Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c8de189c-2a10-3610-a4a7-89b4fcd6325f.roa
File:                     c8de189c-2a10-3610-a4a7-89b4fcd6325f.roa (raw, json)
Hash identifier:          WADAKDayruMCeXpHZBck2Bt5t7EzmCejQzHM8DcwuxA=
Subject key identifier:   10:DC:F1:CA:92:1B:EB:D8:88:34:85:42:20:66:30:34:6C:B8:8C:8A
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D7A05515A62E2503A92D21528
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c8de189c-2a10-3610-a4a7-89b4fcd6325f.roa
Signing time:             Sun 12 Apr 2026 01:00:24 +0000
ROA not before:           Sun 12 Apr 2026 01:00:24 +0000
ROA not after:            Sat 11 Jul 2026 01:00:24 +0000
asID:                     154438
IP address blocks:        38.125.160.0/24 maxlen: 24
                          38.226.195.0/24 maxlen: 24
                          149.13.91.0/24 maxlen: 24
                          149.71.241.0/24 maxlen: 24
                          154.3.169.0/24 maxlen: 24
                          154.58.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7a:05:51:5a:62:e2:50:3a:92:d2:15:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Apr 12 01:00:24 2026 GMT
            Not After : Jul 11 01:00:24 2026 GMT
        Subject: CN=68d1c545-0c5b-4b6a-83cb-d99ac5ae0b4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f6:3d:60:42:77:ae:48:54:fd:d3:17:01:4d:
                    12:76:e9:1f:85:71:10:43:0a:59:12:bf:31:cf:e9:
                    03:58:85:a9:4c:d8:22:6d:10:86:04:9d:07:15:d7:
                    96:4e:25:d0:c8:59:49:d1:b2:e6:3c:4e:4d:98:00:
                    42:11:bd:7b:a4:95:ba:c2:f7:1b:75:aa:6b:43:ad:
                    af:2d:0f:16:a5:ee:22:10:4f:79:7c:12:78:3f:82:
                    af:98:72:8c:a0:8b:95:71:76:00:e9:02:a2:c8:bf:
                    8c:26:58:7d:c3:42:df:a2:a1:a0:f8:88:3c:b4:a8:
                    ae:3b:97:9d:a2:a0:27:24:c1:72:5a:66:15:41:07:
                    f3:d1:6f:a6:a0:c9:c1:db:29:66:91:09:f9:7b:ae:
                    e8:cc:f6:3d:47:0e:79:21:2f:66:6d:0b:40:a8:ea:
                    08:fd:2f:97:a7:6a:73:8c:cc:09:c6:7b:78:41:1e:
                    e8:f1:49:9a:e7:c4:a0:45:d0:09:e6:c1:96:ce:4f:
                    88:8f:92:5a:bc:5b:97:1c:fa:3a:88:0f:ea:21:f8:
                    94:1c:63:79:c5:96:f8:44:97:43:d7:96:3a:f9:af:
                    94:24:ba:b8:b7:3c:ef:21:03:42:b0:5e:32:df:8c:
                    54:ae:75:28:45:a3:e9:0f:73:19:e3:68:3c:35:5d:
                    02:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:DC:F1:CA:92:1B:EB:D8:88:34:85:42:20:66:30:34:6C:B8:8C:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c8de189c-2a10-3610-a4a7-89b4fcd6325f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.125.160.0/24
                  38.226.195.0/24
                  149.13.91.0/24
                  149.71.241.0/24
                  154.3.169.0/24
                  154.58.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:df:da:e4:8b:62:45:96:07:b3:b1:a8:71:97:84:ce:c5:59:
         d2:19:25:aa:05:4b:fe:73:0c:37:93:f1:88:4d:39:a9:18:aa:
         50:2d:37:ad:cb:5c:4a:7c:82:e6:76:16:94:c6:cc:3c:53:65:
         ed:7c:70:b1:7c:3c:ad:d2:a4:0f:ac:d7:c9:67:bd:a9:5c:ca:
         8b:1b:74:50:0f:26:14:12:37:40:85:95:cc:73:cc:45:e3:52:
         01:eb:04:23:bc:5d:81:69:b4:ac:36:c0:89:82:ef:07:c5:eb:
         4b:78:97:78:bd:39:11:67:89:92:9f:54:f5:b9:da:4f:66:7e:
         71:f5:e6:e3:3a:4a:26:a6:f9:c3:5e:9b:83:f8:b1:fe:57:2c:
         99:0d:85:e7:86:e5:08:f9:a9:64:bc:ec:30:45:f6:8f:e3:d3:
         16:09:40:a7:b4:19:e7:3f:1f:05:46:e0:c9:9b:71:ec:c5:b9:
         8d:13:b1:80:b3:cd:ed:3c:d1:79:53:1e:40:b9:95:e1:d2:bd:
         3e:94:29:b7:6d:49:14:68:8f:0a:e3:e0:41:24:26:c0:47:75:
         c9:1e:6c:19:a7:87:c9:98:89:fd:fb:9a:24:c3:2c:c9:49:58:
         9b:8d:0e:d9:d8:1e:4d:35:ee:bb:f0:0e:b4:07:43:92:78:8e:
         bd:69:99:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:32:11 2026 by rpki-client