Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/146604be-880c-37ee-a349-7f94f48d3400.roa
File:                     146604be-880c-37ee-a349-7f94f48d3400.roa (raw, json)
Hash identifier:          WojYjOkQzaQat+0pUbH4vuIwxTZSNk4RJF8TrNOIkFs=
Subject key identifier:   BA:76:20:A1:5C:79:5C:FA:0C:85:EC:42:4A:3C:11:01:7D:53:05:A8
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D4C774787865EC7F6323AA900
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/146604be-880c-37ee-a349-7f94f48d3400.roa
Signing time:             Thu 26 Mar 2026 17:09:45 +0000
ROA not before:           Thu 26 Mar 2026 17:09:45 +0000
ROA not after:            Wed 24 Jun 2026 17:09:45 +0000
asID:                     271951
IP address blocks:        38.196.64.0/19 maxlen: 24
                          38.252.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4c:77:47:87:86:5e:c7:f6:32:3a:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Mar 26 17:09:45 2026 GMT
            Not After : Jun 24 17:09:45 2026 GMT
        Subject: CN=7f605a01-cb2e-4516-af96-4f1472142195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c7:1b:69:4b:12:aa:69:55:65:ba:fd:9c:08:
                    e9:b9:95:6c:ab:08:30:68:96:6d:58:fc:c9:ff:aa:
                    45:c3:51:60:0a:95:50:9b:1a:9d:91:8a:c4:80:b4:
                    f1:66:ab:27:c6:9e:ee:ca:b9:09:ca:8a:a3:8f:a7:
                    05:24:7c:99:99:ea:fb:f2:17:3c:23:78:00:4a:f5:
                    88:83:cd:6e:32:16:9a:af:e2:5c:08:7c:79:60:d5:
                    14:25:2b:34:73:09:10:bb:e1:3e:ad:1e:f3:ef:a0:
                    83:4e:d8:32:9a:64:ff:65:6d:08:fa:d4:fc:8f:59:
                    51:d0:e9:b5:db:4f:ec:79:c6:10:90:10:5b:a7:52:
                    12:3e:ea:4e:d2:ec:79:0e:5d:3b:9d:1a:e8:f6:31:
                    b9:58:e6:97:51:63:a0:11:72:4e:20:2b:d2:e4:1b:
                    08:f4:69:7c:86:7a:3e:55:1e:6b:8c:ce:06:74:7f:
                    ac:a5:bd:2a:87:c6:da:11:6e:2e:69:02:74:01:ae:
                    76:88:1b:9b:45:c7:9a:a2:bd:8f:5a:ce:b5:67:00:
                    2f:6b:75:85:19:24:6b:0a:7e:2e:e5:c0:7b:bd:a8:
                    50:05:94:54:bb:7d:c4:5c:dd:a3:27:a2:d6:5d:29:
                    e0:99:b5:20:26:15:63:a7:1f:7f:8d:24:4d:7d:45:
                    46:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:76:20:A1:5C:79:5C:FA:0C:85:EC:42:4A:3C:11:01:7D:53:05:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/146604be-880c-37ee-a349-7f94f48d3400.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.196.64.0/19
                  38.252.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:52:28:ca:30:37:9d:a1:b1:2e:b4:22:7b:63:0f:17:b6:df:
         ef:2e:9e:63:00:21:e5:76:63:07:5f:ab:51:99:13:2f:41:f7:
         d6:01:74:ff:45:88:06:2c:8b:ed:0c:64:55:22:e2:db:21:43:
         5c:53:90:14:00:37:ac:93:2e:75:63:75:cb:e8:3e:3f:74:0f:
         81:84:fb:2b:45:dc:a1:6a:4c:32:76:05:2e:0a:7f:6c:0d:15:
         8d:6a:51:5e:ae:2e:86:13:93:63:90:6e:a8:ea:73:1d:47:47:
         0c:8a:ef:02:9f:fb:97:9f:ce:9d:1b:94:11:9c:03:73:17:b7:
         16:fe:28:39:2e:61:94:51:31:42:c2:d2:cf:60:c1:8d:72:6d:
         87:0b:cd:df:bf:c7:38:d6:98:a1:e7:ba:62:18:b6:a5:54:02:
         2f:7c:39:2d:02:ef:73:74:e1:c3:ca:68:b3:7a:93:af:4f:da:
         5e:45:d4:7d:c1:07:b0:11:85:c9:13:0e:9e:bd:15:03:9a:78:
         5f:6a:6d:20:2b:44:b7:be:1a:a2:9d:64:cd:61:c4:7d:3e:e6:
         6f:fa:78:e9:1b:b9:d9:f1:31:ba:30:76:8c:39:c3:85:25:b9:
         b1:3f:c1:28:a5:65:c6:f6:d0:5f:f3:2e:d6:15:8e:39:7e:a6:
         36:36:1e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:57:00 2026 by rpki-client