Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/7e601e11-9f90-3d13-b4ea-c47f7f3b8f12.roa
File:                     7e601e11-9f90-3d13-b4ea-c47f7f3b8f12.roa (raw, json)
Hash identifier:          ngtJ19G1CA3+9UHhsCUZM5/S4pCISa9Qyai+CpnaEHA=
Subject key identifier:   31:8C:19:BB:1C:9C:D9:8C:D0:FC:A9:E2:BD:84:02:2F:2C:DC:08:28
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D5234F7AF4E97085173E0F9E0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/7e601e11-9f90-3d13-b4ea-c47f7f3b8f12.roa
Signing time:             Sat 28 Mar 2026 18:44:35 +0000
ROA not before:           Sat 28 Mar 2026 18:44:35 +0000
ROA not after:            Thu 28 May 2026 01:00:31 +0000
asID:                     273285
IP address blocks:        38.22.175.0/24 maxlen: 24
                          38.22.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:34:f7:af:4e:97:08:51:73:e0:f9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Mar 28 18:44:35 2026 GMT
            Not After : May 28 01:00:31 2026 GMT
        Subject: CN=af30b040-4e43-4167-954b-c98b47159fd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:08:dc:c7:57:cd:70:cb:82:da:98:5e:70:cf:
                    91:48:9b:64:49:3c:5e:45:a7:41:eb:bf:54:fa:65:
                    2c:fd:02:d9:39:a5:02:a8:13:ae:a5:e0:13:7c:64:
                    04:57:fb:1b:a4:fb:67:b4:14:b3:d3:17:79:4d:f4:
                    d3:bd:c7:60:e1:b7:3a:37:8c:56:98:41:63:e9:4d:
                    67:47:a8:26:09:ca:2c:5f:62:56:92:05:fb:34:ef:
                    f0:b2:21:df:bb:12:23:54:c5:76:85:4e:f9:2f:9d:
                    5b:de:84:f5:a4:9e:be:5a:87:72:f8:5b:c0:26:7f:
                    5e:45:9e:e3:2e:79:f9:33:07:65:25:50:7a:cd:b1:
                    b2:bf:26:c6:72:e4:27:f2:38:36:10:c7:05:b9:14:
                    d7:95:a6:e6:57:e1:c1:4d:01:76:21:3e:21:c0:ef:
                    65:72:f5:6c:64:cd:3d:ee:27:8e:eb:70:bc:9c:44:
                    8c:cb:0b:14:37:0b:d6:65:eb:9d:53:55:62:e0:32:
                    fb:13:d3:34:d5:71:7d:b5:24:cd:57:45:d2:f0:f2:
                    db:71:9b:f2:d3:6e:89:3d:1e:5e:90:a1:84:b3:bf:
                    06:ad:e7:2e:11:4c:94:6a:12:d4:02:18:7b:80:72:
                    d9:8b:60:4f:99:a3:28:ad:0f:d1:4d:a7:37:2b:ee:
                    81:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:8C:19:BB:1C:9C:D9:8C:D0:FC:A9:E2:BD:84:02:2F:2C:DC:08:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/7e601e11-9f90-3d13-b4ea-c47f7f3b8f12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.22.175.0/24
                  38.22.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:1f:95:b1:a8:f0:00:e5:6f:f7:7d:fc:33:03:65:16:1f:f8:
         8d:bc:30:16:11:e8:62:89:30:f6:1a:d6:ea:11:2a:8a:6a:06:
         6d:68:69:dd:2d:7d:c0:6e:28:b1:44:d7:ea:57:13:23:df:20:
         8e:bc:b3:03:27:65:80:d3:11:52:b0:8e:f9:6e:24:e1:e6:84:
         ce:b3:04:26:33:cb:40:80:b6:f7:ea:72:de:a2:ff:36:12:7d:
         65:6b:6b:81:ed:d7:98:58:5c:30:43:60:10:58:df:d2:10:d9:
         b6:8e:49:86:67:2c:7f:4e:65:e5:5e:6a:7e:b8:a8:b9:22:fa:
         06:97:ab:f8:dc:12:c8:1e:d4:a3:68:13:e1:b0:95:d1:1f:dc:
         8e:72:65:6e:95:33:ce:8c:21:ec:be:22:ec:98:a3:0e:ef:e4:
         ca:ed:56:e9:8d:f9:15:f6:3b:8f:9f:3f:05:38:55:58:f2:f9:
         7d:03:69:09:07:dc:18:ad:8c:12:2c:be:61:2f:d0:c7:9e:7b:
         a8:47:1d:6e:2d:80:0d:9f:17:41:a2:52:84:5f:28:c7:a4:d1:
         e3:b3:c6:cc:6f:6e:d1:2f:e5:68:2c:5b:b7:46:d5:66:fb:af:
         a5:7f:93:53:cd:4c:e1:0d:a1:a5:43:8d:56:a8:21:c5:d6:29:
         4c:f8:82:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:34:47 2026 by rpki-client