Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3ea472c8-ccf8-3a13-ad30-bde711c517e9.roa
File:                     3ea472c8-ccf8-3a13-ad30-bde711c517e9.roa (raw, json)
Hash identifier:          5mMgxsdFYkig9YZfXYDpiJ+twtyTiY88b80omZHSnbw=
Subject key identifier:   52:0C:BB:85:C2:08:F8:B3:DE:D4:E9:6E:1D:5F:5E:96:8A:16:7A:4F
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E7BCA2A950DA92A03555EAC00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3ea472c8-ccf8-3a13-ad30-bde711c517e9.roa
Signing time:             Mon 13 Jul 2026 09:00:12 +0000
ROA not before:           Mon 13 Jul 2026 09:00:12 +0000
ROA not after:            Sun 11 Oct 2026 09:00:12 +0000
asID:                     265618
IP address blocks:        38.58.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7b:ca:2a:95:0d:a9:2a:03:55:5e:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jul 13 09:00:12 2026 GMT
            Not After : Oct 11 09:00:12 2026 GMT
        Subject: CN=f79c89c8-8c58-4d37-b85a-9f8c784acf3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a2:d1:27:3d:e5:f4:06:b3:1f:a9:c1:f8:41:
                    6a:1a:87:15:f0:b7:4e:a0:b5:3b:e3:fc:a0:d5:65:
                    08:b0:de:8c:45:ce:f9:1e:5d:3e:2b:86:89:9b:ff:
                    70:d2:87:69:ad:43:4d:2a:a0:d7:b3:53:a1:ac:6c:
                    fc:cd:7d:27:e3:0d:b6:75:08:e3:d6:8c:47:aa:5f:
                    6d:60:e1:8d:f1:d7:0e:26:5f:f5:30:e3:19:cc:4f:
                    08:42:83:55:0e:55:e5:68:28:5c:ae:55:37:96:80:
                    d8:53:b5:9e:64:89:b6:7f:ed:6a:5e:54:69:7a:8a:
                    fa:98:bd:11:be:c7:91:66:e7:6f:cb:3c:65:c4:6e:
                    6f:59:33:01:20:8b:02:f2:ad:5f:a5:7c:cc:c0:47:
                    00:86:ea:41:52:18:85:11:eb:fb:93:fa:b0:43:c6:
                    ae:f0:0e:84:01:80:51:60:99:e8:59:f9:43:74:bc:
                    a5:5f:33:a9:7f:21:dd:87:ab:21:cb:54:6b:e4:ec:
                    0b:76:c4:ff:4a:03:bd:76:a0:6a:0a:9f:dc:bc:28:
                    50:cc:07:75:ea:ca:e0:1b:e9:96:31:9d:64:52:3a:
                    8a:81:1a:19:a5:8a:05:dd:de:c2:9f:ec:81:da:aa:
                    51:55:fd:95:8e:cd:1e:41:11:b5:55:88:3a:32:a3:
                    e1:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:0C:BB:85:C2:08:F8:B3:DE:D4:E9:6E:1D:5F:5E:96:8A:16:7A:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3ea472c8-ccf8-3a13-ad30-bde711c517e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.58.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:ff:87:35:a7:83:8c:2a:ec:38:21:36:c5:d9:09:9a:65:6a:
         05:ce:01:0a:00:de:43:1e:58:70:09:aa:9e:2c:71:bb:0f:07:
         1a:b6:04:e1:3e:5e:19:8e:5d:7b:f6:61:d1:84:48:b8:b2:1f:
         64:be:08:4a:90:3c:3a:1a:d2:39:ac:4f:94:94:d9:03:44:e9:
         88:2e:8a:07:a4:41:d5:49:6c:17:36:63:e3:e9:62:dd:fb:1e:
         a4:16:94:4f:50:a5:02:df:b4:d9:54:bb:20:73:4f:ab:95:94:
         4c:9b:03:4a:b1:82:5d:d5:3e:b7:da:a3:77:9b:fa:ba:17:81:
         ca:d1:24:a4:10:03:77:ad:2d:ed:05:35:a3:df:bd:7f:bc:a7:
         08:8b:c1:6d:ee:d7:55:5c:86:c0:9a:0a:bd:fd:34:35:21:72:
         ce:de:7d:19:da:9a:a4:5b:a4:e9:40:5d:46:26:d5:f8:7e:8a:
         a7:c7:d6:cc:c0:25:e2:bd:ea:1e:72:ed:af:5b:ea:d9:97:2b:
         6b:de:52:1f:03:1a:6b:30:9a:16:35:46:63:99:92:01:d7:a0:
         a9:73:47:54:86:5a:82:60:42:8b:1b:11:89:02:7f:9f:c8:ac:
         96:73:ce:cb:05:59:4e:a2:33:79:f8:d8:c7:eb:ed:0c:14:51:
         fa:46:18:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:56:18 2026 by rpki-client