Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ff1d4931-75bb-34fb-b5e6-467675bc2b84.roa
File:                     ff1d4931-75bb-34fb-b5e6-467675bc2b84.roa (raw, json)
Hash identifier:          iVuA8L8lTWUyTSbb4Dj2X4EBIzWnURVy29CXtRniN+o=
Subject key identifier:   81:AB:90:18:B0:36:1F:7D:E2:8F:BD:D4:D9:D0:9B:93:74:83:34:C0
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E253F19B42B5B4F50A959AA80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ff1d4931-75bb-34fb-b5e6-467675bc2b84.roa
Signing time:             Fri 12 Jun 2026 09:00:11 +0000
ROA not before:           Fri 12 Jun 2026 09:00:11 +0000
ROA not after:            Thu 10 Sep 2026 09:00:11 +0000
asID:                     264758
IP address blocks:        38.156.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:3f:19:b4:2b:5b:4f:50:a9:59:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jun 12 09:00:11 2026 GMT
            Not After : Sep 10 09:00:11 2026 GMT
        Subject: CN=221e110f-478d-4cfa-8268-c42a09f0fc32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:99:f7:73:b4:0c:05:bc:b2:c6:66:86:87:a8:
                    11:c1:b5:92:05:da:df:4b:0a:91:3b:40:de:1a:9e:
                    c1:ad:07:50:c3:c8:ae:ac:9a:59:13:79:0a:a1:fa:
                    37:af:29:e2:12:27:03:f0:18:9a:74:1c:1b:79:13:
                    15:9a:75:73:32:31:bf:57:19:d3:df:3b:8b:8e:3e:
                    49:1e:ba:34:f9:38:37:f5:c2:8d:b8:ea:e6:cc:57:
                    47:8f:d5:7b:1d:ef:71:6c:ba:03:3f:a2:d2:3a:20:
                    e0:8a:1b:ae:50:48:de:78:22:bf:5d:de:8d:82:26:
                    bb:c0:c1:6c:49:49:a2:81:3e:2b:cd:5b:01:d9:15:
                    a1:84:bb:87:d2:5d:19:3f:83:fc:e3:3e:3e:5c:1a:
                    b9:6d:84:3a:c7:64:ce:8b:d9:16:6a:73:ef:9d:d0:
                    77:18:4d:2c:98:be:6c:11:9b:ef:7d:9c:e3:56:69:
                    3e:38:af:2a:3b:14:98:93:ac:5a:13:20:8d:3d:e0:
                    c7:d2:15:56:e2:02:3b:46:86:aa:70:7c:bc:b6:71:
                    e9:34:d0:0c:97:1a:78:a4:fd:21:9a:85:ad:bc:07:
                    c5:2c:d0:b0:2a:97:cc:3d:d0:87:a3:65:aa:ef:af:
                    31:0a:f1:1b:a9:60:91:51:25:3f:5e:57:2f:12:ed:
                    a0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:AB:90:18:B0:36:1F:7D:E2:8F:BD:D4:D9:D0:9B:93:74:83:34:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ff1d4931-75bb-34fb-b5e6-467675bc2b84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.156.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:c4:23:0b:d3:ce:36:ed:4b:e5:b5:15:b4:8e:ea:bf:5b:15:
         59:0b:2f:0c:5e:96:a7:bb:62:60:59:29:9c:ab:ad:21:1a:3a:
         94:e9:12:66:0b:07:30:56:8b:89:0c:2a:24:1a:97:44:c5:15:
         3c:fb:bd:bc:19:e8:f3:e0:ed:19:11:bf:6b:b6:72:c8:2b:cd:
         b6:3a:b9:28:aa:26:e7:c5:fa:3f:42:08:7e:cd:2e:1c:09:bb:
         d6:ac:ed:4c:5f:b9:d1:aa:98:52:5f:5f:cf:26:a3:10:bc:24:
         11:25:01:df:34:1b:d6:33:c8:85:7d:96:d1:67:e0:d7:f0:3b:
         55:f6:86:83:27:29:ca:66:5b:f4:f9:18:b4:b9:03:80:1a:c0:
         b1:0b:6c:8a:0b:ce:08:2d:0a:7a:83:f0:98:d2:d5:54:e5:fc:
         71:36:40:ac:26:64:ab:dd:3c:4c:7f:79:a7:2b:dd:8c:e4:9e:
         f1:b3:00:0f:8b:de:1b:c5:43:d3:f0:29:0e:57:1b:fd:c8:32:
         a6:b3:1c:d9:41:4b:6c:13:8c:4d:ee:a2:cb:77:18:99:71:5b:
         e3:cb:2a:74:67:20:dd:d9:86:ba:7f:ef:e7:8e:00:df:f7:d5:
         6f:e2:8b:b4:25:20:b3:d2:b2:5b:73:89:2f:79:ff:3d:45:f0:
         7f:2e:1f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 22:37:25 2026 by rpki-client