Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0a424faa-f264-3c04-922d-fd422d38d88c.roa
File:                     0a424faa-f264-3c04-922d-fd422d38d88c.roa (raw, json)
Hash identifier:          jC0IxSu3aq6ykGuyRqnb9NDlGzh3hRaD5WbvqOwz+Bs=
Subject key identifier:   4C:69:9A:35:A6:08:0D:1F:6C:E4:69:42:5F:AB:AF:A7:C5:B5:DA:35
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D316F5ACBA5AB45C0505A2F80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0a424faa-f264-3c04-922d-fd422d38d88c.roa
Signing time:             Tue 17 Mar 2026 01:00:32 +0000
ROA not before:           Tue 17 Mar 2026 01:00:32 +0000
ROA not after:            Mon 15 Jun 2026 01:00:32 +0000
asID:                     212238
IP address blocks:        38.75.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:31:6f:5a:cb:a5:ab:45:c0:50:5a:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Mar 17 01:00:32 2026 GMT
            Not After : Jun 15 01:00:32 2026 GMT
        Subject: CN=00607ac1-9eaa-4851-8cc6-9202be65b42d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:92:a2:33:40:69:77:45:6b:66:e3:3a:36:8d:
                    91:7e:db:b5:4b:e2:01:b2:ff:f7:d4:bc:4b:d7:1e:
                    2d:4e:ed:c1:d5:6f:86:e8:c4:51:64:e7:bc:53:ec:
                    da:04:22:bf:56:d8:ca:44:cb:ce:f1:01:88:e4:92:
                    49:2b:9d:d8:de:99:5c:f4:78:52:32:89:78:1f:bb:
                    70:c8:1e:61:4f:5e:6a:99:87:42:e6:70:1a:f0:dd:
                    93:09:55:60:da:60:7c:63:2b:cd:2e:67:70:0b:1c:
                    92:fc:90:0f:8f:71:73:39:ba:41:e9:88:20:c7:8c:
                    01:d0:04:93:4f:24:59:fb:46:78:bb:e4:83:fc:51:
                    8a:01:f6:2a:98:bc:e1:3a:a3:09:cd:03:57:a8:a8:
                    9d:10:18:cf:90:99:55:01:d5:50:c0:ed:fe:b9:ce:
                    f9:88:38:4a:e7:91:ed:79:e2:98:12:41:81:e1:0a:
                    0f:49:e7:8d:8e:d8:c5:4e:f2:49:25:3b:55:2f:2b:
                    2b:24:02:bf:92:fc:00:67:61:cf:8a:cd:70:ea:6a:
                    7e:79:0b:45:ae:38:c6:21:3a:fd:30:09:6c:98:ee:
                    1a:95:ea:69:28:32:0b:d8:13:76:c3:0d:b0:97:db:
                    ca:e2:69:e8:44:fc:95:27:96:32:59:94:80:ca:a2:
                    6f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:69:9A:35:A6:08:0D:1F:6C:E4:69:42:5F:AB:AF:A7:C5:B5:DA:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0a424faa-f264-3c04-922d-fd422d38d88c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.75.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:48:79:8b:ce:64:db:da:f4:1e:65:eb:57:f9:85:e9:aa:62:
         bb:bd:b4:84:43:d3:98:98:d6:fc:de:b8:8e:e1:10:10:55:12:
         11:54:c8:b5:95:31:4c:55:da:85:c3:c1:59:db:36:a5:c4:6c:
         4d:28:ff:cb:d4:9c:7b:a3:f7:5a:15:5e:31:37:38:c2:ab:80:
         43:01:58:66:51:bf:d9:c9:3f:b3:55:e4:ef:43:d5:87:58:0e:
         4c:8a:7d:46:e4:4c:2a:0d:7b:52:4e:53:b6:47:65:ca:b6:69:
         52:55:41:ce:46:18:a3:9b:c4:55:bb:cb:db:98:b7:5c:d0:9d:
         04:be:d0:cf:e9:0f:0f:a3:73:8f:c1:19:d3:3f:c3:1f:79:df:
         a1:cf:2a:e1:b7:1d:3b:63:71:d5:cf:11:01:ce:95:df:c6:15:
         4c:d3:5f:9f:22:f3:72:33:43:a2:d4:2c:46:3b:ab:70:ce:1e:
         92:b4:a4:25:e6:f9:26:72:3d:e6:0b:6e:c2:c6:ec:ce:29:5a:
         47:d0:bd:58:48:bb:50:69:09:49:97:37:ef:9a:c4:c3:27:c5:
         e7:b7:17:9a:67:f9:1e:69:36:d0:a9:20:6c:e5:b9:d9:4e:11:
         31:4b:ff:23:1c:25:87:bc:7b:58:2a:b4:ae:10:c3:83:b7:d8:
         53:38:65:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:08 2026 by rpki-client