Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f78c02c4-77e7-344b-92b6-85a4ac10591c.roa
File:                     f78c02c4-77e7-344b-92b6-85a4ac10591c.roa (raw, json)
Hash identifier:          NIkMLmLxA5sM569RdkWjIXVEP9TPeLC7dqHkvDxLZWE=
Subject key identifier:   4F:48:86:2B:9A:D8:CD:16:8C:F6:8D:28:8A:B2:D6:E4:F3:23:8E:27
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F5B9802378C980F98CB6B2A94
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f78c02c4-77e7-344b-92b6-85a4ac10591c.roa
Signing time:             Thu 01 Oct 2026 13:00:12 +0000
ROA not before:           Thu 01 Oct 2026 13:00:12 +0000
ROA not after:            Wed 30 Dec 2026 14:00:12 +0000
asID:                     28398
IP address blocks:        38.7.16.0/21 maxlen: 24
                          206.85.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5b:98:02:37:8c:98:0f:98:cb:6b:2a:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct  1 13:00:12 2026 GMT
            Not After : Dec 30 14:00:12 2026 GMT
        Subject: CN=e8a5c69f-5d52-4ce1-916d-de9e6cd731a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:85:de:83:2d:bd:89:97:c0:b5:6c:e2:2f:4e:
                    d3:45:43:19:ce:92:a7:70:74:ad:09:b4:57:27:da:
                    e7:85:08:d9:99:3b:1b:ea:20:dc:81:21:96:b2:56:
                    31:ed:5b:ca:80:97:e9:03:fd:dd:c9:51:2a:3b:ff:
                    31:68:c1:d9:1c:36:3f:94:4f:be:f4:7c:14:00:03:
                    21:76:71:6f:4e:80:e5:21:f8:82:44:8d:bb:d5:16:
                    a4:48:39:be:3a:26:13:ce:03:10:47:87:0d:81:54:
                    bf:e1:cb:73:04:32:b9:65:40:e9:a2:ba:9f:16:ee:
                    75:82:49:92:13:6d:9d:fa:ca:0e:67:ef:b7:60:7f:
                    7b:fd:b9:fc:c0:1f:a1:b6:d9:1e:93:f9:de:93:35:
                    fb:6e:64:0a:58:d1:21:5f:e2:2a:1f:43:16:56:36:
                    69:63:13:e1:a1:ca:a4:65:ba:16:42:7b:c4:bf:07:
                    3b:06:f6:ba:b3:f4:a3:ff:cb:05:d8:e6:b1:85:25:
                    34:79:28:04:02:2c:43:81:d8:cc:7b:42:83:e6:50:
                    99:65:10:1c:47:ad:29:f4:84:67:1f:80:92:d4:c2:
                    39:85:a4:f3:69:7e:f7:98:90:73:5b:da:2c:df:43:
                    b7:62:ff:0f:aa:f8:32:e8:c5:09:9a:cc:98:6a:fc:
                    06:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:48:86:2B:9A:D8:CD:16:8C:F6:8D:28:8A:B2:D6:E4:F3:23:8E:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f78c02c4-77e7-344b-92b6-85a4ac10591c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.7.16.0/21
                  206.85.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:74:7a:fd:3a:87:3e:69:14:f6:05:91:0b:84:12:96:3d:92:
         61:b5:7b:ef:a6:ee:85:54:28:ed:b9:3b:c2:2a:05:e3:19:ee:
         7f:b0:d5:aa:88:fb:a3:28:0d:69:77:b0:e2:45:2d:1b:c7:78:
         e6:ba:f1:25:dd:fb:f4:b9:ba:8f:4c:2c:bd:d2:3b:e1:25:3f:
         87:bb:d8:bd:56:c6:c1:63:56:0c:9f:3b:84:54:3e:0d:d0:8d:
         c6:02:cf:e8:7f:e7:a5:00:ea:97:30:49:ce:ed:af:5c:f3:71:
         25:1a:da:87:54:26:f9:f2:83:7b:a5:df:d9:89:84:ee:b6:21:
         f0:b7:ec:01:72:0a:bc:4c:a7:5e:4e:1c:3a:b6:51:f6:8a:d1:
         6d:e9:8f:47:62:d7:25:54:0c:d9:65:9f:2b:f9:ca:5e:25:bd:
         cc:3d:36:c1:6e:5b:a8:87:67:98:3e:bd:48:fc:d2:dd:64:b5:
         15:50:43:a8:3a:97:29:93:49:fe:ad:b1:61:8e:6b:78:c9:5e:
         20:82:fa:4d:ac:b7:6f:a1:f2:dc:34:76:d9:6a:eb:60:18:31:
         4f:62:80:c9:b8:2f:8d:50:69:cc:4e:0d:8c:f9:36:ec:ba:b6:
         0e:9d:57:37:97:d1:bb:bb:03:7a:a4:f6:7d:a5:92:d8:ab:4d:
         f5:9c:8a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 12:53:15 2026 by rpki-client