Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e1f5feeb-9424-3a65-b8a3-56d031e7b254.roa
File:                     e1f5feeb-9424-3a65-b8a3-56d031e7b254.roa (raw, json)
Hash identifier:          q58oXQksPVSMVwUS1Tw5XuD2M+NuWk3jHACMHdsElxU=
Subject key identifier:   C2:F2:AD:EA:2A:CB:2B:39:69:30:B3:8A:AE:F7:44:3C:13:F9:C4:72
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584ED5E04E775FBC4EE9090D49E0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e1f5feeb-9424-3a65-b8a3-56d031e7b254.roa
Signing time:             Fri 14 Aug 2026 15:27:38 +0000
ROA not before:           Fri 14 Aug 2026 15:27:38 +0000
ROA not after:            Thu 12 Nov 2026 16:27:38 +0000
asID:                     267802
IP address blocks:        38.50.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d5:e0:4e:77:5f:bc:4e:e9:09:0d:49:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Aug 14 15:27:38 2026 GMT
            Not After : Nov 12 16:27:38 2026 GMT
        Subject: CN=3edb4660-4bb4-4715-b056-f6549f9445db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ce:e0:0b:96:48:2b:8c:4e:d8:e5:b7:80:cd:
                    08:29:01:98:f0:91:0f:07:5c:0e:d6:d8:41:1b:aa:
                    e1:ba:64:2d:29:a4:7f:fc:46:37:5e:84:d3:0e:36:
                    b8:6b:e6:0f:d0:fa:35:d2:cb:94:a1:aa:57:ca:37:
                    e4:d3:d2:4e:5c:55:c9:fe:46:46:ef:41:07:6b:99:
                    30:b1:56:c1:6a:83:cf:bf:94:36:dd:54:ee:46:c4:
                    65:29:cf:e7:62:e0:54:4a:a1:58:90:e3:9c:75:a3:
                    be:eb:57:8e:4d:56:bf:53:cb:a3:ca:ca:3e:db:d3:
                    13:73:31:e4:20:f9:44:18:9a:f9:b7:e0:72:68:8c:
                    88:4a:b4:7a:26:80:ec:5b:b9:cb:9d:5b:45:c7:62:
                    19:fc:7d:85:43:fe:18:98:6b:d2:cb:a0:29:55:98:
                    85:ad:c6:6b:42:ed:44:84:f3:b1:dd:16:af:df:f8:
                    59:70:21:6b:e2:cd:97:60:a2:07:bf:ca:a5:15:c0:
                    09:41:bc:a2:97:1d:e9:17:f9:1d:c6:03:9b:1d:a2:
                    da:c7:9b:61:ee:dd:7d:10:d2:74:a1:c3:c1:0c:e3:
                    5c:8e:4e:a1:55:ea:53:7e:94:fe:a0:6d:a6:bf:00:
                    64:a3:3a:9e:c2:3f:f6:40:b1:c9:93:8b:71:8a:b5:
                    4a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F2:AD:EA:2A:CB:2B:39:69:30:B3:8A:AE:F7:44:3C:13:F9:C4:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e1f5feeb-9424-3a65-b8a3-56d031e7b254.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.50.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:75:ed:71:e8:2d:82:17:b9:de:b8:c1:7a:07:d1:1f:2f:85:
         b8:18:b6:f3:7b:e9:68:f1:5e:2d:28:f4:b7:be:d9:e2:e6:c6:
         06:b8:eb:c9:52:f2:52:8a:50:00:26:5b:99:5a:40:eb:8c:27:
         eb:1c:50:aa:de:65:ac:5d:d9:bd:32:76:0a:46:45:e4:7e:ce:
         b7:6f:5f:2a:95:22:7a:d8:a8:fb:a5:7c:fc:e8:dd:a8:ac:d4:
         7e:c6:3d:35:99:59:bc:8e:5b:67:6c:5d:0b:ee:fa:75:d6:b1:
         ec:b0:a1:39:f4:cf:a3:ee:e8:e9:96:2d:82:28:e2:11:82:5f:
         29:fb:99:0a:e8:1e:7a:83:44:d0:95:c9:ed:cb:95:9e:b8:e0:
         6c:18:40:39:b1:2a:b7:95:1a:a2:b8:66:a3:24:58:b0:64:1c:
         fc:1b:98:c1:82:a5:e9:a9:96:0b:9a:a6:2f:f5:de:17:7e:5f:
         0b:c7:72:67:fd:3a:f6:69:f3:4a:bb:40:8d:57:c8:57:a4:06:
         5e:12:f4:88:1e:f2:17:64:45:9f:ba:e5:a6:ad:a7:d7:df:c8:
         39:9d:49:bb:4f:a0:7a:75:93:da:19:44:dc:d3:57:d1:fe:c7:
         6d:b2:03:03:77:6b:39:63:af:95:0e:95:11:69:70:56:48:0d:
         60:bd:87:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:08:10 2026 by rpki-client