Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2e4de124-a3b6-3a46-9f6c-c47145b156e9.roa
File:                     2e4de124-a3b6-3a46-9f6c-c47145b156e9.roa (raw, json)
Hash identifier:          I/oVo5F5cEPV/iuhLnZLXJZVRnVVHhLZ7cT3XG1bWfo=
Subject key identifier:   46:5C:AF:F3:FF:F7:B0:6B:D7:32:BB:17:97:F5:94:87:D5:1A:61:F6
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F498C21502A1F2FE705BA2880
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2e4de124-a3b6-3a46-9f6c-c47145b156e9.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     273144
IP address blocks:        38.188.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8c:21:50:2a:1f:2f:e7:05:ba:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=45fd2d2e-2fe2-45a2-9ddd-bc64b0399645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:0f:32:2f:90:87:ab:49:a0:da:09:9a:34:41:
                    c4:78:0a:27:7d:78:29:61:22:00:fc:28:6f:ba:75:
                    e6:0f:be:33:4d:64:66:cb:ce:c5:3a:b5:0f:cc:c3:
                    02:7a:9d:dc:fd:fa:48:37:eb:ee:30:8e:c1:12:af:
                    7e:9a:d7:b0:4e:3a:74:cd:9c:57:02:ea:3e:0c:5b:
                    5a:f6:93:35:93:f5:4e:da:ba:e3:ed:3b:84:b6:81:
                    9c:69:9f:ae:de:29:09:53:98:5f:9e:67:77:5b:84:
                    d7:6c:5d:0a:46:80:4a:ba:fc:ab:86:37:d4:6c:e4:
                    f3:6f:40:e4:4d:7b:9d:6e:36:46:04:fe:33:c5:2b:
                    7a:10:dd:bf:e5:10:d0:bd:32:12:d5:64:4f:93:68:
                    14:97:6d:94:29:41:21:38:5e:14:41:97:08:e1:45:
                    c4:88:72:b8:97:3b:d1:ee:8f:04:2a:80:5e:23:25:
                    50:b1:31:b0:ca:c9:ec:c2:78:bf:73:e8:90:9d:d5:
                    b9:3e:77:20:f5:34:64:3d:b7:3a:f5:9e:f8:d4:d5:
                    d4:d4:b1:02:46:7a:55:cd:33:9c:6b:89:b8:e9:46:
                    bd:f4:df:ec:d1:21:03:64:c3:7d:c9:86:16:c8:3e:
                    b2:17:ec:f9:2b:20:e3:73:ab:04:0e:38:22:e3:d2:
                    db:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:5C:AF:F3:FF:F7:B0:6B:D7:32:BB:17:97:F5:94:87:D5:1A:61:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2e4de124-a3b6-3a46-9f6c-c47145b156e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.188.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:59:0f:3c:f6:32:e1:50:2f:ef:b7:6d:6f:f9:fc:f8:cf:54:
         eb:93:62:44:70:28:bd:49:ce:ac:f8:13:24:63:8e:65:2e:57:
         e0:5a:3d:62:30:05:1f:c6:0d:2c:01:88:d1:d7:e4:ff:df:f9:
         48:b4:07:6c:50:da:27:c0:56:f0:4e:85:50:4e:56:0d:ef:91:
         62:80:8e:aa:c3:f6:1d:c0:08:fb:01:30:40:a2:0c:4e:32:0e:
         76:12:d8:ff:53:85:82:d6:d5:dc:aa:61:59:ba:b1:51:ee:74:
         68:83:ab:2e:ec:cd:da:7f:94:b9:bd:0b:a1:ff:b8:37:08:5b:
         fe:c0:26:d0:85:32:46:a3:91:dc:96:d7:4d:74:35:57:18:4b:
         8b:bb:76:08:c4:c5:ed:7a:12:26:27:88:a8:c6:e7:da:6f:f0:
         fb:b7:0a:4e:1a:c2:b4:0b:74:69:5a:0b:ca:46:1e:a2:06:99:
         3b:13:ac:c9:c7:90:91:e8:86:39:c1:25:fe:8a:3e:27:c8:89:
         ec:9b:75:5e:ab:e6:f9:c4:02:fe:16:a1:27:ea:00:9e:d2:bf:
         e2:69:21:65:fe:a1:c0:71:92:92:33:3f:6a:b7:1a:6c:cf:c2:
         ad:46:31:cb:c4:86:0e:53:90:b9:97:c2:33:9c:f0:28:c7:4c:
         4f:21:b7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:58:05 2026 by rpki-client