Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38d1baf5-6d8a-3edc-b5cb-90ae7556f198.roa
File:                     38d1baf5-6d8a-3edc-b5cb-90ae7556f198.roa (raw, json)
Hash identifier:          udF03nD2d0CYR5El6iJDgLLCbj+onsfzwQRks/kM1PU=
Subject key identifier:   A8:A4:E0:28:85:1A:F8:46:AB:15:D7:0B:13:D4:AA:51:C5:3E:E5:B8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584EA7970CFF95BB38BADC4D7938
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38d1baf5-6d8a-3edc-b5cb-90ae7556f198.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     33491
IP address blocks:        71.239.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:0c:ff:95:bb:38:ba:dc:4d:79:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=7057c533-6345-432a-8640-ed4c5abfad67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:2a:c8:90:48:81:ab:f4:ba:7b:00:42:10:53:
                    59:f3:52:85:39:1d:bf:b2:97:b0:1c:14:d0:d8:73:
                    cd:a5:2d:a2:e0:5d:7e:04:0e:0c:f6:56:94:1b:5c:
                    1e:d7:33:9c:7d:ab:d5:b9:fd:93:bb:05:32:f2:1d:
                    7d:d9:19:4e:b1:50:8c:e6:98:37:f0:cf:ea:c3:41:
                    bf:67:47:2a:92:de:b0:5b:31:9b:df:f4:e3:91:84:
                    5b:7e:6d:3d:9d:4f:20:49:6d:85:d1:c4:e0:8a:a0:
                    d5:74:9e:18:16:0f:24:c2:02:2b:d4:fd:36:64:0f:
                    de:f6:c8:e0:95:a7:0f:00:0a:b9:e2:ff:8a:10:5d:
                    7f:f2:21:aa:33:93:2f:a1:b1:51:2b:50:31:12:e8:
                    78:4f:26:97:6b:72:33:83:4a:a9:98:00:ff:21:36:
                    a4:62:cf:69:59:ec:81:3e:13:e9:c8:78:56:e9:d5:
                    76:e7:d9:b0:b0:38:b5:77:99:bb:21:a9:31:a5:e8:
                    03:67:4d:2c:b6:fc:ec:c1:20:78:9c:c6:5b:d2:bc:
                    73:b6:9c:26:01:8d:9a:5f:c7:15:6c:44:6c:f5:78:
                    b0:7c:28:8c:92:84:33:e0:71:57:e3:5c:66:32:5c:
                    22:a6:bd:c6:f7:d0:3d:8b:0d:3d:32:8a:e1:0d:79:
                    78:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:A4:E0:28:85:1A:F8:46:AB:15:D7:0B:13:D4:AA:51:C5:3E:E5:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38d1baf5-6d8a-3edc-b5cb-90ae7556f198.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.239.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:ce:e9:6e:30:ae:e6:db:2e:b6:dd:21:57:f8:7a:2b:60:8a:
         d3:56:cb:a9:c8:bf:6a:72:4d:14:34:15:1e:35:e1:fe:c9:9f:
         ab:f2:84:ce:35:95:ca:fa:17:ba:5c:76:dc:23:3a:1b:d1:de:
         ad:3a:84:1a:5c:96:63:d4:53:b9:4d:f0:75:2d:2c:90:a9:ce:
         28:f5:c1:e2:7c:69:22:ff:7a:60:f1:0c:01:a4:36:c8:08:c6:
         5c:00:d2:d1:98:50:28:5d:20:d8:2c:9f:13:14:fc:dd:30:2c:
         4b:a5:4c:af:f8:ae:08:fb:96:a3:ff:ec:b7:12:f0:a0:15:0c:
         58:47:ef:f6:34:0e:cc:69:97:1b:7b:e6:e4:bd:f8:8d:08:d8:
         9e:ea:53:e5:44:c5:f5:7f:e8:3b:05:27:cb:a3:d5:a5:43:e9:
         76:ce:51:5d:7c:f1:2e:7c:c2:4a:58:69:58:ca:e7:b3:32:65:
         1a:91:40:59:c4:e5:8e:db:4c:c5:58:5c:83:43:53:e0:df:ec:
         6c:d4:8a:1b:3a:94:36:f1:e4:ed:c0:7e:b5:46:59:0b:15:c5:
         25:e1:3a:06:ea:b0:6c:4b:7a:99:60:b4:81:84:8f:6a:91:68:
         4c:51:c2:fc:dc:b9:ee:1a:e5:7a:26:4a:da:c7:ab:39:24:01:
         04:5c:65:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:14:01 2026 by rpki-client