Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8eedbd05-4df6-3279-bee5-5f0163d56678.roa
File:                     8eedbd05-4df6-3279-bee5-5f0163d56678.roa (raw, json)
Hash identifier:          3e1GvyqH0vp+QmbXKtL527TeLcRsBn4c7SuG9qEeyh4=
Subject key identifier:   87:FD:3E:56:0F:8F:A8:2D:2B:41:8F:D0:3A:3E:92:F7:47:D3:32:B7
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D5CB4F817CFE9C2095D8F7300
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8eedbd05-4df6-3279-bee5-5f0163d56678.roa
Signing time:             Wed 01 Apr 2026 13:00:30 +0000
ROA not before:           Wed 01 Apr 2026 13:00:30 +0000
ROA not after:            Tue 30 Jun 2026 13:00:30 +0000
asID:                     271023
IP address blocks:        38.226.184.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5c:b4:f8:17:cf:e9:c2:09:5d:8f:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Apr  1 13:00:30 2026 GMT
            Not After : Jun 30 13:00:30 2026 GMT
        Subject: CN=88039226-7d4e-4617-999a-6db02637ba4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:18:fb:68:f9:23:80:fb:3d:d6:30:eb:de:12:
                    80:f7:e9:51:f8:ab:19:38:e5:72:21:37:83:a7:f4:
                    56:31:9a:b5:ab:6f:3c:dc:87:17:ee:b3:01:18:9a:
                    3a:f8:10:82:e2:b6:7e:b7:a2:78:bd:49:da:a8:d4:
                    c2:83:93:7a:49:4e:83:24:df:37:23:5b:95:54:33:
                    ef:94:98:8c:0d:2b:38:11:d1:d7:37:c9:98:6c:11:
                    54:4b:70:39:3c:f1:af:1b:e1:05:14:2f:2d:5d:1c:
                    5d:58:f9:84:0a:61:c8:fa:0b:41:21:e6:62:92:74:
                    a3:23:0c:96:85:5c:de:de:0c:be:94:0b:ad:44:30:
                    a3:61:06:af:b6:44:35:b1:b3:37:ce:8e:0a:ca:ba:
                    8c:fc:89:85:2e:90:f4:d6:f4:6d:2f:a4:ce:f0:2d:
                    ad:63:80:2b:aa:31:ae:9b:ca:7c:9d:16:e5:f5:43:
                    db:6b:10:ed:bc:f9:7b:2b:6b:eb:d3:6d:c8:79:7b:
                    bd:1f:c4:ab:00:45:ba:15:80:b9:b3:bb:47:73:ac:
                    dc:24:d2:1e:d1:aa:75:f5:a2:0f:b0:7d:86:df:85:
                    29:1f:3a:5d:05:fe:36:bf:e0:a2:58:cc:52:87:13:
                    a6:97:c5:5b:1d:cb:d5:97:1f:7e:ad:69:4e:5c:34:
                    99:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:FD:3E:56:0F:8F:A8:2D:2B:41:8F:D0:3A:3E:92:F7:47:D3:32:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8eedbd05-4df6-3279-bee5-5f0163d56678.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.226.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:66:a0:0d:c3:a5:f2:03:65:58:4b:34:4f:60:4b:8b:73:45:
         bf:3e:35:03:c2:f9:d6:e8:ce:e5:99:8f:36:1d:9f:df:ce:64:
         c1:2f:98:1a:de:d5:98:9c:aa:6a:8a:36:36:df:e6:5c:84:d5:
         1c:ea:53:41:22:c1:a7:31:e3:ca:fc:3f:ea:23:1a:b7:bc:46:
         04:c7:53:6c:cb:64:eb:f9:ad:28:7c:51:7d:0f:4e:5f:89:3f:
         fa:0a:60:88:f0:a3:3b:6b:02:23:c2:1e:29:51:4a:c4:60:67:
         40:a8:64:9b:98:1f:44:23:b1:32:7a:90:38:35:75:80:40:ab:
         74:3c:e7:9a:92:a2:82:8b:70:4a:5e:cf:76:ef:44:a7:b1:bb:
         ed:67:4a:4d:99:41:70:39:36:0a:96:8f:9e:02:35:54:66:d4:
         5b:3e:d2:d0:76:4a:35:ee:c9:9a:75:cf:59:e9:00:83:c2:98:
         9b:32:b7:b6:89:17:28:aa:44:96:df:59:d1:83:99:e7:2e:c5:
         5a:5f:2b:15:02:87:be:5b:65:95:52:72:f6:f6:3f:ac:ad:71:
         59:ef:42:88:c2:21:de:0b:5c:3f:7a:89:cf:2f:b2:ee:9d:06:
         95:52:21:f5:89:24:71:c1:0b:ff:c4:f5:38:45:54:6c:fe:b3:
         25:53:ff:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:42:49 2026 by rpki-client