Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/306d6967-d97c-3160-aba7-a2f94bbe4583.roa
File:                     306d6967-d97c-3160-aba7-a2f94bbe4583.roa (raw, json)
Hash identifier:          O2DgBH2MU66juIMYO556Nq9kuUnJzCUk2FT55rkvHUo=
Subject key identifier:   45:BF:EB:02:5A:8F:70:E1:FC:4F:98:C4:FD:1D:88:49:B9:5D:8A:43
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584DAF102C6685942C3A0900B800
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/306d6967-d97c-3160-aba7-a2f94bbe4583.roa
Signing time:             Fri 01 May 2026 01:00:24 +0000
ROA not before:           Fri 01 May 2026 01:00:24 +0000
ROA not after:            Thu 30 Jul 2026 01:00:24 +0000
asID:                     273270
IP address blocks:        38.58.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:af:10:2c:66:85:94:2c:3a:09:00:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: May  1 01:00:24 2026 GMT
            Not After : Jul 30 01:00:24 2026 GMT
        Subject: CN=a970b898-8ba0-44e1-b2d2-f510e609b0d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:db:62:99:25:b7:ca:e5:c7:2e:a9:53:3b:3d:
                    fb:f8:ea:c5:b1:98:f5:44:b0:1f:18:55:be:a1:ba:
                    8b:3d:42:a7:08:c5:d9:3e:7c:98:da:44:c0:17:7d:
                    9f:17:26:54:16:08:a4:8a:b4:e2:b5:07:9d:5a:0e:
                    09:e7:5f:92:2d:9a:67:29:cb:dd:17:1a:65:e3:c4:
                    b1:cd:17:ff:62:7b:18:83:32:6e:89:1c:6e:21:c9:
                    8d:55:1c:fc:1e:d3:a6:81:a4:0d:22:9c:4c:88:42:
                    20:61:95:10:0c:41:34:3f:2f:0b:3b:55:c6:3b:94:
                    54:4f:3a:01:7a:aa:79:9a:25:f2:36:3e:b6:74:f5:
                    c8:f1:29:d6:ed:17:63:75:3e:50:2d:a6:8d:b0:15:
                    be:f7:47:cc:25:10:e8:0a:78:fa:f4:ed:bd:3d:f8:
                    0a:9d:c5:2a:6e:84:b5:1b:a8:01:20:8f:b5:99:e2:
                    5f:4d:b4:e0:ef:c5:ac:5a:60:51:62:f1:65:43:84:
                    91:f5:c3:7e:db:49:2a:34:9f:83:f2:f9:94:2e:d8:
                    64:3c:02:34:ef:dd:17:25:97:9c:01:36:29:35:6a:
                    36:c2:2f:a4:a4:4a:d6:49:9d:93:69:39:5c:8a:fa:
                    bb:83:9d:90:a3:8d:19:e1:83:a9:6a:61:a1:d3:e5:
                    33:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:BF:EB:02:5A:8F:70:E1:FC:4F:98:C4:FD:1D:88:49:B9:5D:8A:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/306d6967-d97c-3160-aba7-a2f94bbe4583.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.58.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:b9:5a:02:13:c9:9b:43:64:3e:5c:80:60:c7:81:f5:80:ea:
         4c:37:78:6d:89:59:44:83:c6:99:45:3f:9f:7a:2e:a4:cf:87:
         77:88:4b:46:36:c8:64:b9:3b:5e:b0:ce:bf:cb:0d:5c:b5:9d:
         0b:b5:e7:fd:47:2b:28:3b:10:da:2b:d0:0d:dc:ca:39:14:7d:
         cf:7a:54:b3:47:2a:3a:53:a9:04:d0:76:65:06:e2:2f:e6:05:
         bf:68:31:55:ae:b5:79:c1:fc:f9:36:c8:27:d6:c1:4b:a4:80:
         8e:f3:0d:1f:fb:a4:7f:67:dd:2e:d9:a3:d5:ee:6c:41:85:b5:
         fe:6a:73:28:f9:84:32:b6:67:6a:6f:4d:ea:b9:30:83:95:fb:
         cb:88:42:73:ea:44:29:73:d9:d7:22:21:3d:a3:a2:87:52:25:
         b8:a6:85:d4:dd:0b:08:c8:af:31:91:db:d8:39:6a:9a:d7:8c:
         ed:92:1f:31:8a:a9:bd:68:b6:83:00:86:30:ad:d8:1b:79:ea:
         3d:a5:33:6f:be:27:ea:c3:5e:0e:d7:bc:64:02:c9:59:d5:e8:
         7b:d2:7e:08:f6:e1:46:04:54:f9:e7:b5:75:ab:be:5d:b1:6d:
         f0:6a:0a:41:ae:cc:a5:7a:78:38:0c:e0:27:3a:b2:f4:b1:9c:
         b6:87:38:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:28:03 2026 by rpki-client