Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/224e3101-4d56-3129-8450-e15d7b5ca44a.roa
File:                     224e3101-4d56-3129-8450-e15d7b5ca44a.roa (raw, json)
Hash identifier:          MBAIH9Cq8LNkOoTflkzkN9ZX9eDiCX4Uq14ddLv87aM=
Subject key identifier:   32:2F:8D:BA:8E:EC:43:C4:7F:6F:A8:CE:BF:8F:60:86:C8:B9:B4:32
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E376487515DD8A9F5262E1B00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/224e3101-4d56-3129-8450-e15d7b5ca44a.roa
Signing time:             Thu 18 Jun 2026 21:00:12 +0000
ROA not before:           Thu 18 Jun 2026 21:00:12 +0000
ROA not after:            Wed 16 Sep 2026 21:00:12 +0000
asID:                     270128
IP address blocks:        38.224.164.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:37:64:87:51:5d:d8:a9:f5:26:2e:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jun 18 21:00:12 2026 GMT
            Not After : Sep 16 21:00:12 2026 GMT
        Subject: CN=16db2f43-c1c2-49b7-b8bb-ddad420e27ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:38:25:e2:a4:4f:fe:f6:82:19:ae:37:60:b9:
                    fc:48:30:07:56:ba:17:b2:d3:82:b8:5d:96:65:49:
                    f5:62:81:05:4e:07:92:08:79:99:44:5d:d7:87:ab:
                    85:a5:d8:dd:9d:e8:ce:a2:bf:ff:2e:c9:77:cc:91:
                    42:af:1a:c8:83:6d:b5:a0:f0:e6:ae:fb:e1:5b:0b:
                    76:66:da:59:f6:e2:f0:07:ec:ed:22:10:fa:1e:7b:
                    a3:e6:f0:10:07:c4:2d:d3:cb:ec:13:b3:f9:d7:7f:
                    8c:4b:5a:b6:84:07:40:7b:25:e4:b7:46:bb:71:4a:
                    62:95:58:ca:09:01:d9:5c:dd:0b:27:06:16:3f:c3:
                    f7:ac:df:b5:45:a8:5a:c4:86:bc:a7:80:38:fb:57:
                    a8:da:0a:f9:7d:0a:cc:22:4e:4d:a4:a2:80:9f:fb:
                    00:65:79:0f:15:57:76:bb:2e:67:d4:53:e3:ce:ef:
                    ca:a5:11:87:98:53:0e:ac:6d:00:a1:30:01:87:37:
                    88:5b:40:57:1a:90:d7:90:dd:47:5d:fd:9b:d2:bc:
                    ac:dc:f5:05:e5:1b:14:d1:34:d3:0d:b2:a1:95:c2:
                    6a:f3:06:09:0a:68:18:4d:e1:64:65:bc:fb:37:56:
                    6f:68:47:ac:b6:c3:5e:88:4b:60:7c:6e:3d:22:35:
                    c6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:2F:8D:BA:8E:EC:43:C4:7F:6F:A8:CE:BF:8F:60:86:C8:B9:B4:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/224e3101-4d56-3129-8450-e15d7b5ca44a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.224.164.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:62:fd:44:10:88:6f:19:14:74:e3:2f:09:a0:70:d6:b4:ff:
         c5:db:4b:db:b8:dd:79:5f:f3:c0:88:67:85:ac:5a:37:0a:67:
         3b:80:91:d4:68:66:38:48:58:5e:4a:e8:b5:1c:bd:97:a8:00:
         93:ed:6b:94:34:cd:49:2a:d4:af:3d:88:7e:0d:74:de:df:11:
         e8:7f:de:9d:6d:77:77:c8:c8:13:88:8a:d9:34:99:fc:26:fb:
         ab:ec:6d:20:ea:16:14:bb:10:ea:7b:45:6d:f0:74:2d:33:17:
         67:c0:b0:3f:4a:64:c0:86:15:d7:f2:b6:8c:64:b4:66:b9:77:
         9e:90:02:ab:6d:70:b0:8f:7b:ea:0a:ab:a7:b0:7f:66:7b:a0:
         f6:80:99:56:d3:c2:62:4f:ff:dd:7b:ac:4d:e3:6d:22:ee:48:
         71:2b:62:c9:7f:67:e5:39:40:c5:80:62:5d:23:00:29:b9:0e:
         ed:a8:3a:10:ca:13:40:6d:f3:eb:3d:44:c1:78:df:09:f5:98:
         5a:71:39:a4:f2:db:c7:ca:8b:f4:47:79:f3:e7:95:16:80:a4:
         94:ef:04:13:8b:9d:0f:d5:4d:ae:4c:76:57:0b:ff:97:d1:30:
         81:5a:ed:74:da:3d:1d:d5:57:e7:27:88:5a:15:b3:40:c9:0b:
         0b:07:84:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:06:54 2026 by rpki-client