Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f54044a0-d4b3-33dc-96f3-e54add899d80.roa
File:                     f54044a0-d4b3-33dc-96f3-e54add899d80.roa (raw, json)
Hash identifier:          DApe9iU5HxdNIHgShD47MeskHibgoQT6aSYUcODIns4=
Subject key identifier:   35:36:B5:51:C7:49:DE:D9:AC:D7:A0:35:7A:72:B8:57:49:74:CC:3B
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584EA7876299A67D30B75FD77160
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f54044a0-d4b3-33dc-96f3-e54add899d80.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     150654
IP address blocks:        38.225.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:62:99:a6:7d:30:b7:5f:d7:71:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=a0c58979-9460-4a91-b716-002de1fe5d48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:be:fe:d6:ef:91:e1:14:74:ba:d4:4f:c5:ef:
                    f4:d3:4d:7c:de:39:b3:12:29:ae:48:ad:47:f1:92:
                    a2:34:ae:85:58:3c:d9:a0:e6:bf:47:e3:e3:d9:61:
                    fd:14:f9:5f:47:60:04:52:60:e4:88:65:6a:90:93:
                    58:e5:b1:26:1f:25:3b:f9:00:27:e4:86:3f:a1:15:
                    2a:9d:d5:af:3c:5d:2e:d2:41:a3:63:39:10:9f:4f:
                    db:89:f2:bc:dc:88:be:b6:97:fc:4c:b6:0c:5f:53:
                    ad:97:2e:cd:0e:6e:76:3d:cb:9f:be:89:f3:c0:81:
                    03:bc:13:1c:ee:76:01:4d:3f:a4:0c:e5:c0:1d:24:
                    f0:cd:cc:a4:3e:77:13:1a:07:07:41:43:68:d9:72:
                    f9:95:24:58:1b:92:6a:bd:b7:97:49:bd:d1:93:04:
                    74:09:05:f2:74:81:e5:b0:ca:73:34:11:ac:b5:35:
                    f7:14:f0:71:e3:03:9a:f3:04:0e:95:9f:77:52:15:
                    7e:21:3c:f2:c4:5b:50:15:cc:a9:96:7d:d4:b3:12:
                    84:08:0d:a4:4c:c0:78:b1:41:1e:0c:fb:4c:74:30:
                    00:48:87:68:ff:ff:c9:95:9a:16:f0:d4:46:57:f3:
                    cd:e4:35:52:d1:fa:97:f9:83:f2:9f:5c:36:cb:30:
                    da:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:36:B5:51:C7:49:DE:D9:AC:D7:A0:35:7A:72:B8:57:49:74:CC:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f54044a0-d4b3-33dc-96f3-e54add899d80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.225.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:93:af:ba:b1:9b:43:52:7b:0a:f9:61:75:dc:d3:af:62:6d:
         e8:6e:15:29:57:99:29:4c:c1:26:98:32:c6:4d:d9:f5:05:73:
         b0:11:19:06:ec:72:e2:52:06:01:de:b5:67:08:ed:64:9e:0e:
         f2:bb:b1:a6:69:51:a1:5f:19:9e:e9:90:90:6a:18:11:b5:85:
         73:cb:a9:59:a3:b6:61:59:1b:77:c2:d4:be:47:5b:51:56:b8:
         5f:53:6c:3b:a2:b8:e0:90:92:47:70:e7:63:5c:cc:2a:fa:8e:
         95:20:c1:c9:60:36:47:1d:26:f1:58:b8:1e:87:82:2b:91:a0:
         29:75:8a:df:52:0e:e5:bc:9a:7b:19:8b:38:ef:d4:c3:11:6e:
         48:8c:1f:55:7c:70:a7:c0:ed:1e:e9:16:7e:a3:ba:e5:8b:bf:
         fc:d7:71:47:10:85:59:65:11:d5:4d:f3:d5:81:65:3e:1b:d9:
         99:f5:bc:ed:65:2e:08:4b:55:c1:ec:10:cc:ec:43:ac:7a:3e:
         5f:c2:c4:c9:a7:8f:49:ee:84:9b:85:5d:e6:77:1e:47:6b:d0:
         81:b5:d7:b1:2a:b6:06:f3:a7:ea:53:3b:03:84:c5:17:73:93:
         b8:63:4a:72:81:34:1f:77:9f:ac:e2:e9:1c:f8:3e:f6:ed:ea:
         50:2b:72:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 05:04:46 2026 by rpki-client