Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/92a7a914-6466-388d-9b77-ea7f71e7d5bf.roa
File:                     92a7a914-6466-388d-9b77-ea7f71e7d5bf.roa (raw, json)
Hash identifier:          +bhCVUx3yZnE7QskNjaNqw+t/JcnCoo2L+IvBY5AC/Q=
Subject key identifier:   5F:27:1D:8D:1E:9C:5E:F5:C2:DF:13:C3:AB:53:15:AA:BE:0F:69:D0
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584BAC18BE6420AD06C651750100
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/92a7a914-6466-388d-9b77-ea7f71e7d5bf.roa
Signing time:             Tue 28 Oct 2025 13:56:35 +0000
ROA not before:           Tue 28 Oct 2025 13:56:35 +0000
ROA not after:            Mon 26 Jan 2026 14:56:35 +0000
asID:                     399442
IP address blocks:        38.29.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ac:18:be:64:20:ad:06:c6:51:75:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct 28 13:56:35 2025 GMT
            Not After : Jan 26 14:56:35 2026 GMT
        Subject: CN=66a45bc2-f592-4951-aede-19bfac08e606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:04:b1:ab:08:cb:6b:90:eb:d6:dd:f2:a4:6a:
                    69:5b:df:94:f1:79:13:7b:e4:cb:c5:15:a5:ae:5f:
                    52:25:50:ee:5c:27:c5:6a:9c:d0:5b:ea:bf:5b:75:
                    19:02:a1:cc:23:73:aa:16:ea:b2:77:7a:9a:11:31:
                    5b:a1:7e:03:c1:0e:d8:b6:46:a4:b9:8c:aa:48:de:
                    ba:47:c6:32:92:0d:c5:5a:39:1a:64:55:7c:89:45:
                    38:0d:f8:b6:59:6d:6f:7e:d3:ca:a9:97:08:0e:62:
                    50:6f:be:d0:1b:b5:4e:aa:c1:2a:e3:1f:8e:4b:d6:
                    ab:39:ef:34:98:45:e2:04:27:4a:32:56:63:b3:d4:
                    59:61:57:65:6f:fd:31:c0:47:f7:0f:9f:bf:68:5f:
                    73:d2:58:22:32:34:93:8d:f6:ee:5b:67:42:0d:58:
                    bc:a1:38:b4:c0:c0:9b:a4:91:e3:23:d5:0f:ae:5c:
                    ef:60:fd:83:7d:18:f6:ab:a1:c7:3e:e6:76:3b:8b:
                    39:4a:84:f9:67:91:b4:d1:14:2d:70:63:01:17:00:
                    46:f1:0a:28:e3:79:9c:98:84:7a:84:54:35:e7:40:
                    b5:b3:54:27:f3:5a:6b:dc:15:f6:ea:42:fc:e7:d4:
                    2e:07:35:e6:83:e4:ae:ee:d5:c5:58:af:56:fa:b1:
                    c9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:27:1D:8D:1E:9C:5E:F5:C2:DF:13:C3:AB:53:15:AA:BE:0F:69:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/92a7a914-6466-388d-9b77-ea7f71e7d5bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.29.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:3a:05:ed:4e:e5:0e:6c:fd:e4:f3:06:09:94:9a:9b:4c:1b:
         82:b9:c5:4b:88:d3:8f:eb:8a:7d:94:54:5c:0f:2e:3d:65:da:
         52:80:6c:f1:da:38:59:ef:73:54:44:67:86:c6:ee:12:84:25:
         d6:a1:b4:c5:0c:d7:2f:68:91:d8:9f:aa:51:48:56:a2:73:b7:
         65:ca:da:1c:2e:94:fd:04:27:e8:4e:0f:f5:09:e2:b0:8b:e9:
         6d:e3:28:d1:9f:26:3a:d4:17:0c:82:5b:ae:bf:6b:a9:10:02:
         18:32:22:81:dc:df:8e:0c:cc:94:7c:d5:55:f4:8a:31:d0:8c:
         1d:01:92:00:1b:0a:22:32:2d:84:29:e8:6c:cd:e4:15:70:32:
         00:d8:e3:55:10:69:2f:31:34:eb:dd:7e:5f:11:88:06:bd:13:
         5c:ea:04:8d:14:81:56:b3:f7:99:2d:6a:13:47:ab:cf:1d:68:
         45:26:1b:b5:b4:04:f0:c9:68:0c:51:79:4d:f8:ee:1f:00:e2:
         07:ea:9b:bb:07:85:4d:39:94:55:43:ee:79:5d:91:47:33:58:
         12:67:47:f1:2b:01:e1:25:1b:ba:07:b8:75:ab:6a:11:93:b8:
         04:8d:14:d5:36:c6:7f:b9:e8:6b:8c:4d:2b:02:32:86:1b:4d:
         45:49:43:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:06:59 2025 by rpki-client