Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/cfd08220-90ad-3a5b-9990-5294a0092c49.roa
File:                     cfd08220-90ad-3a5b-9990-5294a0092c49.roa (raw, json)
Hash identifier:          wU5WUBsaEWSOy28AYBy/VH2vkImROvNaKTS6nlUEGT0=
Subject key identifier:   42:79:3F:08:28:E6:E3:07:4D:6A:F8:AE:CE:6A:08:6E:67:02:E8:CF
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D6E4F34284AF36CF10D95B3E0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/cfd08220-90ad-3a5b-9990-5294a0092c49.roa
Signing time:             Tue 07 Apr 2026 20:20:05 +0000
ROA not before:           Tue 07 Apr 2026 20:20:05 +0000
ROA not after:            Mon 06 Jul 2026 20:20:05 +0000
asID:                     200088
IP address blocks:        38.180.24.0/24 maxlen: 24
                          38.180.34.0/24 maxlen: 24
                          38.180.50.0/23 maxlen: 24
                          38.180.110.0/23 maxlen: 24
                          38.180.212.0/24 maxlen: 24
                          38.180.217.0/24 maxlen: 24
                          38.180.227.0/24 maxlen: 24
                          38.180.250.0/24 maxlen: 24
                          38.180.252.0/24 maxlen: 24
                          38.244.152.0/23 maxlen: 24
                          38.244.186.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6e:4f:34:28:4a:f3:6c:f1:0d:95:b3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Apr  7 20:20:05 2026 GMT
            Not After : Jul  6 20:20:05 2026 GMT
        Subject: CN=ba27a955-7770-4593-a381-19758a902c0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:72:44:6a:a4:25:c2:9d:aa:d8:55:5d:69:0c:
                    be:ba:c6:db:bb:40:04:c7:90:92:31:86:a2:3e:8d:
                    39:70:cc:bd:4b:92:12:43:b0:6a:60:49:c8:bc:9a:
                    13:88:e8:24:d2:a6:55:ef:25:02:27:a4:6b:cd:84:
                    b4:1b:a2:b1:47:b2:64:d6:22:1c:95:16:e7:87:c0:
                    59:03:36:45:2f:8a:1a:ed:10:2c:a9:3e:0a:34:de:
                    72:4d:5b:5b:7e:2e:da:f7:c0:83:cc:0f:21:8f:e5:
                    2f:04:b3:81:d3:74:f6:09:1c:53:54:b4:da:5f:a7:
                    73:ff:0b:b6:9d:0c:0b:d1:d2:cd:26:30:e0:3e:d2:
                    fc:2f:50:66:90:1d:30:68:0c:69:ca:63:e7:08:93:
                    e9:38:56:fa:fa:2c:a1:4a:60:b1:3e:1c:cc:d8:c9:
                    b7:6d:20:28:1f:27:e4:f1:fe:50:f3:32:bf:2f:6d:
                    08:b3:76:10:88:2a:6f:2b:25:6c:e0:04:1e:89:02:
                    b1:a4:16:a0:c9:ba:37:bc:8d:59:ee:dc:c2:91:e3:
                    ce:44:99:91:ec:83:c5:64:66:c6:fc:22:8a:a0:32:
                    6e:af:dd:6f:d6:1a:49:c4:e1:56:a9:c0:13:01:ce:
                    4f:8f:b5:29:7c:4e:a8:ed:6f:bc:1b:0c:26:dd:2a:
                    71:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:79:3F:08:28:E6:E3:07:4D:6A:F8:AE:CE:6A:08:6E:67:02:E8:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/cfd08220-90ad-3a5b-9990-5294a0092c49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.180.24.0/24
                  38.180.34.0/24
                  38.180.50.0/23
                  38.180.110.0/23
                  38.180.212.0/24
                  38.180.217.0/24
                  38.180.227.0/24
                  38.180.250.0/24
                  38.180.252.0/24
                  38.244.152.0/23
                  38.244.186.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:ea:56:61:53:b8:04:a7:3a:b2:bf:47:e0:85:35:56:81:0f:
         6f:99:90:ee:b2:2c:fc:e7:4f:cc:0f:0e:d9:cd:02:85:84:2e:
         2e:32:7f:de:de:d8:11:e0:76:fc:4d:b0:ff:45:32:f7:1e:37:
         5c:80:39:bd:80:99:86:6d:1f:a5:a8:c7:3b:99:26:bf:5d:f0:
         70:11:70:bc:33:d4:3f:36:81:01:7a:10:90:8f:4e:a0:90:9b:
         8d:7d:e6:e6:ff:4f:c1:73:11:53:68:67:11:8c:af:81:a8:54:
         65:40:93:bb:1f:16:51:29:b1:8c:c7:be:74:7b:25:8e:14:23:
         be:9d:86:f3:e8:82:ab:a2:58:46:93:6a:c3:d9:25:1d:06:c9:
         ad:07:86:1d:48:7a:3b:70:42:ed:54:d7:8d:34:f0:c4:a3:c1:
         d4:e0:c6:36:00:b7:8f:30:7b:36:3f:13:e1:7e:1e:cd:19:99:
         fc:16:27:fa:cf:9d:77:f8:a5:2d:71:b4:ee:23:de:8e:78:9b:
         06:30:eb:ef:54:42:62:6a:4f:89:06:02:65:8f:e1:f9:87:98:
         28:5d:32:72:04:42:f8:36:4b:7a:86:89:07:8b:67:c8:ce:df:
         d1:3f:fc:5a:10:b5:d8:9e:a2:c9:11:0a:b2:13:21:e3:73:be:
         c4:7a:80:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:29:28 2026 by rpki-client