Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a62dab88-34ee-38ef-a202-27e5c6b97999.roa
File:                     a62dab88-34ee-38ef-a202-27e5c6b97999.roa (raw, json)
Hash identifier:          +O3YBS9l1R0s7JUc+mtku491hGmP2zjVjfgCZXdmdpU=
Subject key identifier:   18:84:C4:35:96:F1:4D:ED:3A:B6:79:93:4C:A3:20:6E:96:DF:7E:46
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E0435FBBFEFBF873149B8D740
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a62dab88-34ee-38ef-a202-27e5c6b97999.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     21859
IP address blocks:        38.131.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:35:fb:bf:ef:bf:87:31:49:b8:d7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=095a630f-4015-4b71-b064-b2daa3bee906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:31:30:da:e7:10:08:34:2d:c9:6d:56:72:14:
                    3f:11:e0:e5:cf:99:d3:9a:31:f9:5a:32:b1:a3:69:
                    2c:af:7b:54:ec:2a:9d:80:76:6a:93:64:ae:89:70:
                    d6:ff:80:72:9f:65:44:7f:95:de:bc:25:d3:75:51:
                    70:fc:9b:7d:d7:6f:c8:e5:69:b6:95:19:bb:b2:c4:
                    89:2f:9a:ba:6a:ee:35:f2:e4:19:55:89:6c:62:a6:
                    ec:c4:c5:cd:0b:06:06:ae:72:57:48:a4:8f:b0:21:
                    c1:67:cf:4f:08:ab:e0:bb:e3:85:1f:38:ec:c5:97:
                    c1:4c:48:de:36:db:a5:dc:76:a9:df:47:0a:3b:da:
                    5e:97:0f:1c:0e:18:b4:4c:63:7f:01:e2:0a:12:24:
                    7b:e1:8d:34:e2:8d:f9:25:68:a7:ad:c9:9f:22:a5:
                    0b:6d:2b:aa:f9:34:b2:9d:45:77:81:5c:97:0a:66:
                    88:13:4a:3b:c4:7d:5f:1b:4c:a8:1c:0d:dd:eb:1b:
                    ad:0a:65:bf:8a:57:3c:a9:05:bb:3d:8a:b4:e0:1f:
                    84:76:8f:25:d9:5c:5a:49:5f:6c:0a:b9:ca:97:23:
                    2a:72:bf:6d:b7:83:ca:75:8e:c8:c7:54:1e:f9:71:
                    eb:8e:53:66:42:2e:a5:e8:6d:d3:b0:4d:00:1a:82:
                    6a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:84:C4:35:96:F1:4D:ED:3A:B6:79:93:4C:A3:20:6E:96:DF:7E:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a62dab88-34ee-38ef-a202-27e5c6b97999.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.131.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:96:9c:f5:4b:3f:47:37:84:fb:51:89:62:43:fd:a3:12:0c:
         0c:35:b1:7c:f9:68:30:ac:36:da:15:d1:de:38:ed:62:a5:28:
         6b:c2:e3:b8:b1:b0:8c:dd:09:e5:cb:c5:27:94:dc:67:53:fd:
         06:a0:95:89:bd:c5:e7:84:e6:14:54:5a:16:da:9d:c0:40:ec:
         83:f1:2e:46:9a:15:35:ea:ef:55:3b:a2:53:77:4b:37:0d:e9:
         0c:ea:72:f2:08:c7:32:6f:65:e8:04:5e:f5:98:8f:a9:69:5c:
         44:61:b3:ca:8a:2a:35:9a:63:dd:c9:b5:5d:31:8c:dd:46:15:
         8a:d8:67:d2:54:f8:ea:a2:f0:33:cd:e1:c8:18:f4:f6:0f:15:
         db:1b:34:14:ac:ed:04:93:ee:4d:28:1d:b8:4f:de:e3:57:f3:
         a8:14:6d:fb:c4:58:1b:1a:04:77:5b:5b:db:6b:a2:90:96:91:
         e5:7c:72:16:6a:7e:21:93:b0:74:65:d9:ed:5d:50:8f:b2:18:
         8c:4d:c2:26:dc:a1:b3:d3:6d:52:ca:70:01:4b:92:f5:3c:e4:
         b5:01:c2:dc:c3:c9:25:5d:2f:09:c8:bd:8e:1c:4b:d6:d8:54:
         76:00:cc:45:1f:cc:87:d8:2e:fe:cc:aa:ce:bb:bb:f4:6a:1a:
         15:01:0e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:19:40 2026 by rpki-client