Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f1915f40-7164-3535-9e18-b4549fe39c49.roa
File:                     f1915f40-7164-3535-9e18-b4549fe39c49.roa (raw, json)
Hash identifier:          mRGn/BNH11f8Yd2TQPzU3yfI0bq7Qb9AOfYIkWQCgxg=
Subject key identifier:   0E:77:B0:32:D9:DF:B7:66:EE:6B:79:90:DF:2E:D0:D6:37:DC:01:1A
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F51D2A4EBF32475B8BF57FC80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f1915f40-7164-3535-9e18-b4549fe39c49.roa
Signing time:             Mon 28 Sep 2026 01:00:12 +0000
ROA not before:           Mon 28 Sep 2026 01:00:12 +0000
ROA not after:            Sun 27 Dec 2026 02:00:12 +0000
asID:                     63270
IP address blocks:        38.109.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:51:d2:a4:eb:f3:24:75:b8:bf:57:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep 28 01:00:12 2026 GMT
            Not After : Dec 27 02:00:12 2026 GMT
        Subject: CN=92be529e-3509-4de8-a047-45fac3b89ce6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ef:39:bf:c1:32:7a:c3:a4:32:cc:60:78:a6:
                    f0:35:ba:62:f9:bd:38:a2:d6:e9:a3:2b:64:bc:8b:
                    b3:be:f5:15:80:1f:8b:60:e4:cc:21:9f:ac:42:4d:
                    91:8e:41:2b:10:0c:77:ab:e1:05:e6:09:15:39:7c:
                    e5:c4:2b:c2:a4:31:70:45:6c:ee:0c:2e:8c:17:77:
                    b0:7e:05:fe:01:a8:4d:f5:15:b9:ed:e8:2b:c9:d9:
                    c0:29:ea:48:8f:45:a5:31:00:f4:f3:26:ba:1c:c9:
                    cc:65:22:c7:35:db:a8:7c:02:e6:d6:8c:3c:88:12:
                    31:bc:39:ae:eb:42:e3:2b:19:04:d1:79:c0:58:59:
                    67:d8:fb:37:1c:7c:2b:ba:36:8f:76:af:fc:ca:34:
                    5a:88:7e:4e:a6:0f:f5:44:c0:82:c3:8d:45:8a:16:
                    98:d5:b1:27:ca:73:dc:0f:b3:76:ea:5e:c4:4a:39:
                    45:91:35:a5:17:1d:13:dd:60:c6:67:56:b8:3b:6e:
                    b7:be:48:b2:1c:c8:d3:ca:17:6e:76:79:04:ce:75:
                    b5:dd:fc:0d:5a:a7:50:33:88:d4:2b:9c:cf:43:20:
                    70:7b:33:bc:e4:1f:c1:ba:49:68:1c:0d:82:1f:0f:
                    e5:d5:b1:7d:12:23:f0:32:cf:8d:7b:42:87:78:ec:
                    60:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:77:B0:32:D9:DF:B7:66:EE:6B:79:90:DF:2E:D0:D6:37:DC:01:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f1915f40-7164-3535-9e18-b4549fe39c49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.109.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:89:87:52:77:bd:3f:4d:f1:f4:5f:44:30:66:be:6d:2c:a3:
         db:c0:7d:6a:52:38:2e:51:fa:29:5b:0f:3c:ad:f7:e1:7d:ee:
         d4:4d:3b:d1:1c:12:53:75:97:29:38:87:37:a1:79:32:f9:96:
         fa:af:07:b1:7c:32:f5:d8:9f:29:4e:c1:7c:85:4e:46:13:5c:
         fc:15:d0:18:55:5a:e4:48:95:58:03:1d:7c:99:cc:83:83:f5:
         d4:fc:10:0b:59:b7:40:c2:31:4f:11:d4:00:ca:9c:63:3c:20:
         33:fb:b9:60:4f:aa:e1:01:d8:6e:a5:bb:ec:89:df:f9:2e:b6:
         20:50:06:34:59:a8:4e:7e:36:86:91:8e:e3:2f:bc:e6:90:1f:
         5e:cb:87:ce:92:ad:c1:a8:19:ad:8e:14:7a:6b:57:8a:ab:61:
         88:ce:45:51:58:09:58:38:30:2e:77:0f:1b:40:87:3a:f1:c6:
         3d:81:ec:e0:b2:41:78:42:f3:dc:df:6c:fa:cd:a7:d3:e9:8a:
         55:5d:e8:2c:b4:08:a9:f6:85:24:33:63:df:22:9b:6a:b6:e1:
         70:65:db:f0:36:b5:1a:5f:80:2c:43:8d:13:e6:d2:76:35:8f:
         fa:d5:d2:75:bf:6f:b6:00:3f:5b:02:25:fe:98:d2:df:ba:b5:
         29:fe:1f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:51:44 2026 by rpki-client