Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1f276fb5-17fb-394f-8d56-91d811203f0f.roa
File:                     1f276fb5-17fb-394f-8d56-91d811203f0f.roa (raw, json)
Hash identifier:          XsatWLZKwxE+RIF+GAIXbBaen0a6y8thTiijJinXfhQ=
Subject key identifier:   1E:BD:51:B5:5D:BF:4C:33:C8:1A:57:B2:9B:77:BF:DA:62:43:11:32
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E81ECB7F5857776B6486348C0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1f276fb5-17fb-394f-8d56-91d811203f0f.roa
Signing time:             Wed 15 Jul 2026 13:44:45 +0000
ROA not before:           Wed 15 Jul 2026 13:44:45 +0000
ROA not after:            Tue 13 Oct 2026 13:44:45 +0000
asID:                     274963
IP address blocks:        38.58.110.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:81:ec:b7:f5:85:77:76:b6:48:63:48:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jul 15 13:44:45 2026 GMT
            Not After : Oct 13 13:44:45 2026 GMT
        Subject: CN=f6146e7f-8e75-4e36-9d5b-4a2f9c4a8e6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:35:df:10:1f:54:6f:95:77:fe:e6:ad:9f:f3:
                    7b:03:34:8d:b3:0d:cf:dd:5c:f8:60:11:84:75:96:
                    17:13:a5:10:1c:67:9a:70:d4:f5:d1:1d:aa:5b:ea:
                    09:d0:88:03:1a:50:86:e8:60:dc:16:47:d4:be:24:
                    b8:36:81:7b:49:dd:aa:af:fe:68:4e:bd:fa:37:99:
                    65:f5:9d:89:43:eb:3a:43:e2:5b:84:f5:c6:af:5d:
                    0a:c8:c1:32:57:60:26:fc:a5:f3:56:ea:f2:43:00:
                    13:16:c8:05:d6:7e:b3:80:0b:1b:bc:96:fc:23:4b:
                    35:21:74:a2:37:7b:d1:cf:cb:da:45:79:14:79:b0:
                    95:65:d7:15:49:0d:95:1b:7c:3a:9d:0c:68:72:f0:
                    03:30:be:9f:e7:0a:82:a3:c8:a3:dd:de:6a:11:56:
                    eb:25:90:a3:8e:df:bc:37:04:35:c1:33:d0:61:13:
                    c4:cb:11:c1:cc:12:c9:5e:dd:81:5d:fc:f3:e8:3f:
                    30:3a:8d:77:48:ab:3b:cf:79:69:e5:d5:aa:07:40:
                    c1:4d:b0:3e:c8:a4:fa:12:2f:12:d4:15:96:ab:fa:
                    18:4e:3a:67:7b:0f:16:f0:8b:50:5c:67:9d:ae:0b:
                    ec:89:42:26:94:d8:1e:45:91:8f:7e:6c:8d:12:cc:
                    70:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:BD:51:B5:5D:BF:4C:33:C8:1A:57:B2:9B:77:BF:DA:62:43:11:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1f276fb5-17fb-394f-8d56-91d811203f0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.58.110.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:42:e5:29:b4:e1:93:b8:3f:e0:12:ed:86:9a:ea:61:1c:9a:
         44:68:4f:96:ca:57:37:53:85:39:5d:83:9c:5e:3a:ce:c4:b5:
         da:45:92:a6:02:9c:66:e6:44:92:6f:18:52:cb:90:c6:12:b0:
         1e:c9:77:a6:37:9a:e6:33:30:0e:55:cb:b3:f5:f2:cd:a8:33:
         7a:68:b1:d2:c2:66:ec:95:7d:2d:13:aa:8c:58:9e:41:b4:5b:
         cf:03:0b:a2:f7:8a:12:f8:ce:df:7b:dd:0d:f7:8c:b9:45:87:
         33:89:30:4a:89:fe:10:07:87:64:53:0e:54:eb:4c:9f:be:35:
         13:09:27:78:c3:d3:66:09:ae:49:2d:63:cd:6f:0c:77:b7:ac:
         9b:0b:47:06:7a:06:3d:14:e1:21:98:b8:44:ef:a1:46:07:b5:
         e6:4a:76:1a:58:21:96:e7:d8:d5:a1:a6:42:58:02:3a:f2:30:
         99:ca:38:3d:9b:e6:ec:6b:02:a6:3c:d6:71:eb:35:97:4e:ec:
         2c:de:97:51:f8:a2:aa:b5:19:00:ac:ec:81:db:c2:51:01:2b:
         bb:e3:41:de:10:84:a0:5f:be:d4:af:58:9f:f2:cd:15:32:22:
         69:f2:3f:4d:dd:10:f8:00:a8:4d:8d:ad:a1:fb:74:72:5d:ad:
         d3:09:1a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:19:42 2026 by rpki-client