Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6d341148-1697-3ccd-917e-03a6d8534e41.roa
File:                     6d341148-1697-3ccd-917e-03a6d8534e41.roa (raw, json)
Hash identifier:          nLBEcba4a+9QSvZANJACruDSQMVc2JJDk1xCYEVtvTU=
Subject key identifier:   FF:FC:B7:27:F8:01:B1:82:33:88:49:08:4F:14:DD:28:5E:BD:8A:25
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584FADF32EA525AC42F2B80E4B80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6d341148-1697-3ccd-917e-03a6d8534e41.roa
Signing time:             Sat 31 Oct 2026 01:00:13 +0000
ROA not before:           Sat 31 Oct 2026 01:00:13 +0000
ROA not after:            Fri 29 Jan 2027 02:00:13 +0000
asID:                     0
IP address blocks:        38.183.128.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:ad:f3:2e:a5:25:ac:42:f2:b8:0e:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct 31 01:00:13 2026 GMT
            Not After : Jan 29 02:00:13 2027 GMT
        Subject: CN=51249324-4770-4786-b0db-81b069d7bab2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a1:cc:39:17:35:1e:ef:32:6a:a6:ad:f0:fa:
                    b3:cf:cc:55:55:10:11:25:34:e0:9c:71:8b:73:f2:
                    46:14:3e:d4:69:e9:e9:ca:47:4c:f3:1e:ed:8b:81:
                    50:7d:6e:a4:95:84:8e:81:6d:c3:f4:6b:4a:41:37:
                    95:08:6e:99:40:00:03:26:08:e2:32:fb:f8:94:c4:
                    b5:b2:4e:73:1c:e6:9e:bc:8c:8d:f0:91:1f:0b:b1:
                    61:4a:9a:e0:bd:e8:dc:b0:2d:9c:0a:96:a2:61:1e:
                    0e:af:50:0d:59:0b:58:f9:7b:2a:ce:23:01:88:6a:
                    64:af:ca:b0:3e:30:d8:7c:27:b2:fa:19:c4:5e:df:
                    a0:07:ee:43:15:1a:2a:15:30:c1:a6:58:1f:d7:c3:
                    84:6b:63:44:1f:2c:d1:16:e1:9a:9a:bc:4f:97:be:
                    85:f0:55:81:e5:06:c5:53:1a:a5:dc:41:48:a6:f6:
                    99:62:bf:44:18:f6:c8:18:4c:2b:29:15:e2:02:a9:
                    3d:eb:e4:3c:62:94:80:f3:9a:78:59:9c:00:b5:64:
                    13:30:20:a2:e5:02:e2:27:76:93:ef:bf:10:87:f6:
                    6c:1c:af:af:3f:bd:24:59:cc:14:7d:5f:cf:13:7f:
                    a2:d6:f9:49:b3:1a:2f:73:99:ee:c9:bf:5c:8b:28:
                    7a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:FC:B7:27:F8:01:B1:82:33:88:49:08:4F:14:DD:28:5E:BD:8A:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6d341148-1697-3ccd-917e-03a6d8534e41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.183.128.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:8f:ab:cd:e1:73:21:d1:33:f4:5b:24:e0:fa:5e:46:33:6a:
         00:7d:2e:25:61:cf:4d:47:27:1f:d7:dd:54:bf:fe:b8:45:41:
         84:6b:bf:91:6a:59:2a:af:30:24:1d:27:fb:81:8e:c8:73:86:
         c1:33:15:33:b7:d8:a5:34:af:fb:73:76:da:25:a7:c6:9d:08:
         37:e2:5f:d7:c9:3a:05:72:4d:bd:6b:62:8c:f2:0d:b5:96:b9:
         78:14:f4:5f:64:50:3d:1b:e0:ac:86:1a:2d:f6:f2:3f:a9:6e:
         42:39:af:d9:fd:13:43:30:1b:37:5c:70:2c:0e:1e:bc:5e:27:
         ea:c5:f9:39:c3:ea:ea:ce:0c:4b:fa:a3:77:94:e9:62:42:bc:
         45:d2:ba:ae:ae:bf:55:8e:88:1b:23:3a:a8:06:d6:d0:81:07:
         2c:5e:1a:5c:84:27:b7:15:11:a9:bc:8a:6a:05:df:42:51:8e:
         48:10:f2:63:36:e7:1d:81:52:2e:30:e1:4f:e8:a5:f9:01:83:
         a6:80:59:2e:32:2a:ee:aa:69:0a:7b:c9:22:89:02:03:ff:4f:
         8e:e5:12:61:e9:9c:f9:e1:d1:94:96:68:95:3d:58:4d:07:69:
         92:6d:3c:05:2b:52:8c:ed:dd:ce:7a:ff:a9:a2:e0:9e:d7:7e:
         81:e0:8b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 04:31:31 2026 by rpki-client