Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/fa9071b7-2809-328f-982c-da5361281bd6.roa
File:                     fa9071b7-2809-328f-982c-da5361281bd6.roa (raw, json)
Hash identifier:          bXurb9mBnBfWfM3eXJ181oaXi++1ztqKb7KzzbwHZX8=
Subject key identifier:   FD:3F:F8:58:EB:F9:13:AF:28:8E:3A:25:2D:69:78:B9:0C:9F:D0:59
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584EA79BAADC82F08F1143D622A0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/fa9071b7-2809-328f-982c-da5361281bd6.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     274072
IP address blocks:        38.150.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:aa:dc:82:f0:8f:11:43:d6:22:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b3c16b09-6e16-4960-b894-3a60fb1c450b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:6c:fa:eb:1e:82:61:1a:de:f1:c5:25:63:47:
                    23:4f:6d:67:68:d3:c7:6d:d2:6f:96:d9:eb:4e:8a:
                    63:6a:c5:a9:49:d4:25:0a:a8:53:21:d8:0e:2f:2b:
                    11:b7:ce:b8:f8:56:3a:e6:36:15:f3:71:b8:09:59:
                    bf:00:4c:f3:6d:2b:9d:bb:e4:56:f8:b7:b9:57:9d:
                    48:4e:0c:a6:6e:9a:52:33:86:ee:f2:ab:d7:b9:82:
                    3d:dc:6a:c3:36:ad:cb:bd:0d:37:91:f2:f6:13:ae:
                    06:b3:80:7a:e9:15:6f:ea:57:03:6b:b1:99:c7:48:
                    51:0a:7e:a0:39:8e:6d:da:87:9a:d2:51:6f:d4:aa:
                    f1:37:0c:23:ca:f1:7b:32:55:ce:8b:4c:22:1c:85:
                    bf:a8:ff:62:56:02:dc:93:19:08:4d:75:85:26:60:
                    7c:77:36:45:8b:ef:8d:79:64:de:d9:7f:0e:eb:c5:
                    7a:cc:f4:1e:7c:8f:7b:f8:2c:e7:4e:e7:fb:37:f0:
                    97:d2:ae:2d:fc:26:62:fc:3e:a0:f3:52:de:3c:6b:
                    46:bf:70:9f:26:94:e8:08:2b:44:dd:ab:04:ea:2d:
                    7f:0f:1e:67:18:83:9f:66:69:0d:71:55:3a:bd:e5:
                    d6:e4:6d:46:19:20:27:07:1b:b6:76:3d:58:66:c7:
                    b5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:3F:F8:58:EB:F9:13:AF:28:8E:3A:25:2D:69:78:B9:0C:9F:D0:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/fa9071b7-2809-328f-982c-da5361281bd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.150.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:4b:db:ff:fb:cc:87:df:2d:a6:a2:84:4f:e1:af:08:b0:a2:
         0b:43:d6:5c:57:68:ac:e4:be:d0:d9:a1:34:b2:6c:ed:26:49:
         47:d2:93:13:5b:41:32:fb:1f:96:61:74:3a:0e:bb:59:07:9d:
         b1:67:5e:96:a6:61:7f:88:09:f3:ef:55:46:2c:f9:ad:19:96:
         eb:b6:e0:08:be:fa:5f:ff:22:8c:eb:a7:15:a0:16:d6:9d:6a:
         d0:88:66:86:48:b4:db:c2:b0:97:2c:4e:9b:8b:cd:1d:a7:95:
         38:84:b9:7e:49:ab:02:54:e0:bb:76:e2:e0:23:16:a0:19:71:
         33:df:97:4a:28:21:b4:6c:ae:96:04:31:e7:3b:d5:4e:d4:2c:
         18:52:9b:67:d8:c9:ce:28:55:58:db:58:fd:22:3f:2a:ff:9a:
         be:72:d0:00:e0:f6:0f:1e:9c:2f:9d:aa:3e:23:20:2a:21:82:
         9f:c0:51:46:73:8d:c8:e3:6b:e2:d1:5c:34:f5:fb:47:56:b3:
         23:d5:28:fe:11:a3:4d:2a:b9:05:d3:cf:23:da:d2:e3:fd:fe:
         89:2e:f6:72:6e:43:15:ba:f7:e3:db:11:89:71:6e:27:0d:e1:
         46:17:b3:3d:81:7f:c2:d1:2f:46:d6:77:73:ea:6a:e2:e2:86:
         4f:67:e2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:31:47 2026 by rpki-client