Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5f81302d-6049-3bed-9285-34760c133ca8.roa
File:                     5f81302d-6049-3bed-9285-34760c133ca8.roa (raw, json)
Hash identifier:          eX7jLkIFgo4pP14wfbSYr0N8uZ0lsdBH6KLfFQHnj3U=
Subject key identifier:   F6:90:FE:2C:2C:C5:BB:C1:8B:14:78:89:6D:28:E9:E8:C6:EA:42:3B
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D86953DBD21E33427A00292A0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5f81302d-6049-3bed-9285-34760c133ca8.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     273830
IP address blocks:        38.3.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:3d:bd:21:e3:34:27:a0:02:92:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=b4ed7498-f208-4af5-9e24-315bd3ecff0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a3:7b:6b:16:ad:68:f7:63:86:4d:70:33:54:
                    a7:a6:74:a8:fc:1e:c9:57:70:73:f8:bf:28:7d:60:
                    ab:98:67:ee:5e:c4:52:8e:fd:f2:aa:23:82:c2:91:
                    e9:01:dd:c1:cc:1f:34:6a:be:96:73:38:32:b1:fc:
                    17:d6:32:de:3a:51:77:bd:e6:80:d0:97:c8:3e:32:
                    42:d2:7b:26:56:00:18:66:ec:53:e3:38:1b:91:c8:
                    96:c2:41:ba:24:0b:9e:18:66:3e:7a:11:44:c5:36:
                    2c:48:4d:3a:09:a4:1e:8a:e4:3c:8c:1a:fc:24:5b:
                    59:ab:88:21:f7:b7:55:d3:dd:99:81:d9:74:20:1a:
                    d5:99:9a:85:7f:e0:93:76:1f:7a:85:00:9f:f0:f3:
                    d0:68:6a:14:fa:b5:68:4d:ea:4e:fd:8d:ce:c6:df:
                    c1:67:a3:14:fd:d5:91:f3:51:22:81:51:45:de:be:
                    f8:53:7f:28:2b:3f:c8:8c:13:35:bc:d2:00:65:ca:
                    67:fc:5d:83:35:cf:e4:15:72:79:ab:6a:9c:54:6f:
                    be:d0:a8:2c:7a:a8:69:65:68:f1:8a:3e:91:a4:4d:
                    41:f3:ed:a7:6d:32:7e:bc:b4:9d:5a:01:03:63:b7:
                    2d:75:09:98:8c:c8:3b:4b:82:86:a9:81:94:2e:57:
                    39:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:90:FE:2C:2C:C5:BB:C1:8B:14:78:89:6D:28:E9:E8:C6:EA:42:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5f81302d-6049-3bed-9285-34760c133ca8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.3.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:76:e2:d9:b6:33:7b:24:c7:db:d3:65:08:1f:dd:a6:37:e6:
         bc:46:02:b5:6c:80:3a:1b:b2:2c:f8:07:28:27:13:aa:71:02:
         62:01:10:8a:03:db:ad:a2:60:af:c8:52:e0:a3:d9:99:00:76:
         9b:61:ac:b8:77:8a:df:7f:41:d4:32:cd:0c:a4:e6:78:a1:d0:
         1a:7c:ef:36:f8:f2:39:3c:6f:ac:de:dd:e9:31:7f:30:98:ad:
         60:2f:ec:0b:39:c2:9e:bd:2b:99:36:fa:34:50:f1:dd:01:8c:
         52:a0:ca:de:90:fb:68:c1:1d:33:98:3b:dd:2a:60:6a:24:4f:
         4c:4b:37:3e:e4:9c:18:41:55:01:07:e0:1d:1c:78:0a:b6:db:
         09:c1:c1:f5:23:c1:73:a2:62:0f:8b:8b:01:37:aa:b5:3d:64:
         a3:e5:5d:8b:c7:0d:d3:ed:a2:1f:36:75:5e:a4:e5:a9:37:99:
         64:db:d0:05:37:6d:96:85:e8:51:58:3a:3a:23:b7:a8:51:cb:
         4c:8d:bc:5c:16:e9:ce:53:01:2f:1d:eb:e9:74:03:99:29:62:
         80:bd:52:46:08:09:0b:62:f7:50:d3:bb:44:9c:db:ae:5b:ae:
         01:1c:57:c6:dc:43:b3:da:01:87:84:6a:01:55:6c:3a:a9:8e:
         03:5f:77:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:05:33 2026 by rpki-client