Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/77e70b26-82c4-3a79-8882-ef8766eccdc6.roa
File:                     77e70b26-82c4-3a79-8882-ef8766eccdc6.roa (raw, json)
Hash identifier:          Tm9A/7AJS4mRl03PGcl5AR0N05pBicjam+naDyvn56c=
Subject key identifier:   5A:47:30:91:86:59:0E:D4:95:0F:DE:B4:2E:B3:D5:76:50:5A:DA:9F
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584CEB41CBB439CE9514B924ED00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/77e70b26-82c4-3a79-8882-ef8766eccdc6.roa
Signing time:             Thu 19 Feb 2026 21:41:01 +0000
ROA not before:           Thu 19 Feb 2026 21:41:01 +0000
ROA not after:            Wed 20 May 2026 20:41:01 +0000
asID:                     29886
IP address blocks:        38.124.138.0/24 maxlen: 24
                          38.124.148.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:eb:41:cb:b4:39:ce:95:14:b9:24:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Feb 19 21:41:01 2026 GMT
            Not After : May 20 20:41:01 2026 GMT
        Subject: CN=3deee9a2-4cfe-4ab4-bfdf-dd60107cd256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c9:90:38:7f:90:14:00:5c:b0:9f:b4:65:78:
                    f4:2a:ac:a1:25:6d:7e:bd:eb:f6:5a:0f:1b:52:65:
                    a9:b6:44:e9:71:c9:dd:a1:fb:45:fd:73:3b:37:f8:
                    45:78:46:ea:ae:cb:27:82:a5:e2:27:16:23:96:d6:
                    ce:dd:52:44:30:84:b2:af:9d:38:91:ab:06:94:d5:
                    b6:cc:67:e3:05:df:9e:20:08:1b:84:e1:dd:c8:b3:
                    d0:1d:95:bd:bd:db:0e:5f:9b:30:19:ec:03:2a:eb:
                    5c:b8:92:d1:6b:b2:0a:d3:e1:93:75:46:d6:25:f9:
                    58:33:e8:c6:23:a7:f5:37:fc:fe:7c:f1:8b:9c:57:
                    ca:af:16:d6:c4:16:ed:cd:ac:f0:26:c0:ae:20:f4:
                    8f:f5:60:a4:25:8d:ff:c7:fb:cd:ac:ae:46:c1:95:
                    0e:fd:7b:b3:6b:95:d0:08:06:bd:f2:b7:81:30:41:
                    63:4e:6c:f1:88:e0:a6:6b:5a:bb:eb:7c:b1:df:49:
                    a9:16:d6:21:d1:1c:5f:88:d5:90:0c:b1:f0:4e:ab:
                    b7:37:cc:92:7c:7e:6a:2f:94:73:0c:07:1c:39:87:
                    24:52:11:df:42:9d:4c:27:e0:e7:29:d3:3f:f8:0f:
                    ec:37:5c:f6:16:b1:15:f2:b9:ff:80:54:24:bc:9a:
                    75:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:47:30:91:86:59:0E:D4:95:0F:DE:B4:2E:B3:D5:76:50:5A:DA:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/77e70b26-82c4-3a79-8882-ef8766eccdc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.124.138.0/24
                  38.124.148.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:0e:99:c0:d5:d4:b5:62:a3:33:cd:26:d8:05:9b:47:d9:8b:
         7e:13:f4:25:52:31:59:85:06:27:ec:a4:18:4d:67:11:c8:7f:
         0a:ed:f6:6c:e2:46:bf:35:32:27:ce:ac:cb:b2:fd:5b:17:4e:
         44:f1:59:01:d9:c9:bb:44:ee:47:44:43:f5:12:41:03:9c:55:
         92:37:f4:65:72:c1:52:43:93:c2:36:ab:08:3d:1e:b1:b4:64:
         91:bd:c9:5e:2c:15:b4:74:25:69:bc:63:7f:54:66:01:0a:0b:
         38:2c:a1:c4:94:01:94:07:4a:b6:62:1a:8d:40:21:b7:f2:fc:
         e5:ae:de:1f:c8:f8:4f:f8:fa:94:df:d7:aa:8a:97:0a:53:26:
         ba:40:ec:60:0c:7e:86:f5:5f:7d:39:2c:2f:bd:62:45:66:be:
         fb:9c:ef:ce:1a:4b:5d:60:01:d5:99:eb:78:d4:76:ae:58:3a:
         0f:77:6c:e4:a8:4e:ee:a3:e0:fc:1a:04:cd:d9:2d:4c:89:4a:
         8f:9e:d4:24:7f:2e:c6:a2:9f:c6:dc:79:3b:b8:80:e9:a5:ea:
         f9:10:96:60:a9:e6:12:73:4f:02:fc:2d:82:37:70:64:46:2a:
         9c:92:c9:a0:a7:9d:02:81:2e:fd:c8:c5:e2:d7:f6:e3:dc:5f:
         72:bf:f3:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:32:41 2026 by rpki-client