Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/80e2c60b-6227-3dff-aec2-534b8556d53e.roa
File:                     80e2c60b-6227-3dff-aec2-534b8556d53e.roa (raw, json)
Hash identifier:          /JLJ2bTNFhUqltrC7cbwAEqDuT63+m3Ynl4k2uEiFOk=
Subject key identifier:   F1:B8:07:C2:0A:79:E7:E9:7F:27:29:91:BE:73:16:DC:1F:EB:84:AB
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584BBFB4902D9884091961A53D00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/80e2c60b-6227-3dff-aec2-534b8556d53e.roa
Signing time:             Tue 04 Nov 2025 14:30:54 +0000
ROA not before:           Tue 04 Nov 2025 14:30:54 +0000
ROA not after:            Mon 02 Feb 2026 14:30:54 +0000
asID:                     265561
IP address blocks:        38.19.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bf:b4:90:2d:98:84:09:19:61:a5:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Nov  4 14:30:54 2025 GMT
            Not After : Feb  2 14:30:54 2026 GMT
        Subject: CN=4c86b2c0-67b0-4704-be42-c0c700af221a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6e:5e:e2:5d:de:b9:0c:39:7f:56:bc:a5:b9:
                    ac:4d:a2:1c:25:9d:c6:22:64:05:fa:b0:ef:b9:54:
                    db:06:29:f8:36:06:5c:d1:27:cd:ca:08:92:39:aa:
                    27:5f:15:2f:52:c3:fa:b4:81:b9:f6:db:79:cd:65:
                    e9:58:b9:61:fe:17:22:cd:b8:a3:07:1e:ac:3b:db:
                    4e:b1:d3:51:1c:eb:8a:4b:fb:86:f2:00:10:f5:c6:
                    c2:fb:e4:b6:1a:d4:63:9f:c0:72:bd:e2:68:a8:04:
                    c3:4e:7a:33:18:25:04:0a:28:51:a2:18:34:35:2c:
                    db:8c:52:61:cd:9b:e9:27:da:fe:d8:73:b2:e4:d8:
                    d5:fb:51:e8:7d:02:49:21:3f:b9:26:51:be:4c:9c:
                    c3:f8:44:90:7a:53:5a:95:16:2b:43:41:73:6f:18:
                    28:bd:11:ec:a5:63:99:db:46:de:10:4b:f1:1c:f4:
                    90:5d:54:19:51:d1:a8:ba:a6:ad:82:9d:3f:83:fa:
                    f3:fc:34:ac:0e:0e:92:07:76:df:a5:9f:f5:5a:1a:
                    88:85:ac:ed:4c:22:d1:ae:28:f7:bc:ed:d8:79:36:
                    38:b3:f4:ca:12:28:76:8f:5f:f2:76:76:3a:6f:c4:
                    67:52:61:65:19:bd:dd:0d:74:8d:f5:dd:42:02:5b:
                    9a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:B8:07:C2:0A:79:E7:E9:7F:27:29:91:BE:73:16:DC:1F:EB:84:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/80e2c60b-6227-3dff-aec2-534b8556d53e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.19.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:68:0e:25:72:54:b6:25:54:4e:b9:b9:a7:2e:1d:86:01:a3:
         0c:85:9b:35:8e:39:ea:25:f0:c5:aa:ff:58:be:36:2e:7c:30:
         51:3c:92:95:75:c3:15:8d:16:19:76:4e:b9:36:7d:b8:78:37:
         8e:5f:ff:a9:d7:74:56:83:f0:09:74:53:96:92:98:e7:54:51:
         0f:e6:63:95:ef:82:c7:10:07:a1:4b:20:60:1b:01:5d:2e:13:
         76:d6:3a:f3:25:bd:8e:e0:d5:91:7e:8c:6f:b4:90:83:6c:e9:
         ce:87:f9:2d:05:df:a4:f2:7d:e7:93:0e:ca:ea:58:d5:2b:e4:
         a4:93:6b:97:52:95:8c:8e:43:da:70:fa:3a:19:b1:f0:68:5d:
         e1:6b:4c:69:03:80:f1:ee:f1:16:e8:5e:91:6a:05:df:0b:b3:
         dd:07:76:59:e1:ef:12:27:c2:23:f6:59:4a:da:3b:49:e8:75:
         e7:04:a3:15:d8:0c:d9:ab:d2:f2:99:19:27:e1:4d:8f:03:52:
         f0:ac:85:ca:f1:3f:6a:96:92:e7:f0:dc:b2:53:03:49:05:b5:
         21:d4:40:43:fb:45:e1:de:c2:26:9e:e6:81:8b:96:8b:5d:48:
         dd:35:f6:1e:b1:01:42:cd:71:a2:96:73:e2:89:0d:89:d0:37:
         64:d8:cf:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:07:54 2025 by rpki-client