Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e99a0aff-c977-3afd-95ea-d64ebb4487da.roa
File:                     e99a0aff-c977-3afd-95ea-d64ebb4487da.roa (raw, json)
Hash identifier:          m5eAtpfdY+SgtOX4MqFKuDQPvvwpqWlrt0IAkmAdGac=
Subject key identifier:   C4:B5:C1:BD:91:59:52:D1:85:DC:B4:1E:2C:D5:5F:D0:C6:74:B2:B4
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D626E4457724D2FF0F60F8940
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e99a0aff-c977-3afd-95ea-d64ebb4487da.roa
Signing time:             Fri 03 Apr 2026 14:12:58 +0000
ROA not before:           Fri 03 Apr 2026 14:12:58 +0000
ROA not after:            Thu 02 Jul 2026 14:12:58 +0000
asID:                     274060
IP address blocks:        38.246.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:62:6e:44:57:72:4d:2f:f0:f6:0f:89:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Apr  3 14:12:58 2026 GMT
            Not After : Jul  2 14:12:58 2026 GMT
        Subject: CN=42a688d3-5bd1-4926-922a-d8f68b76c039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d7:a8:02:fb:2e:f7:92:b2:4b:ec:37:a2:f0:
                    09:14:4a:b9:f7:75:26:11:c8:b4:c5:d9:43:2f:9f:
                    c9:ab:a5:0b:00:48:6e:09:77:df:bc:f3:86:41:68:
                    24:14:13:f4:c6:6d:01:40:0c:e7:81:a1:4f:9a:0c:
                    43:c5:aa:60:fb:dc:a9:c5:78:ed:67:1d:b9:63:13:
                    f6:e6:1a:40:59:b9:09:c6:4c:6a:94:eb:86:da:1c:
                    54:a4:43:0f:06:f1:57:ae:04:10:16:e4:ed:c7:31:
                    45:9b:88:6c:a0:69:95:34:e0:df:db:70:55:48:e5:
                    9a:e1:e7:3d:34:57:cb:25:3e:04:95:24:a4:6e:f5:
                    37:bf:a5:cd:db:b3:a9:d8:9b:e4:7a:69:df:6a:50:
                    7d:ed:33:ae:dd:eb:f2:1f:ee:b9:7f:18:30:7b:f8:
                    6f:d9:2c:a0:48:80:5a:08:cd:5e:89:3d:f0:33:62:
                    3e:57:05:65:3e:64:92:14:4a:47:71:91:ff:b5:99:
                    75:9d:3f:11:66:66:a4:c6:e5:74:45:62:f7:bb:32:
                    7a:09:2c:12:dc:89:2d:c7:4f:a9:cf:d9:ce:8b:55:
                    b6:f4:1e:28:2b:15:78:7e:b2:20:d2:16:28:a8:79:
                    2d:77:f5:c7:fe:88:d3:be:f2:8e:37:45:5e:42:40:
                    bd:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:B5:C1:BD:91:59:52:D1:85:DC:B4:1E:2C:D5:5F:D0:C6:74:B2:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e99a0aff-c977-3afd-95ea-d64ebb4487da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.246.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:a6:3b:a6:b7:bd:23:d1:4f:64:51:fd:37:32:b8:3b:50:45:
         d6:20:ca:f1:82:22:9b:c6:bd:ea:aa:0e:7b:28:32:82:64:ae:
         15:57:fa:dc:30:4a:9d:5c:f9:59:7e:2b:72:f9:dd:89:c1:49:
         60:13:b8:3b:d3:53:29:53:b0:17:de:01:88:bd:31:3f:31:cb:
         0b:3d:4b:a7:c3:27:8e:71:c0:c5:0e:5a:34:fb:d3:c4:5a:b6:
         47:80:7d:ea:d0:50:3f:34:58:5b:81:a0:3a:4e:bb:79:04:ca:
         4e:d6:cc:45:ec:51:4b:5b:41:a6:7e:c2:af:05:14:07:9e:65:
         65:50:34:eb:ed:01:2d:b7:3a:b8:fb:3e:95:a3:59:6d:33:7f:
         a0:a4:c1:12:f3:ae:0b:29:7b:9a:e7:b5:8d:d0:2f:74:12:81:
         11:fe:04:ab:ec:a4:49:c7:a2:ce:60:2e:2e:a0:bb:d5:ab:4d:
         01:29:e9:96:48:45:b3:3f:c9:aa:d9:73:a2:9b:c4:89:48:d6:
         e5:34:b0:3b:f4:d8:74:85:eb:be:69:0d:d2:53:ed:11:c8:ca:
         64:17:6e:33:4e:af:7b:86:76:56:62:64:11:fa:b1:a7:99:85:
         4b:29:6f:bd:fc:13:ec:c3:ef:c8:43:09:22:49:97:69:b6:28:
         fd:51:87:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:19:43 2026 by rpki-client