Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/73337759-a616-394e-b9cd-b43d65aa772e.roa
File:                     73337759-a616-394e-b9cd-b43d65aa772e.roa (raw, json)
Hash identifier:          Ls9pffXQl5XHabJYpbHgtE1gahJZUpl7ZH59SSHmT6w=
Subject key identifier:   8E:D2:58:88:12:49:9C:FA:EC:7A:D2:5A:B3:7D:C0:73:55:C7:92:6E
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D5243C75E5A364D309C0CE800
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/73337759-a616-394e-b9cd-b43d65aa772e.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     213378
IP address blocks:        38.126.227.0/24 maxlen: 24
                          38.146.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:c7:5e:5a:36:4d:30:9c:0c:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=56412702-ca83-4b6a-9bd7-33311c3d4765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:72:9b:6f:60:fb:8e:99:4a:1d:20:57:46:57:
                    17:6b:5a:09:40:1f:77:ab:3e:a0:98:3a:51:63:23:
                    3f:cd:d1:61:c2:35:20:3d:3f:02:f6:89:c4:83:59:
                    dd:be:3b:b8:f2:f3:8d:8b:56:6f:e5:d9:54:d3:d7:
                    37:ba:b0:a9:24:b1:04:b4:10:0d:8d:89:0b:a0:88:
                    dc:a3:3a:6d:f2:a9:a4:8b:1f:6b:83:94:d1:84:b2:
                    76:da:49:62:09:f2:5b:54:b7:a9:f9:4a:96:f4:2e:
                    ad:b3:ec:38:b5:73:c2:9f:fe:07:f6:8f:7e:fd:74:
                    e6:bb:c4:cc:d8:c2:2c:65:be:ff:28:f2:73:22:27:
                    cd:de:39:fe:cd:fe:b5:5a:f6:d2:c0:9e:64:49:44:
                    8a:ee:bf:a2:d5:3f:1c:46:3e:30:e8:ce:d1:54:bc:
                    62:ca:ff:29:4e:34:85:6c:5c:fd:ab:28:df:4a:f6:
                    54:b0:3b:48:a7:3b:74:ef:8b:c5:01:b8:b8:38:66:
                    fe:0d:9f:d2:c3:2f:0a:b1:9a:23:06:de:fc:32:04:
                    06:b9:79:97:db:05:1c:b9:7b:02:3d:60:25:90:7c:
                    6b:84:c9:29:56:c8:f0:9b:f4:d0:28:1e:49:76:14:
                    ab:e3:60:ab:6a:c0:e4:06:4d:e5:f9:8c:ba:c4:e5:
                    c5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:D2:58:88:12:49:9C:FA:EC:7A:D2:5A:B3:7D:C0:73:55:C7:92:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/73337759-a616-394e-b9cd-b43d65aa772e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.126.227.0/24
                  38.146.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:ce:b2:cf:8a:e4:3a:02:80:2e:db:b2:c1:28:08:38:37:f5:
         c4:c6:fe:94:17:0f:92:ad:74:87:8e:fa:51:72:4b:4b:7a:1b:
         4a:3c:3b:f8:94:8b:fb:53:1c:bb:c3:1d:c4:b8:4d:be:e4:ba:
         41:d2:e5:89:f0:d8:5b:4f:09:eb:14:74:c0:72:d3:b2:fe:f6:
         94:77:65:ba:ca:3c:02:36:b6:f7:57:40:dd:41:d5:7c:de:d8:
         e3:b5:01:0c:56:37:fd:99:cd:ab:8d:81:33:c4:a3:52:6d:2f:
         1c:d1:6c:ea:24:44:49:21:65:ed:9c:8f:7b:12:76:e2:dc:f6:
         7a:9e:d7:4a:ed:3a:a1:94:89:7c:82:df:5d:a9:57:18:74:8d:
         fd:b2:f5:1b:a0:d7:4e:7a:9d:f3:40:4c:d2:1b:79:54:fd:e0:
         4c:a8:23:28:89:95:2c:87:ab:0c:a1:5f:23:1b:ea:72:2e:57:
         88:09:7a:9c:b1:16:b6:de:cd:fd:7b:30:25:1b:fa:39:d0:1c:
         a5:55:02:40:0a:ad:2e:c3:dc:68:6f:c9:3d:27:69:82:91:e0:
         c3:b6:53:7d:96:c0:3d:e7:15:61:89:2d:2d:fe:95:9d:d6:b1:
         54:89:4b:16:9f:8f:e9:2f:75:5b:67:c6:dd:6f:ed:c7:4c:40:
         ec:8d:7e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:51:10 2026 by rpki-client