Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b930dff7-2631-389d-bd83-229660a8d7ce.roa
File:                     b930dff7-2631-389d-bd83-229660a8d7ce.roa (raw, json)
Hash identifier:          zNBjwJDpsMz1h7G15dxbvTymXa4ETsQGLKdV0WgEg0A=
Subject key identifier:   3B:22:00:B7:65:74:BF:F0:3E:4D:AB:A6:38:6D:33:65:A8:5F:00:83
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F326C473A0EB4FAE610EAB700
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b930dff7-2631-389d-bd83-229660a8d7ce.roa
Signing time:             Wed 16 Sep 2026 19:04:02 +0000
ROA not before:           Wed 16 Sep 2026 19:04:02 +0000
ROA not after:            Tue 15 Dec 2026 20:04:02 +0000
asID:                     400893
IP address blocks:        38.82.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:32:6c:47:3a:0e:b4:fa:e6:10:ea:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep 16 19:04:02 2026 GMT
            Not After : Dec 15 20:04:02 2026 GMT
        Subject: CN=cf2d7861-9b3c-4ec0-bc40-5d8b056ba1c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c9:2a:af:62:3e:14:fc:4b:5e:d5:5d:b0:97:
                    45:a7:94:fe:4d:32:43:30:18:69:1a:92:fd:42:b0:
                    16:c5:12:28:cb:b1:9e:15:2a:35:09:36:c6:2b:5a:
                    18:3c:7e:a4:55:23:3f:c8:f0:f6:e0:e6:34:f3:62:
                    5c:99:3a:de:85:02:b4:8a:3d:54:e9:6b:6e:8d:ad:
                    61:89:1f:46:17:5c:d2:d3:c3:b6:af:72:2e:c2:9f:
                    0b:4a:9a:e2:18:a9:8c:d6:1a:34:93:54:4c:ed:01:
                    d3:a9:e5:74:ab:b0:f3:34:83:37:d6:4b:b6:46:94:
                    db:92:93:86:81:eb:92:b9:51:40:82:23:c5:b6:0c:
                    ae:88:25:b7:0c:ee:56:71:cb:51:f1:b3:cc:44:35:
                    1b:6f:d6:3f:f3:a3:3e:69:01:ab:ba:74:a3:14:57:
                    93:5b:65:e3:5f:09:89:7a:3f:cb:bc:cf:8e:83:6a:
                    b0:b8:2a:d5:6b:a8:e4:b8:52:7b:1f:97:6d:d7:ad:
                    1a:5e:08:89:ae:92:55:cf:fe:e0:28:3b:3d:d4:37:
                    62:5f:a9:f2:54:94:27:8c:53:96:21:e7:17:0b:43:
                    ea:fd:84:2f:ed:11:1e:bc:39:68:73:5a:d3:3e:a9:
                    8e:1b:f0:d5:61:d2:cd:60:ba:7c:21:03:24:4e:45:
                    03:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:22:00:B7:65:74:BF:F0:3E:4D:AB:A6:38:6D:33:65:A8:5F:00:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b930dff7-2631-389d-bd83-229660a8d7ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.82.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:e8:fa:25:b7:9c:47:ab:e5:1d:38:17:1a:11:4d:1f:22:9c:
         87:5a:44:a2:f8:9a:af:64:b2:ab:f7:32:a0:88:38:60:d3:a2:
         99:c1:3a:d1:4a:f3:e2:4c:d7:fe:71:b4:70:59:47:a6:19:09:
         ff:69:64:49:38:b8:46:03:03:22:6e:62:7a:6e:5a:03:45:48:
         5b:10:57:90:4d:fd:ae:85:ce:d3:f7:81:fe:98:39:a7:49:f7:
         96:7d:f5:ef:57:e6:9b:d9:da:05:9f:f3:39:0d:4f:5d:95:29:
         be:2b:23:4d:a0:09:eb:c6:12:df:7a:dd:a1:b4:f4:98:d9:43:
         bf:55:fc:ad:a8:40:4c:0a:44:5b:4f:d5:c0:71:4c:86:9a:5a:
         57:01:81:9f:fa:ae:08:a5:03:3c:5e:fb:f6:9f:5d:d5:4c:74:
         52:3f:31:b9:d0:c3:aa:80:ec:9c:8c:92:a0:21:3f:54:f3:12:
         2e:2e:2c:68:b4:fb:c4:24:c5:33:c3:3d:0b:4e:76:b7:e5:3e:
         f4:d7:f6:c7:49:e7:fb:9b:11:c6:8b:57:f9:b2:da:ba:a4:ca:
         bf:75:56:8c:ee:60:1d:ab:77:24:78:bc:32:e7:02:7a:ee:5c:
         1c:6e:56:a8:a8:26:55:d2:05:dd:36:90:42:23:1d:9c:46:d7:
         67:62:c6:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:12:23 2026 by rpki-client