Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/3fcd79ab-50a1-3d19-913a-bf3f776e1f49.roa
File:                     3fcd79ab-50a1-3d19-913a-bf3f776e1f49.roa (raw, json)
Hash identifier:          nSCRigmdUa/YUcxeGMxZm1UllnBliORjBIAExRHQWUE=
Subject key identifier:   3E:F1:CB:C2:CE:D4:16:AE:D1:F5:E2:2B:F2:FA:EC:FB:41:88:98:1B
Certificate issuer:       /CN=19039935-462a-4b14-8e96-78798283eeff
Certificate serial:       010D0C9F4328584F3A17DF499008D9F23CC5D680
Authority key identifier: 30:22:9F:74:A3:6B:C2:DA:A9:66:40:08:D1:CC:3C:53:90:DF:DE:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/3fcd79ab-50a1-3d19-913a-bf3f776e1f49.roa
Signing time:             Sat 19 Sep 2026 13:00:12 +0000
ROA not before:           Sat 19 Sep 2026 13:00:12 +0000
ROA not after:            Fri 18 Dec 2026 14:00:12 +0000
asID:                     2914
IP address blocks:        167.253.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/19039935-462a-4b14-8e96-78798283eeff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/19039935-462a-4b14-8e96-78798283eeff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3a:17:df:49:90:08:d9:f2:3c:c5:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19039935-462a-4b14-8e96-78798283eeff
        Validity
            Not Before: Sep 19 13:00:12 2026 GMT
            Not After : Dec 18 14:00:12 2026 GMT
        Subject: CN=882757a2-aacd-490a-b6d9-107ead69dbc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:c9:8c:8f:7c:1d:d4:66:a9:29:77:f3:fa:da:
                    5f:cf:08:08:c5:ff:f9:5f:47:ea:88:80:0d:5e:9e:
                    d5:bc:d8:40:03:eb:b7:7d:5a:0e:cc:7c:44:e1:d2:
                    fd:51:f5:51:40:d9:55:09:a5:e0:4e:e5:be:99:38:
                    ba:92:50:65:29:a7:43:ab:24:d0:d1:78:8b:d0:19:
                    2b:c0:21:12:7c:a1:3d:c8:35:13:d2:31:5c:48:41:
                    96:d6:09:c8:2f:33:9b:cc:8a:cb:23:13:49:c9:eb:
                    10:70:82:df:81:d1:30:10:1e:ed:f8:ba:1f:47:36:
                    0f:04:44:9d:fc:4e:9a:d6:78:52:7a:34:23:df:0a:
                    90:35:ed:0e:8d:e3:73:01:b1:76:97:39:ab:8d:33:
                    39:02:2e:75:92:27:7b:09:12:a6:d8:cb:c4:b6:d8:
                    48:be:27:9d:35:b5:47:23:6e:60:5f:fb:9d:d3:30:
                    07:6e:ab:33:be:fa:38:55:14:64:11:5c:5b:26:26:
                    ce:2a:6b:74:5e:c7:f3:89:6d:86:29:cd:fe:9f:79:
                    90:a0:d4:7e:5e:64:c6:a4:69:0e:f3:f4:b6:0d:0a:
                    88:b8:9a:32:e2:46:00:8c:b1:c9:88:29:92:d6:a8:
                    2f:69:30:d1:81:f6:97:82:1a:08:8e:55:98:37:85:
                    2a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:F1:CB:C2:CE:D4:16:AE:D1:F5:E2:2B:F2:FA:EC:FB:41:88:98:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/3fcd79ab-50a1-3d19-913a-bf3f776e1f49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/19039935-462a-4b14-8e96-78798283eeff.crl

            X509v3 Authority Key Identifier:
                keyid:30:22:9F:74:A3:6B:C2:DA:A9:66:40:08:D1:CC:3C:53:90:DF:DE:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:ec:50:1f:da:a7:ef:b4:da:a6:d0:28:b3:0c:73:58:9b:1f:
         9c:aa:51:82:6c:89:b4:54:53:be:95:6d:30:a1:67:07:7a:a7:
         c4:14:a7:72:39:66:4d:84:02:d6:c3:26:43:78:80:90:7c:ed:
         f5:2f:74:b6:22:13:62:d8:50:bd:1d:73:4d:f6:39:cc:8b:f6:
         42:97:04:bb:54:bd:a8:98:d0:21:59:97:85:be:c3:14:7b:8e:
         01:04:f9:b3:02:c7:5a:ec:9b:b6:18:79:eb:fe:6c:6a:1b:41:
         10:ec:c4:ee:2f:03:9f:b9:48:9f:3b:d7:95:73:98:e5:79:c8:
         e5:89:89:60:ef:d5:be:e7:01:d1:b8:9f:e7:77:cb:5b:3d:d6:
         f2:19:7e:58:df:50:16:f8:c7:dc:60:81:4d:49:b9:59:e7:72:
         63:ae:67:9e:8d:03:29:8f:f2:59:a4:b4:93:4b:23:07:b9:65:
         f8:25:fe:4e:ae:ff:e3:46:33:10:3e:ef:6a:a8:a7:74:db:4b:
         42:48:77:40:38:cd:19:0d:72:8b:98:80:5e:d5:34:4e:ac:07:
         c1:00:35:23:7a:1a:b3:6c:7e:7b:37:75:64:6b:09:d1:2e:bb:
         0b:96:93:74:5b:0c:80:6a:69:e7:21:80:48:37:ea:60:5a:d0:
         10:dd:5c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:43:16 2026 by rpki-client