Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/33d473ac-ef87-3235-a72d-54f81da887ff.roa
File:                     33d473ac-ef87-3235-a72d-54f81da887ff.roa (raw, json)
Hash identifier:          0eMj76JflkFmLOeksgz/m4F1ZDyiz/RaRAo2sIhU8G4=
Subject key identifier:   D1:75:CC:2B:E2:CA:CC:2F:D5:9C:2F:A5:A3:CE:78:AD:9C:A1:13:CE
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F27F257EACE41E34E5F81CF80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/33d473ac-ef87-3235-a72d-54f81da887ff.roa
Signing time:             Sun 13 Sep 2026 01:00:12 +0000
ROA not before:           Sun 13 Sep 2026 01:00:12 +0000
ROA not after:            Sat 12 Dec 2026 02:00:12 +0000
asID:                     275719
IP address blocks:        38.199.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:27:f2:57:ea:ce:41:e3:4e:5f:81:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep 13 01:00:12 2026 GMT
            Not After : Dec 12 02:00:12 2026 GMT
        Subject: CN=0289d277-0612-4aaa-b203-a7f0e876ec19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6b:d1:4a:9f:d1:24:d9:dc:40:1a:a3:c9:89:
                    53:81:2e:18:fc:8f:a9:47:b9:ff:73:46:87:47:1a:
                    c9:07:1b:fe:c5:a5:05:09:28:cd:f2:9e:36:92:c9:
                    8d:a7:d8:6b:10:65:3d:cd:24:4a:97:a4:9e:72:f3:
                    58:46:00:2b:5b:db:27:60:26:a0:9f:dc:9f:5a:19:
                    9c:ce:ca:72:d5:e0:69:87:9c:e6:b7:79:6a:da:45:
                    36:10:45:5a:2e:ae:a9:7e:ab:16:8c:0f:78:51:9f:
                    af:dc:6e:72:3c:31:cb:1d:e2:8c:1f:d2:07:4a:03:
                    f2:3e:8d:fa:9f:3a:09:45:d2:79:93:f4:e4:dc:c4:
                    27:e0:48:d7:a3:9f:e9:5c:90:6f:6b:b8:02:ca:b5:
                    da:bb:e2:8c:06:57:83:bb:f6:ea:e4:57:7f:ae:d3:
                    0d:fc:7e:56:e9:64:b4:9c:7c:d6:a9:44:71:a3:0f:
                    42:c5:f2:31:f6:a8:0b:bb:07:df:b5:7c:67:ad:1a:
                    6d:00:af:d4:f1:22:3a:d1:45:de:6f:2b:c6:37:2e:
                    7b:e1:0f:00:75:64:ae:a9:9d:c8:13:8d:f1:0d:9a:
                    ed:e0:ee:12:82:46:90:4c:88:b2:a1:f2:37:d1:97:
                    ec:94:f0:a7:b6:54:19:fa:66:c3:b8:e3:53:3e:d4:
                    10:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:75:CC:2B:E2:CA:CC:2F:D5:9C:2F:A5:A3:CE:78:AD:9C:A1:13:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/33d473ac-ef87-3235-a72d-54f81da887ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.199.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:f8:a1:6b:41:98:00:eb:77:74:4f:3e:ef:73:9e:55:e1:fb:
         aa:78:50:52:3e:42:be:68:1d:d4:75:6d:bd:84:b8:6a:07:17:
         9f:b4:58:0f:7b:89:ed:58:9c:8f:72:03:77:40:56:b9:3c:f4:
         0b:67:48:53:06:d2:ed:d7:49:84:9e:2b:c6:05:d2:1f:67:82:
         97:40:f8:53:de:82:d0:85:cc:f0:90:d8:e6:81:ae:8e:07:fa:
         b3:c0:46:e5:cc:b9:1d:68:e2:db:d6:01:9a:d8:cb:a4:b5:78:
         2e:cf:1e:c5:fc:b2:5c:6b:c9:4c:f3:63:08:5b:a7:10:a9:03:
         de:c4:ba:5d:d1:f8:a7:92:df:c4:9e:61:3e:6b:ef:e3:b7:42:
         83:8c:d8:f9:9d:3b:3b:17:e0:69:a2:41:61:1a:d8:8d:0c:94:
         ab:26:c0:bf:01:59:2f:25:c0:41:8b:ee:e2:ad:fa:9c:b0:6e:
         dd:ba:d4:53:57:01:cd:6c:b7:c6:19:6f:ff:93:ea:0a:db:cf:
         02:67:c6:bf:3c:58:41:59:66:7f:d5:54:ee:40:0d:d8:c3:a9:
         96:20:5f:80:d8:11:3b:32:38:b1:7b:e6:03:ab:a6:13:99:bd:
         90:d0:7d:07:65:22:d8:f6:5d:c5:a8:4c:dd:14:d2:12:94:c6:
         b3:86:9b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:44:56 2026 by rpki-client