Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/33d849c7-3193-35cb-a012-c4861989548e.roa
File:                     33d849c7-3193-35cb-a012-c4861989548e.roa (raw, json)
Hash identifier:          Cn5Bur4aIoakWB0fXAM8kGUF38fcuLUOKAgYdgFlKZc=
Subject key identifier:   23:6E:4B:6E:CB:40:D1:71:D9:74:77:CD:70:68:6F:E3:48:94:E3:81
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E7204E2D65D9540CB2E744900
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/33d849c7-3193-35cb-a012-c4861989548e.roa
Signing time:             Thu 09 Jul 2026 21:00:11 +0000
ROA not before:           Thu 09 Jul 2026 21:00:11 +0000
ROA not after:            Wed 07 Oct 2026 21:00:11 +0000
asID:                     274409
IP address blocks:        38.22.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:72:04:e2:d6:5d:95:40:cb:2e:74:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jul  9 21:00:11 2026 GMT
            Not After : Oct  7 21:00:11 2026 GMT
        Subject: CN=4ddb0239-a2d1-4fef-aeba-0d6aabd0e242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:7c:65:cd:26:29:71:7a:5b:18:55:66:1b:ac:
                    21:8d:d9:64:f9:1f:49:d1:bf:0b:21:1b:dc:5b:a2:
                    73:54:c0:99:e2:b4:2e:1c:ea:e8:c1:de:85:f2:da:
                    6e:fd:9b:f0:53:b9:42:83:2a:fe:d2:d6:37:d8:3d:
                    43:d2:59:f1:da:18:db:7e:bd:1e:6f:34:df:7e:03:
                    f7:31:64:30:97:fe:82:08:da:8d:c6:3f:bb:35:38:
                    fe:f0:7f:33:05:f3:0c:3a:ad:1a:68:97:97:13:bf:
                    3a:b2:df:82:b9:15:cc:11:93:08:2d:de:4d:28:eb:
                    dc:92:10:bc:ef:10:8e:62:9d:e7:d9:eb:67:b4:a9:
                    48:eb:b7:04:85:36:ec:13:f5:99:37:96:b8:0c:ff:
                    7c:cd:ea:7b:74:d8:df:6c:69:e8:d7:ea:44:bc:a0:
                    d7:f0:5f:03:ad:bf:72:cd:d0:7d:69:58:d2:10:b3:
                    2e:56:f5:ce:05:82:cd:62:14:f7:6e:01:61:2f:a2:
                    12:c2:1d:90:a3:22:6a:81:59:83:15:4d:b1:cc:9f:
                    bb:82:41:b0:91:40:80:7c:4f:2c:25:9b:9d:ae:bc:
                    01:dc:20:33:d2:87:9a:f5:08:73:4a:f6:16:8f:a4:
                    06:6e:76:76:21:86:5a:d4:59:e0:3a:8f:f6:4c:10:
                    d7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:6E:4B:6E:CB:40:D1:71:D9:74:77:CD:70:68:6F:E3:48:94:E3:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/33d849c7-3193-35cb-a012-c4861989548e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.22.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:9b:4c:94:33:dd:09:58:ad:0b:7f:0a:9f:93:80:47:57:0b:
         89:b7:5e:32:f3:83:df:e8:e1:4e:93:df:c9:f4:ce:bf:69:ff:
         a1:45:70:c8:36:2f:95:b0:9e:2c:3c:53:83:29:17:e8:76:58:
         1d:63:4e:67:0e:47:cf:be:71:7d:b2:94:6d:ea:ca:2e:8a:13:
         61:bc:1e:ee:4d:bf:f0:f2:3f:d0:fe:f5:74:b5:1f:8c:37:ab:
         b3:fa:c2:31:6e:f2:a1:ee:de:c1:d9:18:c0:60:3f:5b:fa:9c:
         fd:1d:19:0c:86:05:96:c1:38:c8:09:61:b3:4e:21:86:b2:59:
         cf:81:fc:4b:05:48:6e:b0:4b:74:e6:29:07:f0:ee:ea:d8:31:
         7f:f9:6f:e5:d2:74:9f:c1:03:62:de:16:a0:2e:b4:19:ba:df:
         51:fb:7c:34:35:90:a5:7a:f6:5e:ad:64:87:04:04:11:d9:61:
         8a:1e:ad:c1:27:8c:1c:86:f3:88:54:b0:97:72:40:5f:65:aa:
         cb:10:8c:c0:33:77:cb:a5:a9:c0:bd:14:57:8f:0e:8f:bd:62:
         38:da:b6:8f:d9:d0:19:03:81:e9:1a:aa:4c:18:d9:df:58:3a:
         10:2a:4f:18:b0:3e:b1:f9:18:ba:c7:c2:0b:d5:18:99:43:8b:
         cc:ea:e2:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:55:29 2026 by rpki-client