Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3ba769d8-da2e-3f9d-9338-c5230bf9f571.roa
File:                     3ba769d8-da2e-3f9d-9338-c5230bf9f571.roa (raw, json)
Hash identifier:          DyjY07I1ZbikAs/4/1TZUDaMX76tJNdomTKoDOgHi0M=
Subject key identifier:   F3:38:34:49:89:17:20:A2:0E:08:18:70:66:B1:3D:F3:10:29:01:E9
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E904264B1A9452045078F5B80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3ba769d8-da2e-3f9d-9338-c5230bf9f571.roa
Signing time:             Mon 20 Jul 2026 16:58:41 +0000
ROA not before:           Mon 20 Jul 2026 16:58:41 +0000
ROA not after:            Thu 10 Sep 2026 09:00:11 +0000
asID:                     211908
IP address blocks:        38.3.184.0/24 maxlen: 24
                          38.3.228.0/22 maxlen: 24
                          38.3.232.0/21 maxlen: 24
                          38.51.140.0/22 maxlen: 24
                          38.199.252.0/22 maxlen: 24
                          154.43.166.0/24 maxlen: 24
                          154.43.176.0/22 maxlen: 24
                          204.157.176.0/22 maxlen: 24
                          204.157.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:90:42:64:b1:a9:45:20:45:07:8f:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jul 20 16:58:41 2026 GMT
            Not After : Sep 10 09:00:11 2026 GMT
        Subject: CN=bba995d1-5872-4245-97b0-361bf9cd5a4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:1a:bb:f5:a6:0e:24:55:4e:ed:10:3d:48:12:
                    a3:1c:e4:dd:a3:0e:75:61:e6:a3:06:98:86:f9:c0:
                    54:77:6b:93:b7:cc:0d:8f:9a:44:38:47:fe:dc:4b:
                    a1:c3:d0:16:76:87:e4:30:a2:66:3b:45:96:b8:60:
                    e3:b7:36:17:82:c5:cc:cc:a2:2d:7c:7b:8e:12:51:
                    7d:49:53:ff:54:40:14:da:b0:04:f0:35:8d:ef:74:
                    13:47:1f:4c:ba:8a:9e:bf:28:e5:8c:9d:ec:e7:c9:
                    d9:3a:b9:c5:1b:7c:8d:33:bb:2f:1d:7c:07:ef:cb:
                    d8:ac:d8:46:77:ae:63:40:54:53:eb:0e:26:4c:95:
                    82:9d:5c:ba:cf:6d:67:90:bf:7f:84:9b:ec:75:6f:
                    8e:e6:37:af:1b:c0:6c:68:4f:08:77:5e:e1:1f:dd:
                    3a:20:3b:b8:fd:dc:c4:d0:67:11:e8:2b:e9:33:b2:
                    cc:d3:1f:29:38:ee:c7:ec:08:e5:4d:6a:0e:5c:88:
                    8a:53:7a:bc:86:24:25:20:a1:e9:68:df:01:b7:03:
                    57:4a:0a:0c:6a:54:e1:d2:59:92:19:2c:6d:cd:0e:
                    ad:79:55:7a:71:05:8b:46:21:51:d8:fd:1a:68:3e:
                    ca:ac:eb:71:c7:93:4d:5e:43:07:37:00:bb:a6:d4:
                    2f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:38:34:49:89:17:20:A2:0E:08:18:70:66:B1:3D:F3:10:29:01:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3ba769d8-da2e-3f9d-9338-c5230bf9f571.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.3.184.0/24
                  38.3.228.0-38.3.239.255
                  38.51.140.0/22
                  38.199.252.0/22
                  154.43.166.0/24
                  154.43.176.0/22
                  204.157.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:8e:68:12:51:88:bd:9c:3c:27:f3:e7:5c:fa:fc:40:2e:f8:
         0a:3b:6a:c8:74:48:91:11:d0:72:a0:e9:cc:3b:9b:3d:2b:1e:
         11:7c:b7:d3:15:e5:d8:31:91:e0:e4:13:25:8b:a2:e3:f5:b0:
         db:7f:11:48:1f:97:12:af:ff:11:cb:1d:29:df:be:5e:4a:11:
         f2:53:a2:6d:fc:d7:dd:ed:8e:d6:cc:10:18:97:7f:a9:1b:bb:
         1b:67:e3:65:3c:2c:5e:0f:43:0c:de:f8:a4:a5:a3:4c:41:33:
         51:6f:1f:f1:86:38:69:fa:53:0b:40:49:ae:a6:ef:0c:47:1b:
         db:e0:e2:0c:90:28:af:27:2d:09:6d:65:df:c6:c7:5a:ea:1a:
         b0:bd:99:70:fe:3d:97:b6:a6:37:f8:f4:10:21:b5:ca:ea:e4:
         e4:ea:c2:ac:59:22:b0:45:b1:63:16:66:63:c5:98:89:4c:7b:
         45:4d:6f:be:a7:fd:be:50:f5:80:da:49:88:2b:8f:71:bb:ae:
         73:20:d6:67:ac:55:fc:a9:c7:12:3c:fd:01:45:07:90:38:47:
         b7:b8:31:c5:54:81:47:4c:46:9b:6e:da:fb:20:43:78:ad:d0:
         bd:29:10:61:9d:48:62:f2:c5:01:75:af:ea:b0:d3:a6:08:c9:
         b4:95:b7:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:45:55 2026 by rpki-client