Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/38e1a956-d5b9-36fb-a6f7-458e18c2a641.roa
File:                     38e1a956-d5b9-36fb-a6f7-458e18c2a641.roa (raw, json)
Hash identifier:          IeuetAZzvk3ihdg9/AEFOxn1HVjHJHK6Po45IZQoIJ8=
Subject key identifier:   DC:DD:7F:DB:4B:49:1E:62:D0:4C:33:D4:DC:01:DD:06:77:18:22:EF
Certificate issuer:       /CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
Certificate serial:       010D0C9F4328584D67DFC518703D541498E6ECA0
Authority key identifier: C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/38e1a956-d5b9-36fb-a6f7-458e18c2a641.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     18914
IP address blocks:        107.161.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:c5:18:70:3d:54:14:98:e6:ec:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=94e2d7d4-f6af-415f-bcda-3b4f7f2e33e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:37:bc:15:cc:43:a1:5c:de:86:ed:d0:ef:0a:
                    ee:52:f2:b6:f6:9e:68:3c:ef:81:26:63:a9:d8:80:
                    90:2b:9b:9c:d6:a1:07:dc:ad:6b:49:d7:87:d7:05:
                    a9:2d:b3:91:19:22:59:1f:99:ef:a6:3d:31:5e:eb:
                    5f:67:dd:da:b7:61:f1:00:5e:85:ab:95:f3:48:6f:
                    0f:69:8b:50:a1:7d:d4:54:14:46:67:67:30:ba:bc:
                    f0:7a:0f:17:a6:ab:78:3a:9d:5f:77:c0:a4:ed:61:
                    2e:6e:c1:02:8d:88:d8:b4:33:ae:ba:d5:cd:b8:ba:
                    f4:df:26:3f:22:f1:c0:5f:eb:a1:b3:1a:1c:54:df:
                    23:d4:cd:65:5c:31:24:07:89:7f:13:a5:07:30:f5:
                    e4:b9:c2:dd:26:25:8e:13:6f:d1:4a:82:b5:9f:59:
                    3f:a2:47:45:32:f3:8d:b8:82:cc:fa:de:7b:0d:1f:
                    5a:89:71:7c:1e:1d:07:bf:92:6d:7f:ad:7d:0d:d0:
                    ff:25:d6:2e:33:e1:af:7a:05:e2:dc:12:56:c3:64:
                    12:0f:60:a8:54:62:bd:0a:d9:d1:65:21:cb:2c:15:
                    c1:9f:86:98:2b:42:3c:f1:18:d3:ca:d6:33:78:57:
                    f4:9c:9c:06:56:48:38:fc:fd:72:86:da:41:98:79:
                    54:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:DD:7F:DB:4B:49:1E:62:D0:4C:33:D4:DC:01:DD:06:77:18:22:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/38e1a956-d5b9-36fb-a6f7-458e18c2a641.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl

            X509v3 Authority Key Identifier:
                keyid:C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.161.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:78:88:e6:4e:cc:53:d0:fc:51:8c:8d:18:fc:6e:6a:7e:aa:
         13:5b:49:d1:56:1a:16:46:74:7e:d3:6a:c4:58:ff:27:8b:53:
         e3:92:aa:ac:fd:c7:46:69:82:6b:28:4b:5d:c8:2e:bd:38:a6:
         92:1b:b4:1c:45:96:51:9d:f0:6c:89:d3:05:07:be:9c:5b:70:
         d3:a6:aa:bb:90:eb:aa:e7:89:5f:4a:d3:e7:78:54:b8:f1:88:
         16:55:cc:a1:9b:b4:e8:91:45:36:f6:f2:96:fe:51:8d:42:e4:
         1b:71:38:31:00:78:99:1c:9b:74:1b:cb:30:56:f2:ea:80:ad:
         a7:f0:5c:74:94:08:9c:4b:39:68:37:78:fe:67:65:1c:51:bc:
         2d:49:c4:df:e9:76:bf:6b:01:06:9f:23:4b:ce:59:4a:61:b4:
         86:9b:27:b8:51:2b:b3:ed:a7:5b:91:41:95:e3:54:f8:fb:42:
         d5:b9:eb:15:df:46:a4:cf:c4:54:b2:1d:0b:e0:28:95:2f:d3:
         15:c9:f5:33:62:78:ca:7a:5d:2a:f0:01:d1:65:b2:36:11:52:
         a9:89:d7:17:fd:8f:d4:1f:fe:14:98:16:1e:6a:41:ca:74:de:
         6c:79:ae:e2:ce:4e:f7:7a:de:0e:29:7c:10:e2:17:44:e4:29:
         97:f5:ab:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:21:05 2026 by rpki-client