Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/761de1e8-0176-36a1-a7cb-c00cb869df3b.roa
File:                     761de1e8-0176-36a1-a7cb-c00cb869df3b.roa (raw, json)
Hash identifier:          B8M4Y1CMKLnKoD3yQIFtoWFia0tYwnNVmud+wK93JYI=
Subject key identifier:   86:14:1A:57:24:FA:70:9C:17:79:C5:8C:16:CF:C8:1D:45:F1:87:04
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584CCF6BD7E971B86A712F0E2640
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/761de1e8-0176-36a1-a7cb-c00cb869df3b.roa
Signing time:             Mon 09 Feb 2026 15:23:00 +0000
ROA not before:           Mon 09 Feb 2026 15:23:00 +0000
ROA not after:            Sun 10 May 2026 14:23:00 +0000
asID:                     274178
IP address blocks:        38.224.29.0/24 maxlen: 24
                          38.255.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cf:6b:d7:e9:71:b8:6a:71:2f:0e:26:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Feb  9 15:23:00 2026 GMT
            Not After : May 10 14:23:00 2026 GMT
        Subject: CN=eb584dde-3fe4-436a-b885-9ac5e52986c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f1:48:36:b3:a1:5b:06:86:a8:6e:67:ea:9c:
                    d4:e9:8d:2c:c2:f4:09:11:14:bd:b5:87:11:89:ee:
                    e6:cd:d2:ef:17:6c:6e:7b:f5:5f:e2:33:7d:0a:e4:
                    e3:66:ac:1c:fa:b7:0a:d0:1c:3d:3a:fe:f2:3b:30:
                    04:4b:fd:56:1f:d0:ac:11:7d:46:04:8e:ed:68:a4:
                    9c:f6:b3:8d:21:b2:68:c9:00:9f:81:c5:a9:01:7a:
                    43:ea:a1:34:17:77:94:1b:80:18:36:66:8c:85:2f:
                    7a:0d:03:da:99:cb:43:d1:e8:6c:7a:ff:c5:51:ab:
                    5e:bb:61:6f:6c:56:ed:d7:5f:fa:02:4e:35:0c:3d:
                    c8:a8:95:8a:a5:21:62:00:40:02:09:0c:99:0e:a1:
                    8d:be:df:31:93:bd:e9:6c:fb:b3:a9:2c:eb:42:8a:
                    34:11:f6:cf:94:e3:23:28:f4:0c:b9:fc:c8:99:be:
                    ef:2c:36:05:00:01:eb:5f:df:8b:2a:3f:53:9d:de:
                    89:fe:2b:59:19:ac:f3:18:b3:13:e6:ba:a5:5a:60:
                    95:e0:9e:d4:4b:16:4c:04:65:88:ab:ad:73:72:b5:
                    90:07:36:1c:54:0a:f9:ce:6f:23:e1:28:7a:b4:99:
                    de:a2:98:84:86:1c:62:26:1d:19:58:62:0e:19:67:
                    b5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:14:1A:57:24:FA:70:9C:17:79:C5:8C:16:CF:C8:1D:45:F1:87:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/761de1e8-0176-36a1-a7cb-c00cb869df3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.224.29.0/24
                  38.255.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:e6:86:41:ea:a2:7c:29:9f:12:e6:84:d2:17:79:f6:fb:8f:
         ad:ad:75:0c:dc:ba:be:fb:c6:50:7b:6f:b5:1e:b5:72:68:08:
         fa:ff:01:9a:62:a0:c9:25:a2:73:2c:01:66:4d:ea:85:54:79:
         30:ec:49:20:0c:0a:92:bb:f3:f5:5f:f7:2b:c7:93:6b:c8:21:
         ea:a1:e5:85:e4:80:2e:04:38:f7:2c:14:f8:4b:c5:ae:27:fe:
         7d:4a:2b:8a:4f:9c:df:a8:2c:c5:18:be:17:bc:d5:55:0f:ab:
         22:19:10:45:7b:2d:07:fc:e0:15:0f:a4:e9:ff:65:34:00:fa:
         59:a3:5d:60:ba:08:44:2c:1a:d4:71:10:f0:3a:3a:c9:1c:fb:
         63:a2:7a:b6:ab:96:f8:76:b4:fc:ba:c2:e2:12:ca:e0:10:e9:
         06:7e:b4:64:75:31:47:72:54:fc:43:63:2a:ad:d5:05:da:e5:
         2f:53:c4:39:f1:5b:b4:11:99:47:19:c7:ce:f2:5a:3b:91:ca:
         a5:fd:2c:3d:59:37:2b:78:69:7f:07:0c:4a:b5:af:8e:f3:ba:
         7a:9a:ee:e0:8e:89:bf:8c:67:68:13:3b:41:af:2d:a3:20:92:
         87:3e:d0:a7:e0:25:00:9e:d1:34:be:46:97:0b:9a:79:af:66:
         0f:a2:fc:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:32:55 2026 by rpki-client