Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/eebb7b78-4847-364b-b2ee-0b6cf05c31f0.roa
File:                     eebb7b78-4847-364b-b2ee-0b6cf05c31f0.roa (raw, json)
Hash identifier:          5l2sIL1SNqNqUBa0WPdG6iiLXCmgNKvDiTMZRsYx8cM=
Subject key identifier:   87:EE:5A:1A:4B:DD:8E:60:EB:2B:BA:A7:5D:D8:84:ED:6C:BE:2D:7D
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D7A05514D619A1A139C5AA240
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/eebb7b78-4847-364b-b2ee-0b6cf05c31f0.roa
Signing time:             Sun 12 Apr 2026 01:00:24 +0000
ROA not before:           Sun 12 Apr 2026 01:00:24 +0000
ROA not after:            Sat 11 Jul 2026 01:00:24 +0000
asID:                     271814
IP address blocks:        38.43.128.0/19 maxlen: 24
                          38.187.0.0/19 maxlen: 24
                          209.61.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7a:05:51:4d:61:9a:1a:13:9c:5a:a2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Apr 12 01:00:24 2026 GMT
            Not After : Jul 11 01:00:24 2026 GMT
        Subject: CN=bb10feba-52ff-4b62-b02a-eceee42bb0de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d8:02:55:42:02:76:2d:e5:3c:c7:b8:53:e2:
                    3b:2b:d7:79:0e:f7:51:c5:fd:31:9f:40:37:2e:a4:
                    44:b1:bc:20:69:63:c9:25:b0:67:e5:86:0d:7d:a1:
                    22:47:68:74:10:32:e2:69:42:a5:f6:5d:e3:f7:85:
                    b8:ed:53:27:bd:a2:d6:39:dc:bd:88:0e:68:70:46:
                    9d:de:44:b5:14:58:68:81:8d:48:4b:1f:e3:a2:5c:
                    e5:36:73:b0:ea:bf:3f:a0:08:ab:2e:97:d8:a6:fa:
                    c4:3b:9b:68:7b:fa:3e:96:56:5a:eb:b7:c4:30:cc:
                    ae:77:39:af:bf:6a:3d:f4:ae:e7:ae:7b:ea:54:ff:
                    9f:39:9c:12:1f:04:5f:43:e2:b5:1f:39:01:4f:b5:
                    d2:eb:4e:b7:a3:be:c6:23:22:4f:55:7d:a5:40:be:
                    24:a7:b5:3c:ec:a4:52:02:4e:c6:68:0d:eb:b3:15:
                    37:06:92:bf:2e:8d:2f:34:4d:08:3f:3d:50:7c:55:
                    a3:73:92:3e:6a:b2:a2:9d:02:41:77:92:c5:dd:1e:
                    d9:6d:b1:15:5b:3c:3e:ab:14:92:10:ac:ea:12:72:
                    05:4a:84:fb:df:1e:c4:1c:aa:51:9b:60:4a:90:43:
                    fa:b5:20:1f:4a:f9:ae:7f:3a:35:fd:b6:84:f5:21:
                    3c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:EE:5A:1A:4B:DD:8E:60:EB:2B:BA:A7:5D:D8:84:ED:6C:BE:2D:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/eebb7b78-4847-364b-b2ee-0b6cf05c31f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.43.128.0/19
                  38.187.0.0/19
                  209.61.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:24:c6:b9:ee:8b:01:e9:60:81:99:48:da:fb:96:d1:7f:0c:
         9b:56:67:cf:c2:69:51:c1:07:51:86:dc:6b:a4:cc:11:2b:cf:
         27:de:a2:74:fa:2c:13:9e:53:d6:a3:05:83:cc:7c:c6:7a:c2:
         de:19:a1:f6:ed:12:69:05:c1:7f:65:5b:35:59:60:c2:cd:54:
         6a:ca:f8:93:b2:f4:dd:02:ff:3a:a1:de:74:62:ac:91:18:43:
         31:77:fd:6f:a1:55:a3:13:31:7d:47:90:ac:e0:ca:41:d0:5d:
         22:96:bf:0c:df:29:6b:02:4c:30:97:a7:4f:00:ff:65:a7:fb:
         67:db:7b:00:d7:55:bf:ea:5c:90:33:c3:78:8f:a9:39:c7:04:
         96:75:87:66:99:d4:69:3a:07:d5:47:eb:d0:7a:a7:78:f6:5e:
         54:e0:8e:cb:58:0e:78:27:b3:ba:74:c3:63:f9:0f:0c:6f:d1:
         da:1e:3b:e3:55:61:68:9d:1b:69:17:9f:25:ce:90:03:2e:3e:
         98:fc:8a:2c:a9:17:28:c2:d5:c9:c3:29:1c:8f:b7:40:33:b5:
         2e:45:9e:d9:cf:07:62:d0:ad:3c:32:48:e1:74:28:2e:cf:bc:
         42:52:b0:23:2d:1e:43:46:4f:16:f0:72:4f:a8:30:52:c5:3a:
         b6:52:7f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:31:42 2026 by rpki-client