Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/17a53d9d-aa61-3e6c-97f0-cf0beab598cf.roa
File:                     17a53d9d-aa61-3e6c-97f0-cf0beab598cf.roa (raw, json)
Hash identifier:          SGOiTGD6KDDQ7HMomfsYHd0Bg/Vkvn0yc7mEdXG7cq8=
Subject key identifier:   4A:37:1D:7E:63:0A:98:47:62:37:04:4B:57:32:B0:0D:50:2D:4B:94
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584CB121ADA2B28A6511D09FE200
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/17a53d9d-aa61-3e6c-97f0-cf0beab598cf.roa
Signing time:             Fri 30 Jan 2026 02:00:31 +0000
ROA not before:           Fri 30 Jan 2026 02:00:31 +0000
ROA not after:            Thu 30 Apr 2026 01:00:31 +0000
asID:                     0
IP address blocks:        38.45.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b1:21:ad:a2:b2:8a:65:11:d0:9f:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jan 30 02:00:31 2026 GMT
            Not After : Apr 30 01:00:31 2026 GMT
        Subject: CN=664664f8-b890-4742-8f9a-b3564d192d3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:af:aa:31:dc:9b:5e:ce:04:16:47:c0:fe:57:
                    83:21:f9:05:a2:5f:e6:cc:bc:ca:2a:5b:a1:bb:84:
                    8b:6a:2a:6c:8b:4c:29:ba:42:73:ed:7d:56:d4:a7:
                    71:35:6b:82:4b:e4:de:94:9a:c2:0c:c1:26:cc:d9:
                    fa:cc:04:63:85:ce:43:0a:21:25:07:49:c4:c1:e1:
                    2f:3e:d0:96:c1:84:2d:55:85:be:9b:86:39:85:bf:
                    0d:80:b2:fb:fd:54:a3:34:58:c0:84:26:7b:da:5a:
                    e6:33:74:ae:ba:3e:dd:a4:fd:f5:47:a5:19:73:ec:
                    08:78:6a:a2:f4:54:21:a6:3c:3e:56:67:26:9e:da:
                    d5:8d:46:4d:97:3f:82:70:d6:26:bc:4e:b3:c8:55:
                    09:92:62:42:e8:8d:09:d9:55:be:b9:60:82:80:40:
                    ce:d5:be:2d:bd:b5:ff:6c:d8:81:68:3b:94:30:1b:
                    ea:b7:47:74:ae:4f:1a:c9:ed:a3:bd:4d:ae:38:30:
                    60:19:48:80:81:0b:c3:d1:c7:04:5d:f6:10:b2:19:
                    23:61:d9:28:fe:37:af:4a:56:a0:48:d7:2f:0b:c2:
                    a7:7b:a8:d4:e0:eb:c0:f5:b8:16:93:ff:c2:3a:f0:
                    ad:b7:45:82:d3:e8:f2:56:6b:c8:63:ab:45:31:22:
                    71:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:37:1D:7E:63:0A:98:47:62:37:04:4B:57:32:B0:0D:50:2D:4B:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/17a53d9d-aa61-3e6c-97f0-cf0beab598cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.45.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:c6:0d:e8:2a:bc:4e:d9:d4:a6:69:66:95:88:9c:9c:2a:ff:
         67:6d:06:fd:9e:0e:f4:b9:a7:2e:e7:55:6d:3f:ae:9f:ce:6e:
         b5:a0:13:a1:93:14:f5:08:19:9b:ea:df:e6:fe:8f:00:f2:ad:
         cb:11:fa:15:0b:a2:06:98:c2:26:92:2e:32:da:eb:34:6e:50:
         9a:85:30:77:12:ff:47:f9:0c:bb:32:5b:5d:29:a4:f9:74:03:
         9c:94:30:9f:04:1e:aa:0b:d0:bd:94:25:a3:ee:13:42:38:fd:
         da:02:93:9c:1c:fb:5a:24:1f:03:84:05:e9:5d:40:25:ca:7a:
         15:f1:88:bb:0a:a3:31:13:f5:1f:3f:12:a3:61:5b:24:09:40:
         ec:37:0e:0a:bf:c3:aa:56:59:cb:9c:f2:b5:35:ee:aa:5d:6c:
         04:70:93:f3:a9:8c:9e:e8:dd:9e:02:56:66:d4:6a:b5:64:62:
         fb:d0:62:28:7e:66:bf:57:ba:85:90:69:03:ba:24:4c:f1:b4:
         ca:ea:0d:93:dd:f6:ee:e5:33:b5:b0:45:63:23:68:49:2e:80:
         30:dc:cc:18:a6:c5:88:1c:ee:f4:fa:a5:f0:0c:22:04:78:78:
         2b:8a:c1:91:61:ee:fd:6f:c8:82:de:df:3f:2a:b7:9b:39:a6:
         1f:8e:6b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:35:04 2026 by rpki-client