Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/fce1ccd8-e11f-3efe-a482-61bfe3c20f47.roa
File:                     fce1ccd8-e11f-3efe-a482-61bfe3c20f47.roa (raw, json)
Hash identifier:          FUv/7MHP34jXNt8IdCj9zZEWwSndOyPqDDMDNtM+Qjg=
Subject key identifier:   34:C6:62:CA:9D:16:EE:6B:17:3F:77:20:0C:D5:35:E6:71:BA:E2:95
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F92087FEDDB42E97F493A3B00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/fce1ccd8-e11f-3efe-a482-61bfe3c20f47.roa
Signing time:             Wed 21 Oct 2026 01:00:12 +0000
ROA not before:           Wed 21 Oct 2026 01:00:12 +0000
ROA not after:            Tue 19 Jan 2027 02:00:12 +0000
asID:                     273893
IP address blocks:        38.20.14.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:92:08:7f:ed:db:42:e9:7f:49:3a:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct 21 01:00:12 2026 GMT
            Not After : Jan 19 02:00:12 2027 GMT
        Subject: CN=1d9f7ff7-34be-4732-9d71-01bff10f8e40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8f:90:c3:d1:9a:cb:ab:a7:f3:8f:ba:fe:3c:
                    a6:71:73:80:30:93:ff:7a:59:3f:ce:3b:ac:76:e7:
                    25:78:e4:06:b6:e5:18:cd:9e:54:d8:51:ec:2a:96:
                    05:ef:f4:9c:f4:31:14:0d:15:ae:ad:6f:fb:2b:5c:
                    bc:00:89:dd:60:ef:14:da:22:cc:ea:5e:ff:83:12:
                    e0:8e:2d:d0:80:ac:2a:e4:91:0f:de:02:6f:90:17:
                    76:a1:13:60:71:07:0e:ba:e1:f3:8f:61:3f:e0:5f:
                    ec:be:86:2e:ee:e6:c9:04:83:c5:04:37:f4:34:3b:
                    3f:ec:8a:3f:e8:4d:f2:4b:90:be:b0:1c:5a:13:15:
                    e4:10:d6:31:28:5f:00:e3:2c:e7:06:f0:a4:d4:1a:
                    4d:65:34:09:e0:7d:08:9a:04:92:0b:c0:d9:a9:f9:
                    7e:e9:7e:62:e9:ad:2f:46:23:a1:a6:05:24:19:b7:
                    0b:e8:ca:47:06:a7:b0:7e:66:03:77:27:ff:88:57:
                    d5:d9:96:70:41:8f:74:01:0a:a1:bc:9b:02:f6:99:
                    9d:2b:89:bc:e8:c0:0c:d9:dc:13:6c:71:ef:17:04:
                    6d:e3:aa:57:6a:5f:75:66:97:60:86:17:e6:e1:e0:
                    3e:1f:03:40:17:c3:ac:86:16:50:55:7e:6d:91:24:
                    8b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:C6:62:CA:9D:16:EE:6B:17:3F:77:20:0C:D5:35:E6:71:BA:E2:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/fce1ccd8-e11f-3efe-a482-61bfe3c20f47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.20.14.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:5c:2d:f5:cb:c5:29:54:c3:76:23:7a:68:04:44:a2:b3:17:
         da:71:3e:6a:6d:2a:2a:8a:1c:a8:78:bc:0b:4a:03:5f:60:6a:
         f2:ac:c4:df:5c:75:e9:89:3d:f7:4e:e9:30:13:3b:70:c4:6d:
         6b:71:90:71:52:3c:f9:26:44:80:6d:09:13:10:11:24:b5:d0:
         e9:b0:ee:d3:87:aa:75:16:35:b2:2e:bf:16:13:8c:90:e5:f6:
         70:14:a6:a2:59:0b:17:aa:f8:e7:67:86:34:8b:f3:1d:73:df:
         cb:f1:1d:54:70:d4:88:0c:d9:59:ce:a3:87:c2:33:e8:1c:ef:
         62:cd:fb:dd:76:12:c7:a8:df:2b:de:80:13:d5:8b:fc:a7:41:
         70:3e:50:72:5c:d8:64:32:09:a0:ff:0c:dd:24:ae:85:e3:b2:
         34:88:1d:e4:c1:3b:d8:53:1f:13:61:ac:95:cd:87:75:5b:f4:
         1f:29:0a:7c:83:89:28:64:5b:5d:8b:74:36:e4:24:d2:3a:fa:
         6a:65:11:94:e8:fd:f3:1c:29:b7:b0:6a:4b:45:a1:80:c2:f2:
         58:2b:e4:7a:b4:d1:e8:45:ae:22:57:4b:64:8b:7c:41:7f:08:
         1f:0b:dd:dc:26:bc:3e:52:2c:2e:d4:04:fc:c5:33:77:fa:10:
         db:02:06:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:51:17 2026 by rpki-client