Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9997dab9-e4f9-3e1e-a60f-0e640e32d90e.roa
File:                     9997dab9-e4f9-3e1e-a60f-0e640e32d90e.roa (raw, json)
Hash identifier:          bqvpOLY31ub22T0yjD5UCVLyuOmiRt8ifmrVee+yQbc=
Subject key identifier:   6B:CB:C0:DA:7D:91:EE:A3:C7:3F:A3:61:C4:75:6B:69:FA:C2:F2:5C
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584CFE060103B8F9DAF058D560A8
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9997dab9-e4f9-3e1e-a60f-0e640e32d90e.roa
Signing time:             Thu 26 Feb 2026 15:02:03 +0000
ROA not before:           Thu 26 Feb 2026 15:02:03 +0000
ROA not after:            Wed 27 May 2026 14:02:03 +0000
asID:                     36105
IP address blocks:        38.224.0.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fe:06:01:03:b8:f9:da:f0:58:d5:60:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Feb 26 15:02:03 2026 GMT
            Not After : May 27 14:02:03 2026 GMT
        Subject: CN=c5238dbf-ecaf-45b0-9c32-f0378bb11798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:25:3f:c2:78:1f:4c:17:b5:31:9b:6a:cf:5b:
                    75:fe:a3:71:63:3b:01:00:0c:44:06:d2:8e:5b:f3:
                    a6:a7:05:e1:23:92:de:d2:9c:4c:1e:42:f7:17:5a:
                    cf:5d:1b:9c:66:96:c5:05:b7:86:67:7b:ef:de:0d:
                    ce:8f:ca:1d:18:e8:9a:55:db:77:4e:ee:ff:8e:7b:
                    65:7d:70:11:ee:fe:7f:d9:3b:0b:98:e5:91:ae:5c:
                    d1:4a:a2:f5:4f:7c:89:90:62:4d:a4:c2:46:7c:d6:
                    7e:7d:3a:fb:d1:2b:28:0c:2a:d8:1f:b3:89:24:2a:
                    ee:8e:c7:a3:15:36:5e:74:44:9f:46:2a:5b:62:47:
                    9d:86:98:d2:bb:55:00:39:94:bb:60:43:6f:1a:45:
                    37:ac:b4:f1:57:1a:55:00:0f:85:70:79:c7:c7:32:
                    2e:33:69:12:43:a1:95:3b:0e:c3:c8:9c:b5:28:c0:
                    b7:37:13:2c:f8:37:ff:e3:b6:95:f0:83:a3:2c:4b:
                    b2:7e:10:17:2a:ea:b6:18:e5:56:2d:8b:76:6f:e3:
                    2a:0a:79:02:6a:84:37:99:05:dc:84:38:a1:5d:63:
                    31:8e:37:3d:a3:e0:44:74:ad:ed:f2:b8:4a:2f:77:
                    8e:7a:bc:3d:f3:13:f1:70:1a:19:97:da:c0:cb:54:
                    ac:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:CB:C0:DA:7D:91:EE:A3:C7:3F:A3:61:C4:75:6B:69:FA:C2:F2:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9997dab9-e4f9-3e1e-a60f-0e640e32d90e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.224.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:18:97:c5:e2:0c:7a:fe:7c:ce:86:f0:8f:0b:c5:46:a4:bb:
         59:97:55:fc:d5:6c:1e:10:48:05:ca:61:c2:fe:aa:43:64:89:
         80:e0:dc:ac:ab:c0:44:6d:e4:8d:89:35:b8:f4:45:f5:6d:f2:
         90:76:dc:6d:2d:a4:e6:3f:00:90:59:fa:b4:aa:ac:6f:90:75:
         e2:e3:b5:cc:1d:43:e9:24:dc:fb:ea:4a:47:c9:8b:3c:16:5e:
         5e:24:1a:92:1c:d6:c8:49:ec:2b:5c:cb:25:b3:7c:63:67:5e:
         bf:3a:16:26:8d:54:63:70:00:d9:7b:b0:0b:78:8a:f9:bf:92:
         e0:dc:d7:6a:d6:53:8e:ab:39:4d:af:9a:93:bc:e8:e0:49:48:
         c8:9a:7e:31:fc:84:2f:d3:71:ae:91:e2:ff:8d:4a:fc:b4:90:
         e1:b8:7a:e7:1c:1a:0e:57:af:4b:de:7f:d2:da:18:0d:50:49:
         a4:8f:cd:ca:ae:b0:65:ad:71:7a:5c:af:02:cf:09:34:22:b6:
         8c:bb:25:56:cc:0b:25:7f:e8:0f:1f:c3:c0:70:9c:47:a8:46:
         10:0e:33:2b:1e:68:f0:e5:6b:35:b0:6c:dd:71:6d:c4:75:1f:
         95:72:5d:e0:45:34:90:d6:9f:ed:d6:c1:fd:03:b9:df:dd:3c:
         53:bf:79:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:33:21 2026 by rpki-client