Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5e529de4-dbf2-3641-8895-2bfeadb9e785.roa
File:                     5e529de4-dbf2-3641-8895-2bfeadb9e785.roa (raw, json)
Hash identifier:          bPmOIXK8W5/9mcfWNw2LV80/f3XSKeQB8I/LRmcaT6M=
Subject key identifier:   C6:D2:6E:A9:56:80:A2:A6:72:5A:00:94:A8:A2:34:3B:2B:7A:52:E7
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F00DCC0FF89214AE605C26780
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5e529de4-dbf2-3641-8895-2bfeadb9e785.roa
Signing time:             Sun 30 Aug 2026 01:00:12 +0000
ROA not before:           Sun 30 Aug 2026 01:00:12 +0000
ROA not after:            Sat 28 Nov 2026 02:00:12 +0000
asID:                     0
IP address blocks:        38.98.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:00:dc:c0:ff:89:21:4a:e6:05:c2:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Aug 30 01:00:12 2026 GMT
            Not After : Nov 28 02:00:12 2026 GMT
        Subject: CN=d471130d-1ac3-4d25-9aa8-98e6a0fe719f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:64:a7:17:54:dc:ce:4d:10:f4:27:f6:f7:57:
                    b6:87:5a:70:d3:b7:1d:a7:29:f9:48:e0:27:98:f5:
                    a9:36:24:6f:db:d0:4a:4e:70:28:a7:01:02:eb:0f:
                    53:88:ae:52:ea:bf:c5:4f:5b:a6:b7:2d:a4:8e:4a:
                    94:ea:f6:3b:a7:3a:0e:da:a1:a1:14:71:16:07:e1:
                    35:de:2f:2c:84:14:e9:73:b0:75:1e:43:29:c3:2d:
                    5b:cb:ce:47:64:73:3b:e0:a9:10:b3:71:b3:3d:2c:
                    41:48:5e:cc:bb:46:c3:86:40:12:c2:ba:f1:99:e3:
                    0e:12:90:62:12:07:b4:ad:0e:ad:d3:b6:5a:c5:18:
                    46:09:c1:4b:84:55:b5:07:92:40:9c:dd:c6:e4:9b:
                    94:0c:5b:0a:f6:c8:f4:76:6b:44:53:63:97:81:e2:
                    f8:a4:d5:9f:85:1c:d2:55:e6:d8:1a:0b:22:f5:37:
                    d2:8e:9b:0e:06:87:5b:39:af:4e:6c:76:18:83:bb:
                    67:3b:08:b8:db:22:ca:a9:49:52:92:fc:29:75:9e:
                    59:fc:22:6d:e0:00:06:d2:50:17:28:b2:a4:d2:d5:
                    a5:78:66:e3:67:ab:5f:bc:14:63:85:9c:e4:0f:ad:
                    51:4e:ce:08:5a:ce:50:9e:d5:08:57:a4:43:48:ef:
                    ff:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:D2:6E:A9:56:80:A2:A6:72:5A:00:94:A8:A2:34:3B:2B:7A:52:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5e529de4-dbf2-3641-8895-2bfeadb9e785.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.98.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:13:ab:c5:06:29:95:9c:73:d0:c7:31:c3:65:59:89:65:02:
         02:d8:c1:86:9f:90:85:a6:05:8f:37:4f:49:d5:b6:c7:4b:77:
         95:39:40:a6:ed:f0:4d:65:03:3c:d4:01:9e:5b:a5:4a:36:d1:
         1d:97:5c:fd:4b:ad:61:6a:db:37:42:97:69:6a:93:02:99:a1:
         c8:3d:66:b7:5b:36:7a:71:c2:6b:d6:e0:45:01:5f:62:09:11:
         b4:f6:45:79:15:9c:da:77:b3:bb:5e:2d:4c:5d:bb:f4:67:1a:
         8a:37:97:f8:5e:23:eb:5c:30:a4:8b:5f:0d:25:52:fe:ee:b4:
         54:cb:a1:ad:26:23:3a:07:60:22:03:1f:fb:e8:9f:2e:58:6c:
         d1:c3:37:ca:c4:b1:9b:f3:dd:28:f1:95:e9:79:62:6b:af:50:
         74:50:13:00:81:f1:20:ad:d7:99:39:c7:70:e4:8c:26:18:79:
         51:14:bc:10:58:32:a8:7a:fc:b6:d9:a8:1c:c9:c1:62:22:13:
         ed:61:30:0e:47:34:b8:a8:97:85:a5:5d:f4:6b:e1:b9:1a:54:
         26:35:48:6c:f3:ce:9f:2c:51:e6:f7:57:e7:56:a7:06:c3:5e:
         c5:14:ac:3a:7b:0f:b3:f3:0c:01:3d:42:10:57:fc:11:3c:1d:
         cd:2a:01:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:19:45 2026 by rpki-client