Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/11f112de-ee10-3d6b-ade4-7cba723bfbd2.roa
File:                     11f112de-ee10-3d6b-ade4-7cba723bfbd2.roa (raw, json)
Hash identifier:          1xocakHuQ3/5nX+75s63t0iepKzZ7JWlpymvFab4s0U=
Subject key identifier:   48:32:EA:39:E6:BE:74:D1:5E:6D:F7:9A:BF:C0:5B:4F:EA:4C:1F:0E
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584B9C47203E097042CBF43E8380
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/11f112de-ee10-3d6b-ade4-7cba723bfbd2.roa
Signing time:             Wed 22 Oct 2025 21:57:07 +0000
ROA not before:           Wed 22 Oct 2025 21:57:07 +0000
ROA not after:            Tue 20 Jan 2026 22:57:07 +0000
asID:                     204170
IP address blocks:        38.199.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9c:47:20:3e:09:70:42:cb:f4:3e:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct 22 21:57:07 2025 GMT
            Not After : Jan 20 22:57:07 2026 GMT
        Subject: CN=9f5e381b-4ad4-4921-99ac-0e2d82adee46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:50:4b:7e:7a:41:50:2f:ef:30:0d:61:f2:a4:
                    cf:ed:75:49:3d:93:a9:9e:29:17:4d:66:47:47:af:
                    2a:23:9c:7b:0c:cc:1e:27:38:d5:d2:18:db:00:b7:
                    43:7b:de:f6:5d:53:1b:b2:3d:88:5c:9d:4f:19:db:
                    e5:ef:d7:9c:b2:f4:7a:c6:bf:42:66:26:59:9a:0c:
                    ee:7c:38:15:44:f9:27:07:c7:7e:e1:4a:1e:6f:d1:
                    47:67:2e:c9:be:bb:f5:c8:1f:aa:ae:54:7a:ac:db:
                    ae:14:2b:f2:04:1a:8b:4c:d2:49:c4:8f:d0:ff:e5:
                    02:de:47:89:0b:03:1b:bd:ab:57:80:c1:c4:48:56:
                    91:3c:dc:6e:ce:e3:0a:6e:f2:59:99:ee:59:08:c2:
                    5c:35:25:48:9a:af:b3:67:5a:fa:b2:69:5a:9b:b7:
                    e4:d0:01:70:7b:52:66:7d:90:d3:10:5e:aa:ce:14:
                    1a:9d:2a:3a:7b:0a:96:dd:99:c1:78:df:ef:fa:8b:
                    3a:5f:96:70:7e:80:01:44:82:7e:a1:a5:b4:0f:71:
                    db:e6:ba:22:86:08:08:b2:96:d9:5c:f9:f3:40:36:
                    b0:66:4d:bd:8c:c9:10:7d:02:ad:a8:4c:1b:41:6c:
                    36:e2:14:4b:2e:3a:bb:f9:43:c2:ce:84:d0:4a:3f:
                    07:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:32:EA:39:E6:BE:74:D1:5E:6D:F7:9A:BF:C0:5B:4F:EA:4C:1F:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/11f112de-ee10-3d6b-ade4-7cba723bfbd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.199.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:9d:01:7e:ed:bc:72:cd:d1:f0:34:c2:39:3b:3c:48:0e:58:
         6e:b1:f7:2a:fb:d0:d7:62:c1:e6:12:9c:b0:96:36:98:81:de:
         dc:a0:c6:00:4a:65:0d:88:e2:87:d1:06:c4:21:76:8a:a8:0f:
         7c:c0:c8:ca:b5:60:b2:c6:bb:9d:e0:23:d1:93:21:a6:5a:10:
         a4:52:15:7c:ba:b1:4a:29:54:9b:6c:25:33:cb:e3:ee:ce:03:
         58:b1:96:97:1b:aa:b6:2f:43:a8:c6:57:dd:77:14:16:73:21:
         a4:69:49:7a:fb:64:1f:df:e2:29:8d:b8:1f:41:04:4f:8e:9c:
         f8:68:75:aa:d0:2c:82:4b:fa:de:56:3a:28:20:3a:a9:33:7d:
         21:3d:d9:e8:65:49:c8:2e:6d:96:3e:47:ca:1e:41:47:d9:05:
         e7:f2:a2:c2:96:51:e5:67:66:e8:5f:ad:bd:86:d5:91:bc:1c:
         58:dc:eb:62:6c:36:93:43:00:6e:c7:8c:d0:e5:4c:48:54:c2:
         7b:b6:0d:14:9b:cd:e8:f4:f1:4f:bf:18:47:f0:2f:af:0d:2f:
         27:79:cd:0d:05:a6:d3:c0:ca:88:07:21:45:27:a8:c1:7d:35:
         8e:d0:d8:42:d4:05:18:71:db:fd:02:a1:68:d0:aa:bd:be:bb:
         3c:79:6d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:07:37 2025 by rpki-client