Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/55df7f79-5f5a-3d7d-93e9-910b97400bb7.roa
File:                     55df7f79-5f5a-3d7d-93e9-910b97400bb7.roa (raw, json)
Hash identifier:          zMKDt1vD0Y6tPBlXiatf2NfeDD5XY86A6TjZBPTFaNk=
Subject key identifier:   A4:DF:21:9A:59:16:15:5D:CE:9B:63:7C:A9:AA:59:76:0F:4D:30:D8
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D07ACE03C867D8F1BE1B52D88
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/55df7f79-5f5a-3d7d-93e9-910b97400bb7.roa
Signing time:             Mon 02 Mar 2026 02:00:31 +0000
ROA not before:           Mon 02 Mar 2026 02:00:31 +0000
ROA not after:            Sun 31 May 2026 01:00:31 +0000
asID:                     400424
IP address blocks:        38.65.22.0/24 maxlen: 24
                          38.99.92.0/24 maxlen: 24
                          38.124.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:07:ac:e0:3c:86:7d:8f:1b:e1:b5:2d:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Mar  2 02:00:31 2026 GMT
            Not After : May 31 01:00:31 2026 GMT
        Subject: CN=f1c9cec7-3d5c-4593-8103-f6a1dc4da810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:64:c3:6c:3a:bd:fa:6d:25:98:75:7b:63:b7:
                    a8:66:b9:ca:b6:f4:d5:d1:6a:d3:a5:aa:56:ef:35:
                    3e:d1:f8:5c:dd:ba:90:1f:ab:cf:06:a6:50:03:a6:
                    e3:f7:94:c8:8a:ce:e0:3f:f6:ab:c9:44:e4:e4:b3:
                    db:51:16:79:a6:80:b9:63:7f:da:ed:43:f0:3d:b6:
                    e0:b8:b9:88:99:c8:5f:03:ad:77:79:df:ea:77:27:
                    91:8b:bd:e5:cf:6c:b8:dd:67:92:6f:54:9e:c6:39:
                    9c:ed:d2:17:1a:b8:17:5c:4c:2d:90:7f:fd:e1:63:
                    51:b6:3e:9e:19:a6:8e:da:f4:49:3d:4f:89:b0:18:
                    7c:ca:b1:1f:bf:de:36:95:35:f2:b1:83:cd:1e:52:
                    26:7b:11:4a:b7:0a:2f:ea:55:cf:53:18:5d:ac:a9:
                    d0:f1:31:9f:91:67:d3:9f:2c:f3:9f:cd:3d:bb:55:
                    bf:4d:c6:dc:42:3a:5e:6a:02:c2:2e:53:b4:6c:d4:
                    da:8c:39:cc:57:4b:52:6b:b6:a6:ff:ac:9c:ce:14:
                    9c:ef:bc:73:82:d3:d7:fc:2e:66:07:52:e7:3d:63:
                    6b:a0:38:70:6a:5d:20:52:da:f3:a3:66:a0:2b:bc:
                    a4:98:2d:65:b2:bc:bd:d7:a1:3a:7d:6c:2d:73:19:
                    38:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:DF:21:9A:59:16:15:5D:CE:9B:63:7C:A9:AA:59:76:0F:4D:30:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/55df7f79-5f5a-3d7d-93e9-910b97400bb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.65.22.0/24
                  38.99.92.0/24
                  38.124.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:8f:99:c8:f6:a4:d7:ef:4c:c5:34:24:f5:8a:1b:8a:9f:f0:
         8f:fa:7f:b7:09:2f:27:a6:45:ad:88:ff:53:ac:19:3b:a9:dd:
         02:4d:79:4f:80:07:5b:58:6f:05:93:6c:27:29:e8:13:df:e1:
         0b:4a:92:d9:1d:d2:09:30:6d:50:99:1c:69:b5:57:a5:c9:b9:
         41:d2:31:87:8c:57:c1:45:82:68:68:db:c2:e1:0f:5f:0e:93:
         3d:04:63:a4:39:5c:20:d4:f0:fd:22:7d:d5:d7:50:d7:fd:f8:
         86:0e:dd:43:8c:12:ee:b0:68:8d:09:5a:36:39:10:c6:11:4f:
         e7:50:c0:5a:b8:1d:7b:b0:eb:32:cc:be:91:50:00:49:4f:9b:
         1f:bb:40:3d:9c:b3:6a:ac:e0:fc:fb:76:fd:86:34:ba:b2:4a:
         a9:e7:26:37:65:f0:c4:25:23:1e:3e:e0:c0:be:f6:53:59:5c:
         3d:31:8b:7e:ac:73:10:21:83:e7:c4:c9:96:4a:b9:0c:88:c5:
         10:c7:94:14:61:31:fa:44:17:ef:c6:24:00:73:37:08:2a:14:
         12:42:a2:41:bc:f9:42:f0:ba:0f:4e:14:4e:9e:48:79:12:de:
         16:b8:af:98:64:fa:c6:b8:57:58:c4:76:cc:59:55:a8:75:3e:
         89:f5:92:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:54:32 2026 by rpki-client