Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e038145d-591c-331e-ac0a-50038f1a60b3.roa
File:                     e038145d-591c-331e-ac0a-50038f1a60b3.roa (raw, json)
Hash identifier:          Eq+L0RLsn64Qrz7Z17/3vp7hvBLFBrK7Dn9M92MaiBY=
Subject key identifier:   C2:5B:18:C9:6E:0D:49:D6:69:49:57:0C:D1:2A:D5:EA:64:AA:ED:4B
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E587C847B48B90A4B91464180
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e038145d-591c-331e-ac0a-50038f1a60b3.roa
Signing time:             Tue 30 Jun 2026 17:30:32 +0000
ROA not before:           Tue 30 Jun 2026 17:30:32 +0000
ROA not after:            Mon 28 Sep 2026 17:30:32 +0000
asID:                     0
IP address blocks:        38.141.184.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:58:7c:84:7b:48:b9:0a:4b:91:46:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jun 30 17:30:32 2026 GMT
            Not After : Sep 28 17:30:32 2026 GMT
        Subject: CN=fbbe3d67-b060-4250-9909-8dcecc87fd91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:77:90:25:0d:dd:70:40:8b:48:79:79:12:8e:
                    7c:25:56:c3:a7:14:6e:16:9b:fa:c4:50:1e:9d:44:
                    af:3e:1f:b3:26:a7:be:f5:39:df:7e:ad:b7:eb:70:
                    29:be:ae:2a:35:6b:8a:02:f4:d3:97:62:9f:6f:4a:
                    f7:99:9c:5c:c7:d7:5b:5d:2c:50:3b:82:ff:61:58:
                    29:5f:37:24:02:1a:22:0d:04:a5:c7:93:7a:95:ed:
                    c5:57:8b:da:c1:8d:1d:7f:d7:18:4f:44:05:6f:42:
                    f9:05:b4:ff:87:7f:7a:0d:b7:b9:2d:38:75:04:e5:
                    83:9b:1f:44:33:1e:c1:97:17:af:92:9a:1d:4f:c2:
                    37:05:b9:2a:f5:de:9e:e7:d9:12:4a:c7:82:ac:49:
                    f1:20:80:d6:4e:c8:c5:2b:45:7f:4b:3a:4d:16:1e:
                    b3:03:d7:a3:63:a8:a7:a8:4f:9b:60:d9:cf:33:f1:
                    ef:b1:69:b7:67:94:aa:a8:9a:10:d7:66:0c:ad:8a:
                    ae:28:4a:28:23:21:6f:bb:1a:0a:01:7f:c4:1a:ee:
                    46:4c:c1:39:c1:6d:dd:a2:05:ee:f8:90:d8:db:6d:
                    87:b6:04:69:9f:74:d1:1c:9a:11:e4:a6:b7:d6:44:
                    43:a9:41:75:50:3f:b8:26:04:36:6d:4d:fc:cd:87:
                    76:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:5B:18:C9:6E:0D:49:D6:69:49:57:0C:D1:2A:D5:EA:64:AA:ED:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e038145d-591c-331e-ac0a-50038f1a60b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.141.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:6b:6d:74:47:48:cc:73:03:d4:d9:0e:44:74:23:20:51:cd:
         00:8d:24:a8:a6:d4:e1:55:5b:5b:15:14:c3:60:cc:e0:d6:26:
         1a:97:7f:67:34:9d:76:a8:20:95:f7:4b:c3:0b:93:88:70:2a:
         4d:d3:fa:16:82:c7:28:f7:e6:e2:5f:5e:35:27:63:7f:8e:25:
         15:16:f2:4b:11:5b:dc:cc:25:fe:44:f4:1e:e4:98:5c:53:4d:
         0b:4c:39:c8:d2:30:9f:5f:9a:08:04:32:f3:aa:92:0a:a2:6d:
         bd:ee:81:cb:d1:e8:c4:e1:ed:c0:c8:15:95:e0:c0:69:44:ee:
         78:ff:07:62:72:00:97:dc:a6:59:3a:68:11:bc:ab:c9:9d:01:
         6d:a9:ed:52:08:75:60:01:52:c5:04:30:9d:a6:5c:dc:c0:02:
         d4:36:e7:28:fa:90:d5:d4:47:fc:9c:00:91:9c:ac:cd:0d:e4:
         47:9b:b1:b1:45:c4:a0:d3:ff:88:9c:a4:6e:50:9d:67:75:9a:
         16:fa:e0:d7:9c:db:6d:b6:70:9c:8d:7d:be:1d:a6:52:ef:56:
         29:9c:89:05:13:8e:76:0a:ef:fa:8f:36:da:01:3a:0f:c3:43:
         b6:d8:e4:99:72:bd:be:fd:e9:4c:48:ec:6f:73:20:01:d7:4d:
         73:4a:e9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 09:43:32 2026 by rpki-client