Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c64ac270-56c4-3f92-b137-63d4d364590e.roa
File:                     c64ac270-56c4-3f92-b137-63d4d364590e.roa (raw, json)
Hash identifier:          L5loRwhHpikT/M8FjTR5YFM+GGmWC51HZy6GHkjramI=
Subject key identifier:   C0:95:58:AA:7E:6A:AD:6E:80:BD:70:AE:1C:1A:F5:24:B6:B5:63:DD
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E5E7A074C0A435A358AB3A440
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c64ac270-56c4-3f92-b137-63d4d364590e.roa
Signing time:             Thu 02 Jul 2026 21:00:12 +0000
ROA not before:           Thu 02 Jul 2026 21:00:12 +0000
ROA not after:            Wed 30 Sep 2026 21:00:12 +0000
asID:                     174
IP address blocks:        38.143.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5e:7a:07:4c:0a:43:5a:35:8a:b3:a4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jul  2 21:00:12 2026 GMT
            Not After : Sep 30 21:00:12 2026 GMT
        Subject: CN=5d76ded9-180a-4244-be7b-2d8469121b6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:68:b9:a3:da:19:9a:11:bb:46:3e:48:00:7b:
                    f1:6b:8f:82:cd:56:99:ff:b5:66:6b:a9:fb:08:95:
                    3c:76:5a:76:e7:cf:13:03:af:01:36:14:5a:20:f9:
                    e2:35:44:a6:7b:77:82:e8:ff:46:63:a7:bf:3b:54:
                    de:dd:8c:26:0a:0f:02:05:12:f7:49:a5:6f:54:b4:
                    38:e5:23:2e:01:90:ac:a2:d4:ca:24:f6:54:88:9d:
                    e8:ca:4c:8d:6d:c7:da:28:d3:4e:f5:cf:dc:e8:20:
                    77:6f:c5:59:54:2f:43:99:d0:ff:38:b7:70:ec:ff:
                    98:f3:be:dd:f3:5b:52:b2:8b:2a:22:18:a5:18:7e:
                    54:12:bc:36:d4:55:be:1c:20:2b:f8:39:cc:33:dd:
                    f6:6f:a0:22:c4:87:96:a3:fb:2e:25:76:07:60:02:
                    4b:74:45:5f:85:53:ea:64:c1:41:df:8c:0a:0b:ba:
                    b9:b4:40:68:39:41:14:4e:76:9e:3e:5d:ed:a0:ec:
                    6f:9d:e8:a8:53:b8:85:a3:ed:3c:f4:49:22:f7:1b:
                    f6:6f:0d:60:06:6b:f0:54:14:0a:6b:2c:23:b9:95:
                    5b:33:a1:d4:2b:f4:80:66:82:ce:b9:58:4f:67:35:
                    ea:fe:5a:c4:8d:ee:95:b5:49:a2:53:5a:aa:37:e8:
                    b6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:95:58:AA:7E:6A:AD:6E:80:BD:70:AE:1C:1A:F5:24:B6:B5:63:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c64ac270-56c4-3f92-b137-63d4d364590e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.143.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:8b:d8:73:99:c9:60:91:33:c6:20:12:8b:3f:21:6d:be:87:
         5b:da:cc:15:8a:cc:90:b9:24:fe:48:9b:b8:bf:4f:72:dc:df:
         85:82:6c:1d:82:cc:64:3d:25:00:b3:d9:8d:94:32:4f:99:53:
         07:e1:9c:6c:3c:93:a0:02:09:2b:f0:1c:b1:06:b8:15:39:5c:
         bf:b6:d0:da:16:d2:1b:18:2e:94:d0:7a:5a:3a:8a:7f:95:d8:
         45:1a:a3:9b:3e:36:c3:5a:a4:8b:e4:d9:44:27:25:ef:85:53:
         30:fe:80:b9:83:e3:6d:33:90:cc:41:6d:63:6c:01:7a:78:92:
         45:60:54:b4:c5:aa:0b:56:54:46:89:9b:18:07:a8:4d:84:a4:
         94:6a:10:2a:28:a1:1b:ea:be:86:f7:6e:f4:f6:ed:c9:7f:0f:
         0a:6d:f4:4d:04:6a:49:91:4c:bf:5b:e3:10:10:6c:75:c6:21:
         3d:94:e4:7a:40:21:24:41:d7:0b:7d:87:41:49:df:5c:d6:73:
         9e:8f:df:ee:f3:72:59:7e:06:52:e5:c0:eb:06:17:6c:b7:01:
         14:4a:85:d9:52:74:78:ef:95:33:50:55:96:41:ef:ce:6d:c4:
         0f:ec:09:d9:5c:d5:12:8f:7d:68:fe:96:1b:67:6e:76:c2:1d:
         4d:2c:85:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:19:18 2026 by rpki-client