Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/00a58e9c-bea4-356d-a32b-0d34181e9289.roa
File:                     00a58e9c-bea4-356d-a32b-0d34181e9289.roa (raw, json)
Hash identifier:          jv5+d5jqIZHlfjCGrkcrFDxR2v0eFdpBh8JC9ok2Gg4=
Subject key identifier:   82:82:75:E8:BF:86:A3:D4:FB:16:8C:3F:FD:12:64:E0:47:94:E6:79
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E74CF81DE73A722C6C2B01B00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/00a58e9c-bea4-356d-a32b-0d34181e9289.roa
Signing time:             Fri 10 Jul 2026 21:00:12 +0000
ROA not before:           Fri 10 Jul 2026 21:00:12 +0000
ROA not after:            Thu 08 Oct 2026 21:00:12 +0000
asID:                     0
IP address blocks:        38.3.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:74:cf:81:de:73:a7:22:c6:c2:b0:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jul 10 21:00:12 2026 GMT
            Not After : Oct  8 21:00:12 2026 GMT
        Subject: CN=81eb9926-1e6d-4048-b490-b46b5ca1a015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ef:5c:5b:13:f8:5c:c5:6d:8d:34:2a:63:0d:
                    13:76:03:a4:9f:6d:01:4b:36:f2:47:61:ac:31:ad:
                    8f:e2:f2:e9:2b:ce:77:07:3d:87:8d:a1:b8:a3:80:
                    21:4e:3e:1b:58:c1:2f:85:ee:81:0a:db:2a:a4:26:
                    a2:8c:a7:77:1c:5a:d6:36:cb:6a:6f:f0:b6:82:1f:
                    0e:e3:b0:b3:3b:fa:f6:90:1a:04:ed:f6:b1:44:60:
                    6a:94:c6:1f:8c:97:3c:b5:51:0e:4b:58:d4:c7:48:
                    49:fd:82:d8:48:27:e2:13:0c:08:e9:59:64:b0:af:
                    8e:4d:3c:e3:92:f2:16:47:42:35:ec:89:d0:50:d1:
                    33:92:81:76:e0:9d:59:ff:7c:9f:92:c9:e3:ba:d9:
                    92:b4:95:89:84:ba:02:06:58:f0:2b:f0:d0:2c:93:
                    75:ef:3a:74:4c:c8:4c:5c:ec:79:ad:cd:44:ae:60:
                    ca:d8:65:24:bd:da:c1:38:80:d3:e4:0a:60:3f:f2:
                    12:89:a4:44:96:71:5d:d6:12:f8:b6:1b:ed:8b:b9:
                    52:a1:f5:5c:d7:85:d9:83:a0:27:68:76:49:a2:21:
                    8f:57:42:8f:3e:1f:24:06:fe:6b:e4:ce:de:ee:a7:
                    fd:0d:97:fb:22:e7:06:2d:a3:4c:21:0d:d0:6d:a7:
                    d7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:82:75:E8:BF:86:A3:D4:FB:16:8C:3F:FD:12:64:E0:47:94:E6:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/00a58e9c-bea4-356d-a32b-0d34181e9289.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.3.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:da:fb:11:27:e0:24:04:00:a6:b9:29:07:5b:88:6f:0e:67:
         ab:7e:01:ae:60:54:19:2e:a9:9f:6d:9b:4c:ed:28:e2:a5:05:
         e4:5e:e6:1e:35:be:95:00:e9:eb:c5:29:61:f3:eb:a3:c3:d3:
         4f:2b:1d:8d:f1:a5:10:fd:4d:6e:12:19:7b:74:bb:cd:aa:2c:
         23:33:b2:03:9e:60:fc:e3:bf:2b:88:04:4c:25:0c:1a:b9:b8:
         3a:0e:d0:24:b4:21:bf:10:7d:ba:90:92:c5:e4:6f:7b:97:6d:
         ce:c3:6c:81:fe:a1:90:cb:cd:b2:b1:bb:85:77:4f:21:ca:79:
         d7:9c:4e:75:77:27:82:a1:1a:49:2d:27:79:bd:03:b6:28:a6:
         38:34:ea:48:41:eb:83:b2:f9:ae:d9:c2:55:f9:37:46:48:ed:
         86:e4:8e:c7:9c:2a:a5:c8:bc:05:83:41:b3:87:f6:0d:bf:cf:
         32:9c:29:93:e5:2f:59:d5:b4:18:c7:2c:f8:f6:54:1a:34:00:
         3d:2c:e5:25:f0:f7:73:43:93:ca:4c:18:43:64:3c:2e:6e:f3:
         c4:11:47:21:e5:5c:a3:71:ce:bc:11:47:65:96:d4:c4:c5:29:
         19:4f:a3:3e:55:20:22:ea:db:2a:7b:3e:22:b0:5d:25:59:1d:
         42:33:f3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:44:08 2026 by rpki-client