Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/31a7a6f8-536d-360d-86e4-01bb8269f326.roa
File:                     31a7a6f8-536d-360d-86e4-01bb8269f326.roa (raw, json)
Hash identifier:          8ZhT3p13eDBPkZ+CeQ0C8uUCisw5AQj9rRZn4fGwch8=
Subject key identifier:   A9:D4:C6:BC:C9:B1:CD:59:BE:28:31:9F:62:6F:23:D2:BB:41:45:D9
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F5A32E921BC98F05EEBDB5C80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/31a7a6f8-536d-360d-86e4-01bb8269f326.roa
Signing time:             Thu 01 Oct 2026 01:00:12 +0000
ROA not before:           Thu 01 Oct 2026 01:00:12 +0000
ROA not after:            Wed 30 Dec 2026 02:00:12 +0000
asID:                     151797
IP address blocks:        38.47.192.0/18 maxlen: 24
                          38.181.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5a:32:e9:21:bc:98:f0:5e:eb:db:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct  1 01:00:12 2026 GMT
            Not After : Dec 30 02:00:12 2026 GMT
        Subject: CN=ef36b500-f4ca-4ab2-8817-fedf6e79d302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:52:ca:d0:c2:5f:f7:9a:d7:3c:b4:bd:52:31:
                    13:33:a3:92:e5:06:0e:ef:a1:a4:91:7a:3b:95:6c:
                    87:14:84:b1:08:ef:9f:ce:bb:e0:fb:06:6e:22:34:
                    47:76:02:4c:d0:9c:9d:a6:fc:7d:16:93:fa:1e:b4:
                    a4:e7:49:77:e1:e1:ca:a0:9d:be:a0:f2:81:4e:e8:
                    9d:39:57:53:bd:22:5a:36:7c:0c:6f:4e:f8:87:dc:
                    ad:76:88:33:ba:12:3d:da:e7:b6:73:3c:92:eb:d6:
                    4a:71:5a:9f:96:87:5f:d9:e1:06:73:01:f9:3a:44:
                    f1:00:c3:b4:31:9c:4c:f3:f8:05:38:8a:a5:6f:61:
                    c5:08:33:ce:68:fb:20:3a:d3:1a:97:03:36:47:a1:
                    6b:16:43:07:6d:2e:7f:c8:2f:41:af:6f:09:46:ed:
                    7c:68:80:d1:fb:e3:61:db:e3:14:0e:2e:46:e1:5f:
                    47:24:61:4b:ea:8c:d6:bb:ff:dd:d3:41:f5:c2:4f:
                    32:32:22:46:c2:f1:eb:ae:07:3e:53:56:cc:06:99:
                    19:03:24:28:c7:68:4f:50:c3:86:33:e0:3b:54:70:
                    8e:07:bc:23:1b:81:a0:24:0b:81:ed:c5:9b:06:14:
                    ee:c8:c6:92:56:60:80:0d:19:55:13:18:a2:9f:ce:
                    18:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:D4:C6:BC:C9:B1:CD:59:BE:28:31:9F:62:6F:23:D2:BB:41:45:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/31a7a6f8-536d-360d-86e4-01bb8269f326.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.47.192.0/18
                  38.181.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:05:43:47:a2:f4:a1:b8:07:6e:3a:be:bf:2f:6e:23:7c:2e:
         18:73:1d:a5:d2:d4:a6:1c:6e:fe:18:46:0e:9d:d6:dd:9f:9a:
         5e:71:31:23:ea:8a:ff:3d:ac:74:02:88:fe:9a:d8:21:04:bf:
         67:5b:44:cf:51:83:ea:68:80:4e:a9:41:70:10:ec:c0:2e:f8:
         cc:0c:a0:47:79:f2:7e:83:67:87:f3:bf:a8:2e:58:ed:c9:e5:
         ba:fb:9f:50:8a:29:d8:27:4e:5a:ff:e3:e6:10:db:59:40:00:
         cb:97:2d:ea:47:e3:88:03:fc:b9:82:6d:fc:07:c1:67:7c:ba:
         45:a5:69:34:97:a5:15:93:94:93:ec:2f:10:00:47:d3:08:5b:
         44:2b:f2:d8:c6:fb:b1:dc:a5:39:2a:b3:ae:7c:85:08:7d:5b:
         26:be:4f:4d:6d:f1:47:fe:67:11:b7:3d:45:7b:40:e7:7b:26:
         c6:79:f5:e3:0b:0a:82:5a:f1:66:39:76:c3:a8:d9:35:7a:8d:
         63:44:7a:fe:98:f8:de:fb:c2:51:01:3d:a9:f7:9b:16:ce:14:
         d6:f4:a5:62:0a:7d:ba:c8:ec:d6:65:6d:e0:49:be:b3:fb:97:
         3c:8e:f7:fd:77:44:1b:20:f8:93:aa:0d:59:74:9c:ab:f7:7a:
         8b:f6:8b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 09:15:40 2026 by rpki-client