Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/7dbc5544-fc60-3c0f-b5fc-e1feef62d1f4.roa
File:                     7dbc5544-fc60-3c0f-b5fc-e1feef62d1f4.roa (raw, json)
Hash identifier:          gw+/4hIXB3dEABU6lSEmQ0+PKVvmc9ayhbLAa7Mqce0=
Subject key identifier:   D6:3E:A3:69:71:80:78:3B:F8:6F:F2:F0:B9:74:CD:63:A7:C5:F4:D9
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584CD6F7EBB92EB911612FC2F980
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/7dbc5544-fc60-3c0f-b5fc-e1feef62d1f4.roa
Signing time:             Thu 12 Feb 2026 15:17:09 +0000
ROA not before:           Thu 12 Feb 2026 15:17:09 +0000
ROA not after:            Wed 13 May 2026 14:17:09 +0000
asID:                     273821
IP address blocks:        38.43.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d6:f7:eb:b9:2e:b9:11:61:2f:c2:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Feb 12 15:17:09 2026 GMT
            Not After : May 13 14:17:09 2026 GMT
        Subject: CN=bef01ff9-2020-42c1-a5a4-ef7d295302d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:42:4a:39:42:4f:b2:9c:ba:98:52:c8:7d:e1:
                    22:c6:5a:42:27:00:99:3a:fe:b0:8d:52:47:08:70:
                    31:f7:c0:03:1b:36:33:81:0f:68:57:2b:7a:6f:34:
                    6a:99:6a:53:fd:d9:30:49:45:2b:01:99:06:3b:b9:
                    d4:a5:33:5c:f8:f1:d3:13:85:8d:7d:94:b8:8e:a7:
                    0a:18:3b:fe:86:a4:f0:ce:d9:d7:80:49:9b:6f:a3:
                    f5:7d:d0:43:0b:38:6c:15:31:a1:3d:f6:61:c6:e0:
                    5b:1f:68:e9:1f:c9:0c:1a:30:f8:e1:a3:36:50:61:
                    6f:bd:66:c1:97:76:09:5b:ab:5a:61:6d:8b:b7:7e:
                    d9:8e:d5:62:9d:d1:1b:26:c1:c7:51:a7:55:7a:8d:
                    9a:9d:7d:0a:8b:a6:42:93:60:ee:4c:b1:46:8f:b3:
                    ca:80:c3:4d:84:94:1e:a0:53:6e:83:99:65:d4:f2:
                    c5:d7:ea:06:e0:26:b2:a8:39:2b:d3:24:b9:12:f7:
                    24:f0:5e:96:13:8b:63:fd:63:34:82:6c:03:03:59:
                    8a:e3:3a:a2:95:71:dd:3d:af:17:4f:ef:8b:ee:8d:
                    50:31:8a:e4:18:35:45:c3:0e:19:89:06:53:a0:8d:
                    87:da:c3:42:33:e7:75:2a:88:0c:b6:36:79:8b:19:
                    25:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:3E:A3:69:71:80:78:3B:F8:6F:F2:F0:B9:74:CD:63:A7:C5:F4:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/7dbc5544-fc60-3c0f-b5fc-e1feef62d1f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.43.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:f4:16:cc:d3:77:9b:42:d5:02:77:05:3b:d8:f7:2a:9c:db:
         ec:7a:86:41:48:d6:6e:7d:8c:8c:b2:6a:0f:72:2a:92:c1:c3:
         93:a5:07:dc:8d:63:a1:17:ed:89:4f:85:71:1d:aa:f4:e2:3f:
         71:94:b6:33:5d:c8:4d:df:7f:ea:ec:af:5c:2f:79:69:ca:3a:
         ca:1c:cd:7c:ac:57:e7:e0:7d:b0:bd:61:9a:00:2e:46:22:4c:
         16:fe:20:09:5e:9d:fa:56:1c:ae:b3:f3:03:1e:99:a6:b4:d6:
         d1:9b:d9:48:d0:01:37:ae:65:e0:7e:cc:76:cb:c7:db:b7:65:
         10:c5:a2:49:6b:fe:19:77:bf:61:a1:39:99:e9:77:ad:cd:c2:
         93:7a:13:d1:2f:15:a0:0a:06:b2:2f:1a:57:a5:04:56:f6:92:
         42:0b:75:1e:62:b0:6c:b7:55:96:42:76:7b:20:ba:9a:0b:90:
         6d:a3:51:ef:80:24:03:d0:07:0c:da:6f:3d:9a:38:a6:48:95:
         f4:da:8c:b4:41:fe:b8:4b:55:12:bf:1b:34:3c:a8:42:ff:16:
         7b:c4:97:a0:b3:36:18:6e:b1:4f:a1:82:30:11:99:be:ba:d4:
         4c:d5:42:e6:b0:34:2b:64:74:ce:5c:42:fe:af:8a:45:eb:02:
         3f:64:70:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:32:48 2026 by rpki-client