Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e20b336c-beb8-3213-bee8-1f4676f34006.roa
File:                     e20b336c-beb8-3213-bee8-1f4676f34006.roa (raw, json)
Hash identifier:          k3hhUfiQY31G0kKcXB6bl6OCl7JaTWxcA8Y4lEd4+lk=
Subject key identifier:   34:4C:D6:FD:E3:F0:1B:D7:64:CD:21:C2:FA:EC:34:F1:A0:10:30:5C
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584ED431DD142AD2377543FD28C0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e20b336c-beb8-3213-bee8-1f4676f34006.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     141753
IP address blocks:        38.98.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:31:dd:14:2a:d2:37:75:43:fd:28:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=b87fabd3-3238-499c-af55-f21475d6842e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:44:11:08:26:df:f1:1f:81:a8:d2:18:d2:79:
                    81:ca:0d:9f:46:af:b0:f0:fa:cd:56:90:ce:33:26:
                    01:3d:da:bf:1b:a6:1c:a6:6b:f6:ac:60:e1:40:d7:
                    e4:aa:5b:c6:76:63:f2:99:df:9e:2e:fc:66:c5:f2:
                    47:0e:0c:a2:1d:56:09:89:32:86:ce:31:2e:ed:4a:
                    29:b5:b2:8e:af:d4:0a:06:e1:bc:08:83:0f:01:aa:
                    30:f4:b3:a8:32:2f:10:dc:ed:06:92:26:6a:6d:c8:
                    86:d1:1e:b5:44:f8:2f:2e:c3:b5:10:0a:7e:2b:d6:
                    ef:7f:cf:c1:48:e1:73:a0:9c:a3:34:07:4b:61:a9:
                    4b:71:df:ca:6d:5f:8d:ca:29:23:55:69:2f:77:98:
                    00:89:47:1c:67:95:fe:24:98:37:59:4e:c1:99:c4:
                    5b:26:57:7c:c8:59:01:5f:de:3b:18:72:6e:bd:43:
                    7a:71:53:60:e9:6b:bc:2d:31:b0:6b:e6:67:9c:fd:
                    f4:9e:19:5c:95:74:08:14:8d:40:b0:79:f7:15:0b:
                    e6:9c:b5:e1:eb:7a:be:51:1e:d4:4d:6a:c7:42:17:
                    58:c4:4b:26:01:c4:9d:d9:f4:c9:9f:b4:38:7f:ca:
                    52:a0:83:e2:6f:43:84:57:f6:97:ae:9a:96:f0:e1:
                    8b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:4C:D6:FD:E3:F0:1B:D7:64:CD:21:C2:FA:EC:34:F1:A0:10:30:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e20b336c-beb8-3213-bee8-1f4676f34006.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.98.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:8e:cc:bd:8b:ed:3c:0a:1b:5e:3f:51:4d:fe:04:58:99:a5:
         13:23:63:8e:b0:8e:01:2b:5e:bf:05:c3:7a:71:03:54:bf:a4:
         8a:4e:f2:2f:39:df:bb:4a:7b:30:65:ff:69:18:e5:c1:fc:7e:
         07:0e:1a:1d:db:4f:b3:27:10:01:da:96:12:aa:13:37:61:54:
         c9:6a:fa:41:00:d0:69:60:af:26:ce:a3:6a:07:68:62:b9:74:
         70:3c:3e:58:60:f9:1b:79:aa:5a:76:af:f1:a0:04:95:88:fc:
         a6:04:6f:65:c6:ee:c0:fc:13:58:69:07:ce:e9:bf:c6:c1:3c:
         7e:74:dd:9a:ca:b0:8c:a3:db:8d:fd:23:21:63:fe:ab:7d:1a:
         f7:ce:16:ed:d0:1b:ec:9b:32:2a:0c:23:bb:77:70:a7:84:ee:
         2d:cd:fa:ce:29:f7:d4:1b:bc:65:f2:30:0d:d8:db:c7:1e:30:
         3b:27:d9:71:48:81:5a:03:bb:36:f1:2d:ca:81:2a:e9:17:fa:
         8a:95:a1:fa:3e:8e:f0:15:2b:28:08:4a:02:7a:01:58:55:81:
         5f:e4:29:06:d7:15:ef:d6:6d:f9:a3:e4:71:d3:42:32:2e:58:
         8e:35:ed:c4:44:ee:17:fc:4a:89:a5:8c:45:65:5a:e4:3a:77:
         24:54:16:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:56:03 2026 by rpki-client