Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e3d26d38-4a4a-3eb7-bea9-e5133a075c65.roa
File:                     e3d26d38-4a4a-3eb7-bea9-e5133a075c65.roa (raw, json)
Hash identifier:          u8+4Z8ZydbbFkq9eAEJjdZbdLU40pZlwBF4dKvsnbDU=
Subject key identifier:   10:65:1A:44:52:BA:E7:4D:16:A8:9E:6D:BE:0F:A0:A5:94:E4:46:4D
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F07EE613B54AE452AD20C1A90
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e3d26d38-4a4a-3eb7-bea9-e5133a075c65.roa
Signing time:             Tue 01 Sep 2026 13:46:25 +0000
ROA not before:           Tue 01 Sep 2026 13:46:25 +0000
ROA not after:            Mon 30 Nov 2026 14:46:25 +0000
asID:                     16524
IP address blocks:        38.66.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:07:ee:61:3b:54:ae:45:2a:d2:0c:1a:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep  1 13:46:25 2026 GMT
            Not After : Nov 30 14:46:25 2026 GMT
        Subject: CN=675b46ee-df6a-4c53-b474-f8005e2a42a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:96:c0:4e:c9:57:1a:ab:86:e5:3e:82:a9:bf:
                    dc:a4:3f:7a:01:e6:fb:fe:d5:55:f0:1f:4e:f3:0a:
                    c7:8e:91:ff:00:c8:0b:4a:67:78:34:36:4a:e3:01:
                    ba:f9:06:20:8a:a3:e2:72:a6:56:1e:97:ab:de:c2:
                    45:f7:bb:89:00:b6:bf:43:0e:de:ea:8d:ed:fe:c9:
                    0c:f9:ad:42:36:96:26:cb:22:a6:fe:94:21:e5:e3:
                    38:ee:6e:ec:9f:15:dd:3e:37:72:f9:d7:c0:5b:19:
                    5f:3e:5b:b8:71:b0:29:aa:a9:99:0a:a2:5f:36:43:
                    f4:dd:90:4f:10:b4:34:db:dc:1e:9a:41:03:9a:fb:
                    1f:f5:95:57:b6:b6:8e:be:ce:8d:73:c8:ff:50:97:
                    d4:87:81:cd:f9:66:97:3c:81:6e:4d:07:5d:9e:3d:
                    06:5a:fd:45:75:77:f6:ee:c7:ef:c6:ff:41:7c:70:
                    42:1f:1a:37:78:ef:44:03:aa:ea:8d:6b:43:8a:77:
                    d0:76:ea:71:14:d6:04:0e:13:2a:20:8f:51:b5:04:
                    15:1a:aa:66:d3:84:85:ae:19:de:e5:71:4b:14:35:
                    69:6d:75:ce:41:d9:d6:64:d9:35:07:5e:9b:27:62:
                    73:29:e5:c0:45:7f:bf:e9:48:e6:e7:ba:f1:85:10:
                    5b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:65:1A:44:52:BA:E7:4D:16:A8:9E:6D:BE:0F:A0:A5:94:E4:46:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e3d26d38-4a4a-3eb7-bea9-e5133a075c65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.66.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:ed:90:5f:0b:49:ff:f0:43:14:2a:3a:fe:6a:81:d2:59:0e:
         08:6a:90:49:93:b0:04:55:bb:a7:82:79:98:8e:79:cf:19:aa:
         79:49:65:b0:a4:34:d4:af:ed:59:95:a2:33:72:67:ad:54:dd:
         81:00:33:75:c1:a8:16:8d:2d:c1:3d:9f:62:4a:82:25:a2:10:
         2b:04:29:31:97:d1:ed:67:e5:9c:db:45:46:7d:3e:43:0f:bf:
         03:fa:f0:4b:74:a3:47:6d:a6:e4:91:cb:ae:6d:94:d8:74:58:
         fe:e1:b1:92:e2:f0:9a:98:12:3f:be:e0:49:d0:a6:14:3f:b4:
         cf:f2:21:86:ca:c2:38:1a:11:71:5a:a0:cc:22:28:e5:07:7f:
         7e:68:89:4f:5b:8b:28:d8:78:b6:4d:67:c3:0e:0f:e8:49:4e:
         4f:9d:b3:c2:4c:a4:90:55:13:6b:03:6d:0f:e0:d7:49:49:b4:
         cb:2f:56:a3:75:9b:f1:94:cb:06:7d:3c:2d:7b:78:0b:a2:72:
         2d:6b:80:e6:cc:12:24:27:ad:80:a1:d2:f6:0d:ff:a8:23:f6:
         47:c2:07:41:d3:58:fd:4a:31:3e:30:70:3b:bf:7f:25:6c:c1:
         dc:8a:c8:a2:69:71:7f:43:f1:e7:39:23:08:c9:4f:b8:ea:26:
         ca:83:2a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:08:04 2026 by rpki-client