Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ee4402c4-57eb-3695-9f4b-e2e292165bd0.roa
File:                     ee4402c4-57eb-3695-9f4b-e2e292165bd0.roa (raw, json)
Hash identifier:          nCmevz8Wl3J5SQ1zMNHuXZGStw3879c8t39ZKakGjXY=
Subject key identifier:   4C:A0:C3:5D:32:02:62:C5:63:A9:F2:DA:03:A1:7B:11:37:47:1A:12
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F0AA2278F5B5749A8957883EC
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ee4402c4-57eb-3695-9f4b-e2e292165bd0.roa
Signing time:             Wed 02 Sep 2026 13:00:12 +0000
ROA not before:           Wed 02 Sep 2026 13:00:12 +0000
ROA not after:            Tue 01 Dec 2026 14:00:12 +0000
asID:                     271612
IP address blocks:        38.3.172.0/22 maxlen: 24
                          198.242.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0a:a2:27:8f:5b:57:49:a8:95:78:83:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep  2 13:00:12 2026 GMT
            Not After : Dec  1 14:00:12 2026 GMT
        Subject: CN=aeaf4b95-b5f6-4bd7-91ec-a3fc4b47ff38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5f:3c:dc:8a:34:02:8b:18:a3:78:6d:04:6f:
                    23:49:e4:50:c2:89:7e:8c:03:2a:0e:3e:03:45:08:
                    2c:33:d4:18:2f:ef:89:f4:06:55:77:07:9f:e6:68:
                    00:c1:8a:fd:e1:03:de:7e:9e:7c:95:2b:d7:16:8e:
                    f5:24:ed:a9:f2:89:d5:bd:bd:57:10:ab:59:f0:dd:
                    f0:30:8c:78:d2:b7:a4:e8:0b:3e:a6:3d:d1:df:2f:
                    8d:d2:eb:27:a3:56:4e:5d:da:bc:5c:66:44:16:c3:
                    47:df:0a:1a:42:07:93:d6:fe:9e:13:3a:bc:c3:13:
                    03:be:f2:70:02:0a:a4:8a:a3:b8:9e:1d:27:af:c6:
                    a7:83:b1:2e:26:fe:68:dd:0c:73:63:29:e8:97:a8:
                    bc:84:47:70:95:51:5b:fe:6e:5a:69:a6:02:87:f2:
                    8f:29:68:a4:a7:61:94:69:0e:5a:a2:fb:d9:bd:ee:
                    78:41:f8:93:dd:f3:93:c9:5f:db:9b:7b:8c:d2:03:
                    25:83:f2:91:97:58:52:22:07:cf:81:ba:e2:b3:11:
                    98:0c:4e:46:c2:90:9e:4c:13:02:ea:1d:50:63:ab:
                    37:c8:b2:09:02:2e:98:48:b1:1c:f2:cf:76:62:9f:
                    65:83:20:17:27:bf:bd:bd:94:d4:79:f3:b7:3b:5d:
                    80:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:A0:C3:5D:32:02:62:C5:63:A9:F2:DA:03:A1:7B:11:37:47:1A:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ee4402c4-57eb-3695-9f4b-e2e292165bd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.3.172.0/22
                  198.242.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:b7:46:99:81:a8:f2:9a:e5:b7:58:a6:df:40:e3:64:e2:94:
         55:58:7c:c8:8a:1c:07:f6:95:cf:aa:f8:69:c5:a0:d2:54:d1:
         a3:12:9a:90:13:2a:81:90:3b:29:45:b8:bb:55:2f:4a:17:94:
         dc:0b:43:5d:0e:bf:dc:d4:77:d7:3c:3f:59:a4:99:f0:10:d3:
         49:3d:93:d1:15:8c:a9:17:13:0b:f3:18:40:a3:9e:1f:3b:93:
         dc:8e:ae:67:fb:02:d0:9d:94:ad:ac:31:bd:51:72:46:4e:89:
         67:c6:99:ec:7f:5c:49:b4:51:2d:26:9f:0c:94:c2:2f:7f:0c:
         4b:fc:7e:40:ff:1b:d5:45:82:53:70:af:07:5a:5c:8b:71:f4:
         6d:79:06:50:c5:f4:d2:60:16:03:cf:09:47:da:64:1d:e7:10:
         fe:5b:89:20:d0:e6:a7:2a:2d:a0:84:13:1e:6d:bc:6e:32:27:
         73:c8:1f:24:ca:4e:d6:fd:c0:87:d6:b2:d2:31:2c:34:c1:51:
         9f:d9:34:eb:5e:7d:39:64:1d:0a:ff:93:31:f8:f7:14:ca:5c:
         2e:78:fa:81:59:98:54:98:a6:24:09:28:62:4e:30:d9:6f:77:
         e1:7e:96:6e:85:a5:07:1b:f4:8c:3a:58:38:5a:db:b8:b2:ce:
         16:0c:35:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:54:53 2026 by rpki-client