81:e3:b7:fb:
         d8:66:d7:1d:45:f7:9f:75:1f:b6:57:b2:d8:0d:39:e8:6b:4e:
         96:c3:55:a4:68:9c:f2:4f:12:30:6b:55:34:31:4e:9c:78:3f:
         6b:16:6a:68:85:3e:7e:74:ad:66:b1:bf:f3:e5:b2:72:f2:55:
         2b:28:d1:6d:e2:45:ae:65:39:9b:74:b8:95:31:a5:be:09:68:
         4d:58:2a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 20:28:13 2026 by rpki-client