Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/73e8083f-19e3-32e8-b263-f82ac4cf0241.roa
File:                     73e8083f-19e3-32e8-b263-f82ac4cf0241.roa (raw, json)
Hash identifier:          yW6y0l7LK6sN9V3fEkSDFTrDHAlDDPrxiVlcxC/Dx8o=
Subject key identifier:   EC:E4:79:67:1F:C8:0A:8E:97:B6:2D:A4:8B:3E:A8:80:4E:90:61:96
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D5D0AE665712F00AB5771BD00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/73e8083f-19e3-32e8-b263-f82ac4cf0241.roa
Signing time:             Wed 01 Apr 2026 15:53:43 +0000
ROA not before:           Wed 01 Apr 2026 15:53:43 +0000
ROA not after:            Tue 30 Jun 2026 15:53:43 +0000
asID:                     26042
IP address blocks:        38.108.197.0/24 maxlen: 24
                          38.110.26.0/24 maxlen: 24
                          38.113.112.0/24 maxlen: 24
                          38.121.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5d:0a:e6:65:71:2f:00:ab:57:71:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Apr  1 15:53:43 2026 GMT
            Not After : Jun 30 15:53:43 2026 GMT
        Subject: CN=749274d2-9d6c-4641-a611-f03d581065e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:65:73:34:9c:1a:23:53:06:63:58:35:4a:42:
                    27:e7:8c:08:f5:d0:f0:96:98:ed:96:ec:38:cc:6b:
                    dc:42:ea:7f:d8:86:c0:f2:4d:e3:f0:86:b5:cc:25:
                    13:4d:25:fa:f3:08:b1:e2:ab:1b:b2:10:19:df:00:
                    9c:5d:c8:18:13:b8:95:92:7f:f2:c5:35:eb:db:2f:
                    16:a0:de:3f:56:2f:01:c9:6f:00:cd:a6:d7:25:c2:
                    58:78:f6:af:fc:42:a8:7d:cd:d4:96:48:e2:7b:82:
                    90:e3:64:e1:b6:14:2e:43:2f:5c:79:a4:ec:0d:63:
                    a2:1e:c5:de:64:7c:f4:fe:19:d4:9b:4b:82:39:3b:
                    3d:2b:ed:e2:0d:a8:2a:47:7f:17:3b:8d:ee:00:d4:
                    32:04:28:ce:4b:57:cd:d2:f2:84:94:4c:16:6c:3f:
                    ec:b0:fa:76:96:7f:af:ae:31:be:48:50:c5:9e:04:
                    81:04:74:f5:80:ae:c2:19:10:22:12:7a:06:e1:64:
                    e0:ce:1d:11:b8:69:2e:a1:fc:7c:08:8a:25:e4:44:
                    24:1d:69:14:94:ef:85:0b:f5:a7:fb:d6:a8:e2:9a:
                    51:5b:76:fc:7f:95:6b:b8:65:14:3f:8e:12:cd:d4:
                    8b:ca:18:bf:e3:11:ea:d6:d6:8a:a4:87:90:14:76:
                    e3:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:E4:79:67:1F:C8:0A:8E:97:B6:2D:A4:8B:3E:A8:80:4E:90:61:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/73e8083f-19e3-32e8-b263-f82ac4cf0241.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.108.197.0/24
                  38.110.26.0/24
                  38.113.112.0/24
                  38.121.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:a5:42:8d:00:38:4f:e5:06:06:55:67:ab:da:61:30:1d:aa:
         7e:2a:f4:d1:39:f1:51:f0:9f:cf:1a:4f:87:ce:c2:77:0d:45:
         7b:f2:3d:6a:86:f8:fc:23:63:32:15:dc:29:38:5b:f8:5f:99:
         a6:4d:c9:61:36:56:a6:22:fa:4d:d2:68:fd:e9:50:f0:1a:5b:
         06:da:0f:0e:c2:7c:a5:9c:5b:44:e2:46:b9:5a:8a:ac:9e:84:
         8e:b3:4f:6c:fe:8a:31:46:e5:2b:d5:ae:fd:f5:8b:3d:50:c1:
         bb:8d:8a:5b:ce:19:88:f5:2f:25:a0:3d:bb:60:89:7e:ff:3f:
         13:7b:88:64:19:8c:e8:b2:ae:84:fc:89:cd:68:50:42:f6:19:
         23:b3:52:fb:eb:35:de:ff:0b:ab:fd:b7:6a:28:12:f8:49:f7:
         95:67:d6:2a:27:49:f7:84:7c:fe:01:0e:3d:ba:e6:9b:87:0d:
         28:00:4a:64:45:a3:f4:e8:d2:5e:63:a8:b8:73:b0:c3:ff:c7:
         43:a5:37:30:99:fe:af:61:ab:77:c9:c3:b9:66:80:ad:40:96:
         f0:c0:0f:62:d7:c0:aa:b9:29:01:ec:d8:ca:99:98:a3:0e:58:
         92:97:bd:f2:3c:d6:fa:62:a9:f8:8a:6e:05:a1:f5:5c:db:5a:
         4e:7b:b2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:12:41 2026 by rpki-client