Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/68d71180-d8bc-39f6-8444-e9d9683e3a9b.roa
File:                     68d71180-d8bc-39f6-8444-e9d9683e3a9b.roa (raw, json)
Hash identifier:          arGrMg/4rII6UuVx8tcYTnhDChUcjfkmrODNbCMm1BY=
Subject key identifier:   51:1D:53:0B:CE:96:6F:A3:CE:FC:4A:18:18:D7:44:31:B9:C9:74:10
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D87FA99C8C368843376FB7ABC
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/68d71180-d8bc-39f6-8444-e9d9683e3a9b.roa
Signing time:             Fri 17 Apr 2026 01:00:27 +0000
ROA not before:           Fri 17 Apr 2026 01:00:27 +0000
ROA not after:            Thu 16 Jul 2026 01:00:27 +0000
asID:                     26375
IP address blocks:        38.46.96.0/19 maxlen: 24
                          38.48.64.0/19 maxlen: 24
                          38.76.96.0/20 maxlen: 24
                          38.76.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:87:fa:99:c8:c3:68:84:33:76:fb:7a:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Apr 17 01:00:27 2026 GMT
            Not After : Jul 16 01:00:27 2026 GMT
        Subject: CN=93db2704-4c06-4f0f-804e-349bdad66953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c3:79:c4:7e:67:fe:d3:76:ee:98:fb:ac:7e:
                    5d:b8:01:69:5e:c6:aa:c1:99:07:d2:5b:b0:2d:9e:
                    e5:1a:8b:5c:f7:21:65:b3:2c:0f:be:f2:6a:11:f6:
                    a0:47:eb:08:38:74:bf:aa:96:f1:ed:91:a8:a5:d7:
                    68:cf:ae:1b:94:26:dc:01:05:c6:91:c7:4a:b2:4b:
                    49:f7:8f:e8:02:80:2e:62:9c:9e:82:05:56:9f:7d:
                    bb:84:57:8b:1b:a5:ae:68:1d:f3:33:a2:ea:5b:23:
                    7f:0f:95:2d:ff:10:13:42:bf:cf:fe:b3:1b:28:e5:
                    28:20:dd:27:99:bb:96:ef:37:00:de:cd:8f:9c:07:
                    e0:61:6d:c7:af:b1:04:f2:aa:bf:45:ed:98:b3:6d:
                    95:f9:7e:e2:fb:24:75:f7:1b:ea:02:81:d0:89:c9:
                    36:6c:13:db:56:0a:c4:ae:15:c3:81:10:8a:ea:6e:
                    c8:9b:8c:ed:7c:ce:06:e1:cf:83:cf:d5:98:d3:2b:
                    dc:16:b7:a2:77:34:a7:3f:43:4f:44:bd:34:be:66:
                    f0:92:dd:bd:58:4a:00:d1:51:06:80:bf:3a:be:5b:
                    17:5d:50:39:e0:28:c8:3b:97:39:57:24:20:af:b5:
                    25:b2:01:30:48:ce:b2:e3:e4:8b:ea:ec:64:22:cd:
                    74:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:1D:53:0B:CE:96:6F:A3:CE:FC:4A:18:18:D7:44:31:B9:C9:74:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/68d71180-d8bc-39f6-8444-e9d9683e3a9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.46.96.0/19
                  38.48.64.0/19
                  38.76.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:93:94:f2:ab:f7:a0:0b:80:67:77:b1:99:69:1c:8b:1f:fb:
         55:6a:12:16:54:37:41:dc:9e:d5:1f:04:f3:45:c4:7c:f3:2b:
         79:9f:ec:83:f8:31:b8:4b:2a:16:8a:04:8c:38:48:c6:03:74:
         6f:b4:97:a1:2c:a4:21:37:3b:d6:2a:d8:fb:8e:b7:2a:43:bb:
         b9:0e:13:40:5d:49:79:63:1f:f8:4c:d5:c7:ab:5c:59:ee:d6:
         7c:8a:3c:b4:bb:59:83:46:0d:be:cb:a7:97:eb:9a:09:ce:6d:
         60:bb:43:d6:be:e8:45:8b:a6:3f:36:5e:25:d8:45:d7:df:6c:
         8a:ea:94:15:e9:18:93:84:a6:4f:15:89:6d:69:34:99:d3:51:
         32:93:75:c0:f0:cc:06:83:16:81:1f:bc:3b:35:32:c2:c1:32:
         5c:96:ec:4e:9b:02:c3:ec:3b:f5:8f:14:c2:97:39:40:11:b3:
         cc:0a:66:79:24:f7:fb:d3:13:6f:59:c1:d6:5e:ea:4c:bf:e6:
         4c:bd:85:f6:3e:cc:46:28:74:9f:16:2c:81:f8:3d:43:a0:91:
         83:08:4d:17:c2:6a:54:50:32:de:75:17:81:93:f7:7e:b7:f9:
         e3:55:0a:f7:56:3f:2c:7b:af:64:0e:18:92:2d:ce:36:a0:ae:
         ee:e3:ba:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:57:40 2026 by rpki-client