Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/24d942f1-0e02-3332-958b-dd268f81628a.roa
File:                     24d942f1-0e02-3332-958b-dd268f81628a.roa (raw, json)
Hash identifier:          WWwfVkXHeSMVQnifUV6931ZgccfJASrjDJi0mjmm2jc=
Subject key identifier:   66:03:E9:99:7D:7F:7C:C0:3F:D7:97:BF:44:B9:07:5E:1F:D5:96:0C
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E779A3019AAC7C9C6DDC13950
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/24d942f1-0e02-3332-958b-dd268f81628a.roa
Signing time:             Sat 11 Jul 2026 21:00:11 +0000
ROA not before:           Sat 11 Jul 2026 21:00:11 +0000
ROA not after:            Fri 09 Oct 2026 21:00:11 +0000
asID:                     17397
IP address blocks:        38.74.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:77:9a:30:19:aa:c7:c9:c6:dd:c1:39:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jul 11 21:00:11 2026 GMT
            Not After : Oct  9 21:00:11 2026 GMT
        Subject: CN=9261ee58-46dd-40dd-a87b-a22349cbd7e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:74:e5:6d:82:78:fc:e7:b3:c3:49:86:bb:d9:
                    1f:72:bf:24:2a:d5:3d:76:0a:83:f4:fd:4e:0f:3d:
                    74:f7:8f:68:cd:39:ee:1b:a5:0b:86:d1:7c:e4:40:
                    2c:bd:29:37:8d:f8:09:11:d2:13:5f:b9:aa:34:68:
                    9c:b8:39:06:06:c4:2c:ad:dc:78:a9:96:a3:06:ed:
                    8d:93:ac:08:70:88:e9:35:b5:6e:f0:75:82:a1:41:
                    1e:a4:28:6c:62:e2:39:f1:26:83:bf:1c:26:e8:76:
                    4b:96:c2:89:fa:3c:e9:63:74:6b:ca:d6:f9:9e:8f:
                    2e:af:01:e1:2e:31:54:23:cb:73:2d:09:92:f4:ff:
                    10:c0:27:32:d6:3a:3a:2c:19:df:20:c9:a5:32:14:
                    e3:bd:8c:5c:10:7a:19:fd:ba:51:51:bf:61:f3:ef:
                    d0:4d:e5:98:d9:e3:cb:0d:e7:48:72:8a:8f:08:04:
                    dc:71:48:0e:59:c3:b8:f0:ac:b9:66:c9:f8:83:62:
                    2c:b2:92:c3:4a:c3:b2:2d:41:aa:90:b1:49:7b:2d:
                    71:e8:ff:90:1b:6a:65:d6:c3:ad:00:e4:05:72:00:
                    d8:25:81:01:5b:7f:ef:e4:78:3e:d6:9e:35:67:ba:
                    ee:44:a5:13:10:24:5c:0d:88:94:6d:f9:87:bf:36:
                    43:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:03:E9:99:7D:7F:7C:C0:3F:D7:97:BF:44:B9:07:5E:1F:D5:96:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/24d942f1-0e02-3332-958b-dd268f81628a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.74.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:c7:2a:d8:8b:da:3e:c0:81:46:cc:f1:ff:d2:a5:fd:48:79:
         9a:71:8a:69:12:43:5d:5e:86:6f:3d:66:0b:6c:c6:1f:6b:b3:
         66:a1:9e:3a:b6:f6:19:4a:d4:06:fb:23:08:aa:a9:68:99:83:
         35:14:4c:f8:8d:68:29:1f:49:62:bf:ed:8f:ab:e8:8d:22:25:
         41:39:c7:a5:b7:41:2f:da:b9:90:f0:90:0b:3b:4c:a4:37:a2:
         2d:ad:fc:db:ff:98:4a:be:77:32:08:9f:70:b8:ac:72:04:ba:
         62:92:e0:c9:a0:a1:95:73:3a:82:4f:74:95:b1:38:ab:c7:c8:
         1f:65:a8:c6:aa:5a:d3:57:a7:95:38:be:9c:92:a4:07:e0:5d:
         20:6c:64:2f:99:4e:48:ec:d2:cd:93:28:5d:ca:14:c0:48:3a:
         dc:0c:c3:33:08:c0:72:3a:24:17:fb:45:df:d3:fa:ab:2e:9b:
         15:24:45:ca:f0:ce:ea:5d:35:f4:8e:d8:00:d6:71:1a:9f:81:
         b8:70:ba:92:73:74:f1:7d:69:0a:a9:42:4c:91:02:01:da:e8:
         b7:f6:63:4d:94:aa:39:d4:c1:11:76:08:66:ea:f5:f1:1d:b7:
         6a:8c:e7:c7:36:1f:bf:73:ab:83:cd:db:c3:61:7d:e5:13:2a:
         74:81:74:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:57:30 2026 by rpki-client