Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6de0e5b5-6865-331b-8f1b-50390166e00e.roa
File:                     6de0e5b5-6865-331b-8f1b-50390166e00e.roa (raw, json)
Hash identifier:          niX/gVky7aJ6dCJ9QBwmZR6euAGFdUN3ebPWk0ZnzYk=
Subject key identifier:   87:C3:AE:65:55:BF:B6:25:52:CC:AF:41:31:EF:0C:30:CD:CB:C7:BF
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584CCFD734BB3AF3B63810CF0800
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6de0e5b5-6865-331b-8f1b-50390166e00e.roa
Signing time:             Tue 10 Feb 2026 02:00:31 +0000
ROA not before:           Tue 10 Feb 2026 02:00:31 +0000
ROA not after:            Mon 11 May 2026 01:00:31 +0000
asID:                     274524
IP address blocks:        38.50.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cf:d7:34:bb:3a:f3:b6:38:10:cf:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Feb 10 02:00:31 2026 GMT
            Not After : May 11 01:00:31 2026 GMT
        Subject: CN=12afc853-61a2-40d2-a295-dd70cb491260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b9:08:ac:a9:9b:e5:a1:41:5a:59:ab:4e:80:
                    62:e6:f7:69:a3:2d:6b:4a:67:e1:d1:8c:0a:ac:de:
                    0e:df:6f:a9:3b:ed:7b:c2:3c:69:1d:6f:aa:8c:b3:
                    38:d0:72:20:9f:af:7a:ff:94:f0:68:6e:c3:de:e9:
                    5d:c9:47:c2:fa:c8:a2:ef:00:31:59:06:3f:b9:1b:
                    97:90:fb:54:a7:db:bb:d6:66:b5:92:ec:8b:7a:87:
                    02:bc:e4:9c:ea:77:9b:5a:28:22:ab:1e:da:ef:99:
                    40:ab:c0:57:86:8a:22:9b:c5:00:3e:04:da:75:2d:
                    a3:7f:b7:19:d8:9b:7f:5b:65:09:0e:62:a7:1b:f7:
                    5e:47:05:d7:57:90:c1:f6:45:47:24:4b:98:5b:ce:
                    dd:be:de:0a:bf:6d:ce:06:d2:de:22:59:14:4d:36:
                    15:98:54:cc:f3:32:2d:75:6c:cb:20:1d:2f:97:f2:
                    f2:9b:50:34:31:89:36:7c:01:e7:0a:03:86:e8:78:
                    5a:2c:03:2f:6f:e1:da:d6:07:4d:12:f9:c1:7c:75:
                    c2:f6:99:66:ab:07:45:75:3b:3b:d3:9a:d1:ee:05:
                    6e:91:bf:3c:58:94:f0:94:c6:2b:ce:39:a8:95:73:
                    2a:f9:a6:dc:d8:a5:4d:6c:cf:c4:bc:95:98:86:bc:
                    47:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:C3:AE:65:55:BF:B6:25:52:CC:AF:41:31:EF:0C:30:CD:CB:C7:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6de0e5b5-6865-331b-8f1b-50390166e00e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.50.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:d4:af:39:4f:05:62:7b:45:61:86:bc:84:dc:b2:bc:f2:2f:
         d3:40:46:52:81:7f:a2:c5:6b:cf:19:62:11:7f:e2:82:35:eb:
         fc:43:10:36:40:7f:13:8f:ab:35:43:f5:89:e4:3b:16:7c:ee:
         bf:4e:e8:dd:1d:11:6a:4c:e5:3b:98:d9:b1:51:8a:40:96:f9:
         e6:b5:b3:1a:61:07:cf:54:22:b6:c7:71:c3:bb:a7:de:f2:13:
         a5:0b:1e:5a:20:e7:68:0d:0d:24:e3:5e:4c:0d:00:55:bb:a2:
         be:31:50:83:94:9c:e4:6f:c7:19:45:de:e4:d3:cd:00:0b:15:
         e1:51:af:8f:cd:be:e3:e7:13:d8:78:15:61:ad:22:de:f1:46:
         97:56:9c:5c:9d:d5:ba:64:59:47:9b:6a:be:26:37:ed:92:a1:
         31:86:1a:f8:e7:dd:d1:a9:e4:b6:16:91:fe:49:99:d3:2e:67:
         5b:86:36:e5:4b:d4:4f:22:f3:0d:a1:12:5c:29:79:8b:99:dd:
         6d:cc:91:a8:36:21:24:84:bc:f1:54:58:dc:29:65:21:57:25:
         60:71:b0:08:2f:04:a7:26:17:1a:85:a0:de:74:94:7b:2e:3c:
         22:1b:6b:62:7e:78:ad:48:c8:38:f0:b6:0d:6b:dd:27:4e:62:
         f6:af:4d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:57:00 2026 by rpki-client