Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5d1c3116-bec1-3812-9206-1a588da62fb6.roa
File:                     5d1c3116-bec1-3812-9206-1a588da62fb6.roa (raw, json)
Hash identifier:          vsMqewYKWQ8nWTvGYp7yXmDeNTiPnY8TASR8oSiC7WA=
Subject key identifier:   24:0A:77:B7:E2:E5:69:75:DA:A4:F5:C3:38:47:56:56:E4:75:C7:35
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584CD8373C81F8CCF9F69F68FF40
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5d1c3116-bec1-3812-9206-1a588da62fb6.roa
Signing time:             Fri 13 Feb 2026 02:00:31 +0000
ROA not before:           Fri 13 Feb 2026 02:00:31 +0000
ROA not after:            Thu 14 May 2026 01:00:31 +0000
asID:                     25840
IP address blocks:        38.74.68.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d8:37:3c:81:f8:cc:f9:f6:9f:68:ff:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Feb 13 02:00:31 2026 GMT
            Not After : May 14 01:00:31 2026 GMT
        Subject: CN=416185a9-4039-4baa-a4c5-01a65689c122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7f:34:fc:60:df:be:e1:f4:56:ae:6a:97:f1:
                    bf:7f:55:97:07:88:d3:98:2c:27:0a:9d:a5:53:56:
                    e0:06:e3:d8:62:be:16:b6:c8:a5:7c:00:91:7f:28:
                    9a:4f:12:47:d7:44:a2:ef:0e:53:91:56:cc:22:1b:
                    69:50:a5:5a:c1:b3:39:23:0b:2e:57:fc:43:26:f5:
                    6e:e0:99:1a:08:b0:93:46:8e:e4:6d:18:63:7b:6e:
                    db:50:db:36:2c:a5:0f:c7:f8:06:6a:e9:50:75:52:
                    cd:60:ec:cf:12:54:62:88:07:70:31:64:66:f6:6c:
                    07:70:ac:91:53:d6:fc:2d:07:52:67:83:63:4c:b4:
                    61:ad:fe:a7:b7:c1:e6:53:58:4d:55:c7:5a:d8:45:
                    c9:4a:08:23:56:52:04:f4:0f:2a:7e:12:94:12:3a:
                    66:65:8c:ab:c3:f4:af:1e:72:b0:1e:fc:7d:47:19:
                    d6:00:39:55:fd:34:5f:50:54:13:a5:8d:5f:ec:20:
                    16:be:5f:7a:ad:9b:96:b4:0f:3b:8b:f9:aa:ed:15:
                    35:cc:7b:ce:65:c3:28:db:99:ae:88:2a:cd:81:ce:
                    d3:fa:e8:f2:93:16:92:c5:d5:d8:e5:b2:24:17:ef:
                    fe:cd:1b:a8:55:af:f1:25:81:72:e8:8b:c7:c1:92:
                    d1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:0A:77:B7:E2:E5:69:75:DA:A4:F5:C3:38:47:56:56:E4:75:C7:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5d1c3116-bec1-3812-9206-1a588da62fb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.74.68.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:0b:6a:a5:ea:4e:f3:d7:49:ad:be:4d:fb:9b:82:6b:e0:47:
         bb:a4:6d:4d:0e:1f:31:1c:58:5a:0c:7a:c8:ab:74:32:0e:c9:
         72:a3:74:de:d6:5a:16:40:ae:fd:6a:fe:35:ee:1f:24:d1:98:
         b3:5a:05:8d:0f:23:de:c2:18:9f:60:e8:dc:36:96:ca:1b:14:
         ff:8e:75:92:71:a6:2a:7b:75:74:14:48:97:b4:8a:9b:70:29:
         85:cf:ac:d5:7a:34:35:eb:34:9f:3b:18:a8:be:86:5f:8e:9b:
         75:e6:c2:58:96:e9:8e:64:9d:93:9c:26:bc:be:96:a8:ca:0f:
         d6:a6:27:53:73:59:00:0a:7c:8d:c6:92:91:39:cb:36:16:89:
         8b:be:c4:29:15:9c:dc:54:1f:ce:d6:f4:ec:f4:8f:5e:a1:4a:
         2b:42:18:6d:f4:b9:b0:f7:d2:e5:77:e4:9d:1e:86:78:b7:16:
         35:ab:d0:12:7c:37:ea:d3:06:ea:1f:3f:1d:aa:d4:ff:f5:51:
         2a:08:4f:b0:8a:cf:a5:74:45:5c:08:2f:6e:96:82:fa:46:72:
         2e:5f:d7:ba:67:9a:e7:b7:00:44:09:81:54:06:46:7a:81:a2:
         17:78:61:64:51:b9:74:e1:6c:67:99:67:fe:d6:93:4a:94:4a:
         82:80:c7:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:30:29 2026 by rpki-client