Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ecf51332-d73e-32fb-9c5a-355af3d7577b.roa
File:                     ecf51332-d73e-32fb-9c5a-355af3d7577b.roa (raw, json)
Hash identifier:          uy2KfwMmnYJTyaynrIJR4eirud8rwqUfepfdkMPOBpk=
Subject key identifier:   7C:F8:AE:0B:18:9D:00:38:1B:EB:C7:B2:25:C3:83:D2:56:E9:AA:EA
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F81483DE309636A226EC63000
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ecf51332-d73e-32fb-9c5a-355af3d7577b.roa
Signing time:             Thu 15 Oct 2026 01:00:12 +0000
ROA not before:           Thu 15 Oct 2026 01:00:12 +0000
ROA not after:            Wed 13 Jan 2027 02:00:12 +0000
asID:                     212698
IP address blocks:        38.64.218.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:81:48:3d:e3:09:63:6a:22:6e:c6:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct 15 01:00:12 2026 GMT
            Not After : Jan 13 02:00:12 2027 GMT
        Subject: CN=19f854b5-acdb-418a-8d92-2bf96612f230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:90:37:a6:2c:11:cc:ae:a7:86:a2:61:f1:37:
                    c5:1a:94:48:4d:de:78:64:e2:87:fb:ab:79:ec:eb:
                    5c:c7:d5:fa:c1:75:82:36:6c:37:c5:18:09:11:4c:
                    b9:83:a0:72:d8:76:95:c1:a6:80:3c:93:d2:51:10:
                    c8:89:fb:1a:0d:dc:90:0c:e5:03:89:31:d3:13:73:
                    7c:b0:54:85:51:eb:17:33:eb:93:4e:eb:77:5c:e5:
                    c5:51:22:15:f8:42:63:f8:67:d4:b8:39:a6:88:06:
                    d6:6e:fa:62:3c:43:9f:da:86:a8:db:89:6a:c1:11:
                    e2:e6:03:d8:a1:d6:97:42:fd:97:b8:b8:76:f3:0f:
                    21:f8:08:08:6d:95:53:e8:80:b8:3f:d0:d3:8e:13:
                    c6:6f:bc:83:ee:5c:54:84:b7:19:e8:b2:28:82:82:
                    f8:55:84:5f:2d:99:1c:97:fe:55:dd:22:23:e6:59:
                    01:a5:84:ae:17:24:65:82:2c:24:55:74:71:6f:2d:
                    00:00:92:39:00:65:07:cb:34:94:7d:b6:93:3d:18:
                    2e:64:e9:61:b4:98:7b:85:d2:94:32:c6:14:70:91:
                    be:c5:d7:4f:27:03:d2:33:5d:85:33:e7:c2:c6:1a:
                    de:b1:02:3d:78:d0:be:79:e9:cc:6e:15:28:76:2d:
                    29:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:F8:AE:0B:18:9D:00:38:1B:EB:C7:B2:25:C3:83:D2:56:E9:AA:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ecf51332-d73e-32fb-9c5a-355af3d7577b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.64.218.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:65:e4:eb:0b:e0:18:7b:94:eb:f0:7f:bd:eb:f8:39:36:0f:
         ed:73:71:9c:2c:f4:f1:7d:5a:c9:2f:6e:02:bb:65:32:d9:dd:
         d6:0a:e8:68:76:12:11:72:dd:ed:9b:f7:5e:05:8f:6f:48:58:
         25:a9:1e:e5:f1:b0:d7:50:cd:7f:bd:bb:21:e7:b1:70:ef:71:
         d3:24:70:a1:58:d0:a6:b7:45:fb:2b:c1:ca:e4:c4:e8:ad:ac:
         2a:e1:34:3b:34:c8:aa:46:58:e6:48:30:f5:dd:e3:dc:69:30:
         81:ee:3a:4a:42:c5:2d:ad:32:f1:b2:f3:45:bd:4f:6d:7a:01:
         d7:ec:cc:8e:63:37:6f:1c:3b:1a:ec:8d:40:6a:89:19:2b:73:
         a2:32:33:99:64:1d:58:06:b8:c1:b8:24:fd:44:fc:d6:e1:60:
         c3:41:e4:5b:46:b9:6e:d4:fb:f2:74:dd:3e:a9:e3:67:a7:a0:
         c6:5a:84:b8:48:04:d1:3a:4d:6a:85:8c:c2:cc:c3:f3:fb:5b:
         c2:38:8b:bf:0e:b8:81:ea:04:79:69:db:49:ed:be:25:2e:49:
         f0:fd:ee:92:b7:09:b4:0a:f9:13:a0:a2:80:e9:ea:7d:f1:eb:
         08:cd:ab:57:c2:e6:22:d5:02:30:61:45:35:a8:e0:f1:02:d5:
         7f:0b:ba:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:39:00 2026 by rpki-client