Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/50b75d85-c28d-35d6-b8fa-3481f4fd2dc7.roa
File:                     50b75d85-c28d-35d6-b8fa-3481f4fd2dc7.roa (raw, json)
Hash identifier:          8ZGnqITx0CQ1+WYeNH3XQ9S+KUlv8Hq/QFf8APFWTMk=
Subject key identifier:   4D:77:03:C9:D8:87:55:1A:0E:BE:67:2A:F1:45:2C:62:FE:90:02:21
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D7057CD7F20A0FD80400D09C0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/50b75d85-c28d-35d6-b8fa-3481f4fd2dc7.roa
Signing time:             Wed 08 Apr 2026 13:49:01 +0000
ROA not before:           Wed 08 Apr 2026 13:49:01 +0000
ROA not after:            Mon 06 Jul 2026 17:24:09 +0000
asID:                     51852
IP address blocks:        38.180.15.0/24 maxlen: 24
                          38.180.46.0/23 maxlen: 24
                          38.180.84.0/23 maxlen: 24
                          38.180.161.0/24 maxlen: 24
                          38.180.162.0/24 maxlen: 24
                          38.244.144.0/23 maxlen: 24
                          149.33.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:57:cd:7f:20:a0:fd:80:40:0d:09:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Apr  8 13:49:01 2026 GMT
            Not After : Jul  6 17:24:09 2026 GMT
        Subject: CN=641ff7ec-b75f-4260-9e8c-d34dd6b8d465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:37:1f:2c:96:86:4c:17:32:bf:ac:52:5a:c7:
                    f8:b5:95:8c:7f:dd:24:48:6f:2a:a7:76:a9:41:ca:
                    d7:db:96:a7:2f:ca:fd:3a:0b:7f:02:f1:35:67:67:
                    77:4d:16:02:d2:4e:38:8f:5f:1a:16:19:6a:5e:2e:
                    66:7d:c4:5a:3e:18:b2:2f:a0:1b:8e:65:e6:26:b7:
                    dc:29:10:27:95:0f:11:bd:13:c2:4e:99:14:6f:4d:
                    67:d1:05:52:5f:38:ce:40:9f:34:7b:65:5d:b4:5a:
                    f4:61:e6:9f:ff:db:f8:9e:b7:6e:64:22:b8:9f:79:
                    17:cd:1f:f7:4c:dc:26:d5:ee:36:9a:64:a6:b4:e6:
                    55:73:75:48:5d:67:d8:5a:d9:28:79:20:00:5f:76:
                    6d:20:92:ed:85:c9:7d:0b:8d:7a:cf:7a:e2:2c:63:
                    1d:51:57:92:52:4d:7f:2e:98:a8:26:0a:ba:18:20:
                    cf:45:20:7e:4a:6e:8c:22:cd:3a:b1:95:cf:5a:ff:
                    0b:95:a7:be:1b:1b:f9:55:cd:55:f2:07:62:f5:ee:
                    90:3d:b7:77:b8:80:3b:fa:31:62:5f:a8:9e:44:df:
                    f1:8c:6b:25:e2:fa:21:f8:83:fa:1d:75:bd:7b:8d:
                    31:ab:7a:9a:f0:db:d8:7b:59:5f:bc:84:44:4e:98:
                    f7:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:77:03:C9:D8:87:55:1A:0E:BE:67:2A:F1:45:2C:62:FE:90:02:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/50b75d85-c28d-35d6-b8fa-3481f4fd2dc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.180.15.0/24
                  38.180.46.0/23
                  38.180.84.0/23
                  38.180.161.0-38.180.162.255
                  38.244.144.0/23
                  149.33.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:5e:72:3d:62:d7:f3:83:8c:22:b7:8d:90:be:45:04:8c:ff:
         c9:8b:bf:d5:6e:b7:f1:a3:df:fa:24:e2:7d:fa:59:04:b6:a0:
         35:55:b5:31:cd:62:7a:2e:94:ea:83:41:3b:99:10:c2:59:03:
         f8:ec:fc:bc:49:b1:ad:8c:2c:89:a2:44:f0:25:93:30:4c:df:
         21:40:a9:77:1b:49:83:7a:39:f2:0f:52:e0:b9:9f:88:e6:53:
         aa:1e:0a:30:ae:b0:1f:ee:2e:5a:5e:ae:c0:29:bc:e5:13:c3:
         b3:f9:60:7d:46:76:bc:e2:d9:70:19:60:8d:99:f1:af:81:ac:
         eb:3e:c5:5b:58:55:1b:97:8b:b4:d5:b8:66:6d:b2:07:cd:e9:
         e5:31:ab:fa:23:94:67:77:ee:70:1d:7c:08:36:77:74:ff:60:
         7b:0f:4d:fa:91:0e:a4:af:c1:06:d3:3d:d4:fe:c6:a9:e9:2d:
         5e:f6:4f:ba:36:38:b4:0f:df:f1:9e:1a:28:bb:88:05:60:8c:
         1a:37:26:e4:b6:ae:00:7f:cc:82:1c:24:45:58:e7:25:e5:30:
         9c:91:ac:35:49:e2:95:94:90:70:56:76:5f:5c:c0:8a:67:d5:
         27:c3:4b:aa:6b:6c:8c:98:79:14:d1:6d:65:57:87:d3:76:e4:
         7f:23:bd:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:17:36 2026 by rpki-client