Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f07843a7-9d6b-3cf8-9580-0e2f77b465bf.roa
File:                     f07843a7-9d6b-3cf8-9580-0e2f77b465bf.roa (raw, json)
Hash identifier:          ryicW+vSTupW4cXh+BHIo89dvZJkLWAaL7DjhNL6XVk=
Subject key identifier:   A9:E1:DE:6D:76:5D:88:F2:03:93:9D:C9:6B:48:3D:DA:4C:A3:31:DC
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F6F41B25252FA092104848B80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f07843a7-9d6b-3cf8-9580-0e2f77b465bf.roa
Signing time:             Thu 08 Oct 2026 14:02:33 +0000
ROA not before:           Thu 08 Oct 2026 14:02:33 +0000
ROA not after:            Wed 06 Jan 2027 15:02:33 +0000
asID:                     0
IP address blocks:        38.7.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:41:b2:52:52:fa:09:21:04:84:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct  8 14:02:33 2026 GMT
            Not After : Jan  6 15:02:33 2027 GMT
        Subject: CN=21b3dac6-f976-48b6-8a04-a94f3b86f368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5f:93:e8:f3:39:67:9d:03:72:f7:84:58:33:
                    6a:3e:d2:f5:a1:6d:b6:f9:60:2a:ed:28:69:92:5d:
                    2e:35:64:b7:04:5c:50:74:5c:fc:b1:b2:36:f4:4e:
                    26:6f:71:47:c8:c0:fb:62:af:40:67:65:a1:69:5a:
                    ee:be:df:4c:aa:7a:75:f8:71:22:10:85:83:8e:8a:
                    2e:1d:f1:76:c8:c2:a1:ee:d8:a4:63:c7:5e:2d:41:
                    30:13:c0:14:07:89:e6:a2:a6:03:ae:e3:e4:1e:cf:
                    de:e0:b4:ac:9f:72:7f:49:41:04:f3:b9:eb:4c:f5:
                    e5:54:36:c7:1e:b0:4c:31:06:f6:a7:38:13:56:48:
                    d9:df:b4:3a:51:ca:32:df:b4:92:45:a7:24:bb:74:
                    4d:bc:b8:f9:48:d1:39:24:14:fb:d6:1f:f9:13:0f:
                    17:03:84:e7:5d:7c:19:39:41:3d:63:56:7e:5f:da:
                    b0:e2:2c:5f:c1:51:cc:64:9f:f7:92:26:2c:3e:24:
                    8a:f3:78:53:fe:71:23:db:93:6b:5b:1c:94:15:88:
                    5a:6b:83:1c:1a:f4:03:50:87:16:06:02:89:62:21:
                    6f:ba:93:87:c3:24:41:19:76:55:e9:93:06:49:41:
                    05:95:7c:90:b9:13:68:41:62:3b:c3:81:97:75:c9:
                    77:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:E1:DE:6D:76:5D:88:F2:03:93:9D:C9:6B:48:3D:DA:4C:A3:31:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f07843a7-9d6b-3cf8-9580-0e2f77b465bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.7.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:78:87:2e:6a:30:6c:15:3c:24:06:63:37:2f:ff:ec:08:78:
         12:a6:44:14:87:a6:42:53:58:11:78:cc:9e:6c:d0:41:a3:01:
         91:e5:eb:f0:11:5b:a0:d2:31:10:3c:21:79:5d:1b:a5:fd:7f:
         fd:6c:33:58:d3:45:d4:5a:33:d9:b7:a3:3d:bc:08:e1:22:bb:
         d4:61:18:3d:ea:e8:c3:08:25:78:66:a2:79:ae:ee:e2:45:aa:
         86:2e:1a:c6:e8:a8:68:74:3b:3b:eb:a5:60:6d:a9:b1:08:87:
         53:96:8b:ed:f7:a1:3d:b4:11:24:21:94:09:3f:e4:a0:7c:33:
         cf:0e:c8:ee:a1:ac:a4:40:22:77:cb:c1:94:0a:a1:43:03:50:
         51:1f:9e:87:b8:db:be:8a:2a:90:4d:79:4d:ae:e4:9e:29:8b:
         30:63:33:a4:2d:21:d3:53:86:2a:ac:b9:dd:cf:02:e0:9b:71:
         55:99:7b:50:71:da:23:8e:f0:70:16:a4:77:b1:02:1f:57:83:
         4c:0e:47:4c:38:dc:7c:7f:7f:f2:6e:8c:b5:46:9d:33:07:31:
         51:55:35:5c:8e:6a:86:7a:8f:58:6a:30:60:6d:4f:e0:48:8d:
         f1:c1:f9:ec:51:95:2d:a2:dd:ab:30:8e:e4:7f:5b:24:a8:c1:
         22:6a:d1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:34:42 2026 by rpki-client