Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1e994611-4b62-3402-9347-784f008a09ba.roa
File:                     1e994611-4b62-3402-9347-784f008a09ba.roa (raw, json)
Hash identifier:          hOC2p3x6EwDI6U8UruPhERRODG0vO5EJiQjO82wiYDg=
Subject key identifier:   E9:12:47:02:4B:53:99:69:7B:AC:D3:8F:E7:39:AD:C8:B2:04:24:00
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D35AF02B75F71F86C25700680
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1e994611-4b62-3402-9347-784f008a09ba.roa
Signing time:             Wed 18 Mar 2026 13:32:03 +0000
ROA not before:           Wed 18 Mar 2026 13:32:03 +0000
ROA not after:            Tue 16 Jun 2026 13:32:03 +0000
asID:                     141994
IP address blocks:        38.225.214.0/24 maxlen: 24
                          38.225.216.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:35:af:02:b7:5f:71:f8:6c:25:70:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Mar 18 13:32:03 2026 GMT
            Not After : Jun 16 13:32:03 2026 GMT
        Subject: CN=f45d2f28-39ad-4c36-abe7-c210575a406f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:06:25:e7:33:c1:95:88:89:8d:dd:2e:28:72:
                    f6:c1:4e:0c:d0:32:3d:8e:76:d7:e9:9e:7d:94:c9:
                    82:98:cd:52:2c:e3:f8:41:4a:9f:15:91:b2:c1:58:
                    76:56:61:93:16:4f:cc:3f:d9:64:f9:c8:ee:00:a8:
                    90:d6:ba:d8:5b:ba:69:02:3e:e6:9b:ea:eb:ff:c8:
                    1e:e7:da:92:e9:e6:d8:09:e6:e7:56:80:8c:a2:1a:
                    52:bd:b7:7f:d4:98:6e:0c:93:c6:85:1e:05:50:24:
                    47:27:05:62:de:92:75:b4:c3:37:0d:d5:3e:bd:b1:
                    07:5c:b5:4c:53:24:54:b6:e0:99:91:e5:98:42:47:
                    ce:de:16:62:d2:eb:2f:ec:f6:54:ab:b1:e0:aa:46:
                    17:4a:73:1f:a7:f5:3c:98:df:5b:7b:d2:02:66:91:
                    4f:12:b3:7f:9e:b0:65:dc:43:9b:75:f5:2b:8e:af:
                    94:65:f4:9d:c9:4f:de:10:af:dc:14:8a:f6:76:0c:
                    c8:5b:ec:3a:bf:f3:44:cb:9a:8f:aa:5c:c4:6e:45:
                    d2:bc:73:b6:87:6d:a8:e7:14:82:72:f9:ae:84:59:
                    41:5d:ae:3d:a8:85:52:26:05:b5:78:55:44:80:7a:
                    8e:b2:fd:7a:09:df:2a:8b:91:26:b4:9d:7d:02:23:
                    40:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:12:47:02:4B:53:99:69:7B:AC:D3:8F:E7:39:AD:C8:B2:04:24:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1e994611-4b62-3402-9347-784f008a09ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.225.214.0/24
                  38.225.216.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:c9:a7:9b:dd:ac:65:db:bf:0c:0e:ae:88:11:c9:8f:7b:04:
         6d:5e:37:62:69:36:78:f7:71:1f:fa:b3:5e:e6:69:eb:d7:16:
         56:ca:36:8c:3d:ec:c4:7d:f0:29:66:96:56:60:fb:a6:1c:33:
         76:f4:52:06:bd:85:61:5a:70:06:00:f5:e8:75:50:cb:13:a5:
         70:93:5b:b2:dd:16:a6:a8:a2:c7:3d:b4:33:83:ec:2f:f0:86:
         ff:9b:db:8b:fc:55:cc:5c:4a:f9:cb:57:af:26:26:d1:0d:da:
         b1:55:f7:fe:97:b2:4e:ba:36:fd:83:ab:dd:2f:0c:8a:c7:02:
         36:f2:03:d4:6a:fd:90:fb:69:34:44:3b:74:b1:ab:80:33:b4:
         3e:d7:71:27:b8:39:80:7e:f5:f0:5f:15:68:73:87:a2:d5:db:
         c0:e7:e8:b7:4d:20:b5:9e:1f:c7:e9:d9:00:11:3c:0e:07:07:
         1b:53:be:3c:6c:ba:75:4b:ef:41:12:76:61:03:d7:08:d1:c4:
         41:84:36:53:63:a2:ac:07:f9:ac:89:5b:db:cf:b9:ca:36:d1:
         c5:bb:cf:fc:70:f0:93:5b:1a:97:04:13:ae:8a:1d:68:35:98:
         08:2a:66:fc:81:20:9d:25:d0:0e:28:b8:14:0b:5c:5d:03:80:
         ea:3d:ec:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:47:42 2026 by rpki-client