Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/07e33656-8209-3241-933c-8c089e1b83d3.roa
File:                     07e33656-8209-3241-933c-8c089e1b83d3.roa (raw, json)
Hash identifier:          zCxgZ0iSR3bfPTExiBzdqrLSqJ8goezgy8a6LnT7mxs=
Subject key identifier:   91:FD:E6:47:47:D2:A0:BE:E3:B4:CC:14:67:98:36:4D:FF:12:BB:96
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D624A5B59DE31B142DB7999A8
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/07e33656-8209-3241-933c-8c089e1b83d3.roa
Signing time:             Fri 03 Apr 2026 13:00:30 +0000
ROA not before:           Fri 03 Apr 2026 13:00:30 +0000
ROA not after:            Thu 02 Jul 2026 13:00:30 +0000
asID:                     0
IP address blocks:        38.210.66.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:62:4a:5b:59:de:31:b1:42:db:79:99:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Apr  3 13:00:30 2026 GMT
            Not After : Jul  2 13:00:30 2026 GMT
        Subject: CN=70d81393-359d-4fe5-a93d-095af7db2f7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f7:4e:08:c8:88:57:7d:bf:fb:11:34:e8:62:
                    50:65:97:03:58:14:98:a6:97:54:bc:f2:7f:ae:7a:
                    a4:9b:e8:22:ce:59:98:0e:eb:40:de:6c:c1:91:e1:
                    7e:1c:a9:8b:e0:08:ba:d0:79:56:f3:bd:f7:ce:6e:
                    eb:17:26:69:45:ee:1a:ac:28:da:e4:5a:7e:45:ef:
                    25:ae:ae:53:88:47:a6:44:1f:31:91:75:33:50:86:
                    bd:49:e5:6f:76:fb:00:ea:f2:00:2a:e4:b8:8e:2a:
                    e9:1a:28:6c:bb:79:e2:d9:4e:ab:95:7d:71:27:10:
                    d9:1c:e6:ef:1b:64:03:10:21:05:39:20:f2:54:99:
                    59:7d:8c:62:30:d3:d0:c0:1a:79:56:ba:32:df:4d:
                    f2:94:e6:84:74:16:20:12:b4:b8:2e:93:23:14:19:
                    27:ee:05:e2:eb:7e:24:30:6a:06:e4:b6:6e:4c:54:
                    7f:bb:d4:97:d8:4f:a9:bf:29:ff:a9:ad:fc:a9:04:
                    ad:20:5b:68:f2:7d:c3:83:07:8d:c2:7e:86:f3:1a:
                    33:26:fc:52:09:2a:15:f6:a7:7f:a3:21:2a:41:9d:
                    fa:da:2e:63:46:a4:01:1a:32:da:59:2e:f1:b6:c7:
                    fb:2d:ae:13:04:be:06:01:6e:82:39:52:c5:b1:5b:
                    30:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:FD:E6:47:47:D2:A0:BE:E3:B4:CC:14:67:98:36:4D:FF:12:BB:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/07e33656-8209-3241-933c-8c089e1b83d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.210.66.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:2f:eb:9d:1d:0d:45:87:77:03:5f:ec:c8:84:6e:ca:28:8c:
         d9:72:77:9a:b4:6c:c8:4c:a8:43:92:87:13:6b:32:b8:3f:45:
         f8:b2:31:16:6e:b9:19:a1:ad:b1:c7:6c:8b:86:10:b2:3b:0d:
         81:45:96:11:cc:89:74:57:5a:ed:c1:9b:45:4a:28:34:79:7e:
         f7:95:59:ae:a4:aa:67:f5:be:96:54:3d:aa:2f:f7:33:8d:f1:
         90:d6:41:54:a3:d0:d9:d3:d0:b9:ba:3e:0b:49:ca:8f:24:10:
         9d:32:6c:50:92:5e:d8:67:1e:25:ad:0a:d2:b3:f3:25:45:ec:
         01:10:6d:53:77:d9:2c:c9:14:a4:2b:d2:ff:1a:d7:87:36:84:
         29:64:0a:5b:dd:df:22:8a:c3:b8:1d:c2:9b:e7:c2:37:6e:42:
         99:70:bd:80:6f:b5:bd:f1:5b:3a:a4:10:42:4c:06:ea:77:32:
         dd:8c:e5:f7:8e:0c:f1:a4:6e:72:35:e2:e8:37:59:b4:39:4f:
         e1:5a:78:7b:6f:4b:23:af:4e:f6:d9:65:72:26:a3:fc:d8:42:
         7e:55:82:5b:41:03:6c:8c:53:b0:73:e3:51:eb:ee:ae:27:a4:
         b0:aa:40:56:5c:0f:4d:28:5b:88:1a:ec:47:60:ce:b5:7a:c2:
         73:e3:75:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 22:38:53 2026 by rpki-client