Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/aab797dc-3741-3b15-b247-f08dc14083e5.roa
File:                     aab797dc-3741-3b15-b247-f08dc14083e5.roa (raw, json)
Hash identifier:          mgqN4fGN1L0yoaJbW7LvwPCB0x70Zpa34O0/APVnaoI=
Subject key identifier:   74:83:21:3C:01:F0:9B:88:AC:68:52:9D:64:E2:56:9E:72:93:04:3F
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E15E49F39A7034B89990F1200
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/aab797dc-3741-3b15-b247-f08dc14083e5.roa
Signing time:             Sat 06 Jun 2026 21:00:13 +0000
ROA not before:           Sat 06 Jun 2026 21:00:13 +0000
ROA not after:            Fri 04 Sep 2026 21:00:13 +0000
asID:                     8796
IP address blocks:        38.47.192.0/18 maxlen: 24
                          38.181.0.0/18 maxlen: 24
                          154.19.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:15:e4:9f:39:a7:03:4b:89:99:0f:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jun  6 21:00:13 2026 GMT
            Not After : Sep  4 21:00:13 2026 GMT
        Subject: CN=0482c6a8-ab1c-40bd-aec2-3b074a7fe663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6c:64:22:56:ef:e2:46:01:45:fa:bb:d6:a8:
                    52:46:aa:68:e5:65:a1:a7:f7:25:55:cb:ca:af:57:
                    35:58:b0:7b:7d:c8:28:15:89:96:b9:89:2c:3e:41:
                    d1:c6:03:16:af:49:ea:5b:cd:17:a6:4f:d6:97:98:
                    e9:e6:7b:56:5e:1a:d4:af:d5:16:a8:cf:53:e2:ff:
                    8e:8f:6b:f5:c1:55:74:b0:12:9c:34:25:d6:1f:a7:
                    00:8a:36:2d:e3:49:99:f6:e4:91:d1:60:13:1b:a6:
                    a7:ce:11:1b:7b:98:57:8d:49:6e:4a:56:5a:6f:1f:
                    90:6b:cf:0e:8c:ed:c2:30:c5:c5:65:09:2c:b9:a5:
                    6d:cb:f5:cb:eb:22:ab:26:ac:3f:cc:2f:6b:37:e5:
                    91:84:e1:22:4e:81:10:2c:2a:13:43:e3:9f:44:30:
                    f9:a5:b7:e2:54:72:3c:21:58:e7:3c:35:85:3f:0b:
                    d4:16:84:02:28:95:59:52:26:3e:71:67:85:89:c5:
                    04:ba:f6:07:2b:ca:ee:00:3b:75:d6:64:21:6f:5a:
                    ae:f0:a1:f0:6e:b4:59:01:7e:d0:10:f7:e8:12:8e:
                    a4:83:1b:27:b5:86:b4:2c:2e:8d:c2:5e:9e:19:a5:
                    ee:ec:11:aa:a0:51:a1:23:31:f8:c5:1a:93:f5:13:
                    c6:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:83:21:3C:01:F0:9B:88:AC:68:52:9D:64:E2:56:9E:72:93:04:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/aab797dc-3741-3b15-b247-f08dc14083e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.47.192.0/18
                  38.181.0.0/18
                  154.19.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:c7:88:23:91:45:1f:e7:28:92:12:06:aa:f0:6e:e0:cf:a4:
         b7:81:b5:e2:78:6c:b3:7d:0a:5f:65:7d:04:0e:52:58:6b:33:
         96:f2:d3:87:5d:fb:98:ee:8c:2e:75:ae:da:06:45:35:4d:81:
         97:0d:fb:f4:9e:5c:35:c3:db:e5:bd:c5:6d:00:c7:65:48:c3:
         23:26:d4:ec:5a:a0:f4:23:4c:be:cc:b2:8c:fc:46:60:17:6c:
         a8:c7:5c:46:0d:5e:3c:38:8a:d5:4b:19:30:cd:b3:28:e9:48:
         6c:15:81:e6:1d:e6:1e:cc:31:fb:5b:98:73:a9:25:86:89:5c:
         d6:ed:6b:2e:cd:7e:e7:f4:a0:f4:43:de:1b:7d:10:10:19:e4:
         40:16:3b:22:8b:53:32:ed:de:74:06:70:b9:9c:0a:84:2e:54:
         46:80:b2:c8:cb:31:cd:93:1c:7a:81:bc:0b:38:60:75:7e:6d:
         eb:c9:32:47:ff:0a:3d:7d:90:ae:45:8d:7d:10:5f:d4:0a:98:
         2f:ea:03:db:f1:ce:f2:8d:ce:19:3f:8c:b8:35:01:ff:29:be:
         45:6e:60:01:f4:55:65:50:72:b3:e1:b1:cb:3c:a9:81:ac:3e:
         bb:ab:64:35:01:c1:28:94:85:67:c0:98:98:2b:7b:ee:5c:48:
         fa:4a:1a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:33:57 2026 by rpki-client