Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f2acb605-3e4a-30bc-84be-7946d9a66a0a.roa
File:                     f2acb605-3e4a-30bc-84be-7946d9a66a0a.roa (raw, json)
Hash identifier:          JlP9moIKzfdwoIiPT6FReG9Av1dMPmp5tNd8xrh1ciU=
Subject key identifier:   77:6F:3F:E4:C4:B5:59:2D:48:24:5A:DF:F7:80:E5:F3:6F:3E:71:61
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E11B4391D71A46C5B2B5AF440
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f2acb605-3e4a-30bc-84be-7946d9a66a0a.roa
Signing time:             Fri 05 Jun 2026 09:00:12 +0000
ROA not before:           Fri 05 Jun 2026 09:00:12 +0000
ROA not after:            Thu 03 Sep 2026 09:00:12 +0000
asID:                     28459
IP address blocks:        38.226.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:11:b4:39:1d:71:a4:6c:5b:2b:5a:f4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jun  5 09:00:12 2026 GMT
            Not After : Sep  3 09:00:12 2026 GMT
        Subject: CN=763f6466-f97a-4142-ac6b-72eea5b701cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:8a:21:94:52:32:91:dc:cd:33:3c:de:4b:21:
                    0e:f8:7f:f8:d1:58:7f:30:c5:a5:00:16:7d:77:fd:
                    41:17:ad:e1:6c:a8:57:86:47:8a:0c:75:e5:33:ee:
                    13:93:e0:81:5b:1a:cc:11:f9:04:ba:de:7c:ad:b7:
                    d7:5c:fa:ad:45:c6:cb:b1:fa:d5:04:fc:ef:01:94:
                    8f:b1:b9:1d:a9:4f:38:cd:8b:0e:e2:65:df:2f:63:
                    37:21:b4:a2:78:17:5d:ad:5d:8b:49:50:da:89:c0:
                    07:36:e4:d5:7c:d2:8d:50:ce:ed:4e:25:5b:bb:9d:
                    86:31:70:be:be:ca:41:2c:49:02:ba:a9:62:67:3b:
                    43:ba:a0:95:b6:58:fe:09:cd:77:7a:02:4a:bc:a5:
                    8b:07:21:23:d5:bb:b4:48:f8:ac:c0:e5:84:35:45:
                    83:4e:fc:c4:f5:eb:1d:5f:0f:1b:06:4c:95:15:7f:
                    6f:3f:c4:a7:88:ba:ed:95:f9:6b:89:a6:b2:38:39:
                    00:e5:7e:5b:02:33:07:88:56:7e:00:49:b4:dc:fc:
                    55:79:cf:af:4d:d8:c1:8c:97:c0:ff:48:23:f1:42:
                    a7:22:81:92:4f:76:a1:ba:4a:3b:19:8b:7b:aa:98:
                    3b:43:78:8f:ed:03:e9:fd:49:c7:3a:65:51:c9:54:
                    bd:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:6F:3F:E4:C4:B5:59:2D:48:24:5A:DF:F7:80:E5:F3:6F:3E:71:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f2acb605-3e4a-30bc-84be-7946d9a66a0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.226.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:4c:93:e1:a1:fb:43:ee:c9:1b:0a:e5:47:18:0a:83:25:8f:
         5d:52:62:79:88:b7:85:e7:61:f8:9c:60:04:5d:0e:62:8d:5e:
         d4:10:bd:4c:88:0e:42:e1:f6:e2:bd:f6:a9:27:1f:99:26:6b:
         90:83:e0:e4:87:96:cc:b0:16:73:71:66:8c:21:4f:74:7e:6e:
         0a:12:9e:9b:a3:66:8e:e6:b2:bd:5e:0b:c4:6b:87:5f:e9:78:
         05:87:e8:25:87:23:34:43:81:29:0e:55:d6:83:9d:0e:24:55:
         06:7f:a1:ab:98:33:b4:f2:30:45:38:3c:cf:5b:fa:aa:3b:6e:
         89:f1:f2:3c:b0:d0:90:64:12:b6:b0:64:d6:92:f6:71:0c:c0:
         11:30:6d:a6:f5:34:56:bc:9f:0e:0d:c6:54:b3:3c:ac:b1:7f:
         1e:61:c2:5a:a1:87:f1:54:85:2d:c8:fe:7b:37:ca:70:c6:4f:
         0d:4c:e0:bc:80:19:b0:04:da:8e:80:dc:b8:ad:24:d0:fd:c5:
         80:8d:1a:42:f9:e7:89:03:e5:eb:51:bc:c9:91:7d:93:84:b3:
         8e:33:75:ba:6d:f9:3b:9f:14:67:ff:03:7b:72:41:2d:78:6e:
         98:39:58:22:85:ba:0e:54:b5:fc:1d:74:61:e9:f3:d1:41:5a:
         48:73:c0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 22:38:18 2026 by rpki-client