Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e8276ef5-d584-3944-8bab-a2f1ad435572.roa
File:                     e8276ef5-d584-3944-8bab-a2f1ad435572.roa (raw, json)
Hash identifier:          AMCbH1QfpqVECFLz5Cta4YX5M0laOoneWbDW8Wp7iG8=
Subject key identifier:   07:FC:51:3D:D2:D5:49:73:4A:D4:FB:05:9F:20:8C:16:8B:39:47:B4
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F979DC2F38C6077E9D5B37480
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e8276ef5-d584-3944-8bab-a2f1ad435572.roa
Signing time:             Fri 23 Oct 2026 01:00:12 +0000
ROA not before:           Fri 23 Oct 2026 01:00:12 +0000
ROA not after:            Thu 21 Jan 2027 02:00:12 +0000
asID:                     147185
IP address blocks:        38.175.32.0/20 maxlen: 24
                          38.183.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:97:9d:c2:f3:8c:60:77:e9:d5:b3:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct 23 01:00:12 2026 GMT
            Not After : Jan 21 02:00:12 2027 GMT
        Subject: CN=cd96b8a5-a74e-4e57-b040-c653ea6064ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:66:dd:c8:5a:1f:dd:59:f7:4b:a3:40:60:d4:
                    34:76:d8:19:6c:aa:83:b4:c7:58:c0:51:0d:d1:ca:
                    3b:4d:57:54:5f:b9:89:5b:85:6b:6e:44:b0:6c:b1:
                    68:f8:0d:0a:13:a0:d0:cd:72:5c:31:1e:d2:6a:55:
                    62:09:7e:8c:f9:b4:5e:5d:cd:a0:35:b1:1e:51:d7:
                    60:53:6b:a5:83:3a:b5:02:db:cf:89:e9:aa:ef:40:
                    30:d1:02:6a:b1:39:ed:74:af:98:e7:9f:05:1c:ca:
                    d5:c7:67:bd:0e:72:1b:32:dc:a8:c4:e8:b7:6e:2b:
                    bc:c4:a0:ea:ca:36:08:75:07:f8:d8:8e:fa:9e:12:
                    be:0f:f7:4c:78:09:29:15:0b:1e:7b:f5:3c:3e:8e:
                    58:cb:7e:cc:b0:ed:94:e6:6d:62:0e:85:37:9f:11:
                    15:a6:a9:11:ed:f8:91:55:e5:b7:4b:e6:34:40:df:
                    2a:86:db:29:27:5a:e8:67:f6:40:dd:21:65:25:5b:
                    ec:5b:92:dd:fc:17:40:7b:5f:ed:e4:37:62:82:e2:
                    37:ae:c9:77:40:a1:38:3c:39:31:b3:3a:f1:89:da:
                    1a:0d:0c:ce:00:b1:a3:82:46:a5:8c:09:21:93:5a:
                    39:5a:25:ea:73:95:44:ec:24:78:8d:4b:59:b6:73:
                    b4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:FC:51:3D:D2:D5:49:73:4A:D4:FB:05:9F:20:8C:16:8B:39:47:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e8276ef5-d584-3944-8bab-a2f1ad435572.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.175.32.0/20
                  38.183.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:6f:2b:fa:98:51:7f:8a:b2:d3:88:d5:51:8d:92:0c:c1:3e:
         91:ba:19:37:c5:20:36:7b:bc:f8:f6:56:a4:20:ad:cf:19:a4:
         3d:f9:8b:a3:c8:74:20:6c:72:af:9e:1e:be:01:b6:89:4f:99:
         d6:dd:99:4c:92:40:aa:1e:49:0f:a7:25:bb:df:82:46:4b:c2:
         c1:1d:27:c2:c3:8d:48:9f:62:83:1e:15:27:b9:eb:ba:02:7d:
         b3:01:05:13:f6:8f:ba:83:8a:ee:1d:ed:9b:8f:05:c8:3b:e0:
         a9:a6:2f:1b:5b:08:0b:8b:3f:55:89:76:2b:3f:5e:3f:41:94:
         40:ac:12:88:1e:9e:77:6d:f2:43:4a:d6:cf:f5:bb:d0:77:88:
         6c:99:13:fc:be:4a:49:c6:93:64:c7:12:07:0f:2e:69:65:ef:
         c2:c8:aa:cb:4e:0d:34:22:5e:8f:f0:e3:72:ba:56:f8:ee:d0:
         fa:c7:33:6f:f6:c3:1e:16:f8:6a:1e:e4:33:30:3f:ce:a6:0e:
         18:e5:8b:f5:5b:6e:a7:1a:78:e9:3f:05:d0:be:09:8d:42:69:
         7a:ba:9c:30:f6:dc:97:e4:c0:4a:eb:48:ea:9b:c8:b1:6d:a6:
         eb:ab:f4:06:6e:7a:86:5a:cd:63:6a:95:76:1f:8a:96:81:0b:
         d1:18:9d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:32:16 2026 by rpki-client