Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/66d0a468-8f08-3b2d-af7f-182c72c5920b.roa
File:                     66d0a468-8f08-3b2d-af7f-182c72c5920b.roa (raw, json)
Hash identifier:          L+VWesDcupacfK7qqopY/gBWKTH19jY9qx5TReFuHj0=
Subject key identifier:   81:36:E6:12:9C:1F:89:73:FF:BC:62:6A:DC:27:5E:A8:80:D4:2F:D7
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D876031D220ECB9245772EE80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/66d0a468-8f08-3b2d-af7f-182c72c5920b.roa
Signing time:             Thu 16 Apr 2026 19:49:31 +0000
ROA not before:           Thu 16 Apr 2026 19:49:31 +0000
ROA not after:            Wed 15 Jul 2026 19:49:31 +0000
asID:                     211407
IP address blocks:        38.109.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:87:60:31:d2:20:ec:b9:24:57:72:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Apr 16 19:49:31 2026 GMT
            Not After : Jul 15 19:49:31 2026 GMT
        Subject: CN=bc43ebcd-c210-45cb-9d22-abdf87666372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:01:3c:b9:1b:c1:95:90:0a:bb:c8:0b:5f:72:
                    98:64:b4:b1:ac:b0:3d:8c:86:5d:31:3c:38:cd:be:
                    25:a2:cc:a4:2c:11:bc:22:d3:bd:3c:7f:ed:54:27:
                    f7:f0:57:2b:66:c6:dd:6f:a8:11:95:da:09:3e:cc:
                    d4:1d:91:b9:b6:39:5d:1c:15:82:73:f8:6e:76:88:
                    46:cf:4c:5d:0a:e2:67:2e:e3:6b:f1:ca:47:fa:75:
                    08:82:0a:a6:a7:c5:a0:21:a5:79:cd:b5:a3:d7:6a:
                    86:02:b6:28:ec:7d:22:06:e2:ee:fb:dc:da:0d:b6:
                    22:b2:94:dc:2d:62:13:9e:fe:63:1e:04:9a:a2:5e:
                    88:c8:db:a5:72:ba:0e:c1:40:a7:51:1b:17:c1:8c:
                    70:b4:25:cd:7f:74:fa:29:38:27:79:7d:37:46:d5:
                    a8:df:fa:5e:68:74:3a:e0:b2:b7:c1:b1:36:a1:3e:
                    46:7a:9d:62:3d:ff:b7:ba:49:9e:fb:8d:60:de:2f:
                    c3:31:56:e3:20:2c:94:65:d8:cb:6e:8a:9b:ef:8f:
                    9c:f9:d5:b3:76:21:bd:3e:01:7f:f3:db:77:25:9f:
                    95:f2:59:3a:e5:c1:d3:f3:fe:45:2a:00:8b:94:29:
                    7c:50:2a:6e:05:a5:b6:8a:2f:a7:4d:32:ee:77:46:
                    fb:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:36:E6:12:9C:1F:89:73:FF:BC:62:6A:DC:27:5E:A8:80:D4:2F:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/66d0a468-8f08-3b2d-af7f-182c72c5920b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.109.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:66:25:67:35:ca:4c:7d:44:e6:ce:48:15:35:07:8c:40:06:
         95:5f:d5:44:4e:45:af:e7:cb:54:13:e5:c4:3b:7f:13:bc:d8:
         5f:df:b3:45:b7:c0:f4:65:13:fc:67:44:21:0b:e1:ec:6d:ee:
         c8:d4:f2:75:9b:35:99:b3:32:a4:e7:26:7e:91:e4:48:4a:af:
         14:c1:d7:bd:6f:5b:50:6a:dc:35:89:98:91:d8:2e:1e:a9:92:
         fc:57:62:1d:98:61:ac:1e:88:c2:80:f0:bd:a9:4d:16:f6:22:
         83:8d:19:bf:93:77:af:67:02:9a:57:90:14:fb:0e:75:fd:7b:
         7e:29:56:03:7d:ff:c7:41:98:30:23:cc:2c:b7:13:98:da:c0:
         ea:b0:ac:48:5b:90:34:03:19:dc:e7:2a:f3:86:bb:74:c9:5a:
         2b:1f:23:a9:9b:1d:98:3c:2b:c5:61:83:fe:5c:3d:b1:b8:26:
         0c:58:a4:20:78:3f:60:23:48:22:f9:1b:3e:17:cb:1d:0f:62:
         83:b1:a7:bc:d9:3d:48:83:e5:01:0e:fe:5f:5f:f5:0c:87:64:
         cd:e7:87:75:e8:ee:a4:e3:6f:5b:6e:04:13:7f:7a:5d:63:db:
         a4:4b:ab:e8:ed:5e:4c:73:27:69:1d:01:06:2a:c3:a7:fd:69:
         40:ef:51:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:44:38 2026 by rpki-client