Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ed08181b-5a71-3aed-9e5c-3e434924bd89.roa
File:                     ed08181b-5a71-3aed-9e5c-3e434924bd89.roa (raw, json)
Hash identifier:          ZVSgTxzubxE0lQi//EelWrgF0IiTlCyTZh0h45+M6EM=
Subject key identifier:   8A:94:D0:E2:66:2A:47:61:CA:2F:EB:4E:09:A3:C7:91:D0:6D:ED:00
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584EA4450F4A013C132333BF3C00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ed08181b-5a71-3aed-9e5c-3e434924bd89.roa
Signing time:             Mon 27 Jul 2026 21:00:11 +0000
ROA not before:           Mon 27 Jul 2026 21:00:11 +0000
ROA not after:            Sun 25 Oct 2026 21:00:11 +0000
asID:                     3132
IP address blocks:        38.87.224.0/24 maxlen: 24
                          38.250.174.0/24 maxlen: 24
                          38.250.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a4:45:0f:4a:01:3c:13:23:33:bf:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jul 27 21:00:11 2026 GMT
            Not After : Oct 25 21:00:11 2026 GMT
        Subject: CN=faaffb10-c666-4d18-8917-7e8f3d20f390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:06:60:c9:6f:db:2d:52:fd:86:d5:23:d4:ab:
                    08:73:0d:9b:76:e6:32:eb:c1:64:e3:96:28:95:c8:
                    e3:56:30:6e:d5:b1:2a:ec:77:a0:47:82:03:c3:eb:
                    f1:68:b9:98:51:32:ab:65:3e:84:18:38:fe:2d:78:
                    34:81:7b:ce:d7:88:7e:47:5b:eb:0c:ea:50:f7:c7:
                    ac:50:e6:43:87:fc:71:c8:a5:aa:f4:be:1f:6f:da:
                    44:86:17:cd:ab:58:06:e8:9f:47:09:2f:9a:50:0e:
                    80:e5:43:cc:2f:41:2c:8c:e0:45:70:c8:33:47:6c:
                    96:b3:a6:ca:ea:de:4b:01:87:54:a6:62:b5:35:35:
                    76:c4:91:55:1b:04:f9:87:d2:60:48:35:41:24:b8:
                    ce:6f:8f:81:90:c0:41:10:bf:d9:13:8a:d7:ae:e2:
                    d4:75:f7:74:ba:74:e0:79:3d:58:a2:eb:37:19:ef:
                    06:4e:57:8a:ff:77:79:19:69:95:01:a2:b9:47:10:
                    dc:3f:ac:3b:f4:f7:ea:f1:47:45:ef:df:fa:2f:8c:
                    2a:b7:79:d2:5d:8e:8a:f8:94:59:19:26:3b:0c:03:
                    2f:9f:27:94:b8:2d:56:59:18:5e:59:be:ad:bc:b4:
                    b2:71:58:b2:8a:87:42:fe:6a:c6:7f:0d:4c:6a:c0:
                    37:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:94:D0:E2:66:2A:47:61:CA:2F:EB:4E:09:A3:C7:91:D0:6D:ED:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ed08181b-5a71-3aed-9e5c-3e434924bd89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.87.224.0/24
                  38.250.174.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:d8:5b:bd:6a:b4:cc:5a:82:4e:4d:47:1c:d5:47:28:66:6a:
         ac:f9:5f:72:8e:0a:c7:f8:f7:9b:d3:2b:83:70:1f:ea:be:51:
         62:f2:11:ff:65:81:f7:bd:47:38:be:5f:ba:2b:5a:aa:15:70:
         d3:ff:15:ad:04:fe:b4:63:ec:99:ea:b1:9a:a2:e3:1a:78:50:
         80:16:60:70:f8:01:31:77:8a:70:c2:ac:e4:b3:94:9d:09:6f:
         12:c1:8f:d9:d8:64:b3:a5:2f:2e:dd:3b:c1:ae:c4:51:3d:dd:
         46:4b:1e:04:a0:b0:0c:fb:fb:5a:2d:fe:4e:5e:40:9d:19:c3:
         04:01:1f:db:ed:62:54:3c:bc:f2:be:92:43:ba:56:e6:d4:2c:
         15:2e:d3:97:e2:5d:b7:ac:83:55:4e:27:ae:ef:d3:14:83:f1:
         6e:6c:56:f2:d5:12:46:b7:37:49:de:b7:66:59:41:71:24:c7:
         7d:3e:80:04:af:7b:7c:bf:e6:fa:96:ce:e1:1f:77:a6:34:f9:
         66:38:ba:d0:38:b8:3a:c3:d6:b8:ce:3c:aa:3e:33:5d:fe:24:
         c8:44:78:cd:33:bb:df:02:a9:b9:d4:49:fa:4c:66:9f:38:e8:
         69:92:92:bc:69:7c:ef:81:ec:af:62:7f:d6:33:dc:38:4c:ce:
         b0:9f:cb:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 00:19:55 2026 by rpki-client