Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4d0cab39-8b4c-35b3-8045-08d2dcafca55.roa
File:                     4d0cab39-8b4c-35b3-8045-08d2dcafca55.roa (raw, json)
Hash identifier:          X4E10CAvMfDdX9vz+wGHNfNnRUAeSl2eRSptRtRCjao=
Subject key identifier:   B8:9D:5B:6F:6B:A7:2A:DD:A0:E3:CF:C5:D8:EA:20:66:C9:56:19:FB
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D3704BABAA0B79EEEF7653250
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4d0cab39-8b4c-35b3-8045-08d2dcafca55.roa
Signing time:             Thu 19 Mar 2026 01:00:31 +0000
ROA not before:           Thu 19 Mar 2026 01:00:31 +0000
ROA not after:            Wed 17 Jun 2026 01:00:31 +0000
asID:                     272403
IP address blocks:        38.101.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:37:04:ba:ba:a0:b7:9e:ee:f7:65:32:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Mar 19 01:00:31 2026 GMT
            Not After : Jun 17 01:00:31 2026 GMT
        Subject: CN=e2747bc0-e68a-4570-830b-32b2255cccc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:65:cc:1d:0e:44:87:4b:b0:4b:08:8c:57:24:
                    b5:04:5d:2b:8a:62:99:7b:ae:75:f5:01:e6:27:db:
                    7b:9b:aa:32:40:7e:2f:58:af:9d:e4:3a:5c:7e:08:
                    99:6a:31:54:09:ff:92:bb:b8:46:86:b8:d6:da:fc:
                    9d:43:a2:2e:f9:31:a9:53:15:b2:25:a5:69:e1:bf:
                    ef:3f:29:ca:97:77:8b:c3:0c:a7:fe:9d:f5:6b:70:
                    9b:f8:14:e7:de:cc:da:9e:d4:26:6e:e9:c0:37:8c:
                    8a:88:bd:b4:27:ea:f6:28:2a:26:f3:ae:ce:ae:6a:
                    75:fb:c6:aa:2c:af:e3:02:57:94:4a:8c:60:ab:d6:
                    a1:56:08:a5:b6:57:07:19:7c:bd:72:e3:78:7a:b7:
                    aa:66:a1:be:f9:2d:90:89:1c:0d:57:44:d4:8f:5e:
                    c1:50:df:eb:36:41:f1:2d:07:de:c3:c1:0f:3e:13:
                    ca:d2:03:e2:2b:79:c8:23:46:f2:3c:ed:e5:99:5a:
                    6a:59:96:fe:c8:87:c6:b6:39:ff:18:58:a6:cc:fa:
                    1a:84:33:2e:14:cc:e2:91:46:58:ac:e9:7c:b8:a1:
                    28:6a:48:78:47:53:ca:22:3b:2a:cb:a7:07:65:9d:
                    e4:e0:82:79:0c:ff:64:54:9f:84:1e:ac:d0:22:97:
                    cf:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:9D:5B:6F:6B:A7:2A:DD:A0:E3:CF:C5:D8:EA:20:66:C9:56:19:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4d0cab39-8b4c-35b3-8045-08d2dcafca55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.101.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:15:70:89:26:fe:cb:67:58:e2:95:55:c8:c9:3b:98:dc:91:
         0c:5c:47:04:14:2b:1d:47:44:db:0b:8b:7a:eb:7d:fd:c9:37:
         41:3c:91:35:b9:66:14:25:1a:47:28:72:26:ec:d9:1f:a6:c0:
         82:86:d5:70:d7:fa:16:67:c3:d3:10:7a:1c:76:c7:b1:0c:42:
         4d:8b:9a:46:d6:6b:3c:04:ab:15:33:3d:1a:01:ef:0e:25:1d:
         86:89:62:67:7b:bf:a5:81:90:70:7e:33:62:e3:33:28:c5:80:
         fb:c6:f4:c3:93:d2:3c:f7:e1:c0:c1:a0:12:7f:9f:89:4b:88:
         8f:89:ea:72:5b:70:b7:cf:3d:b3:69:dc:87:97:21:b0:e3:9a:
         88:26:cc:44:cc:18:e4:7e:8a:b9:35:81:c9:d4:01:c3:ef:54:
         41:b3:bb:54:fe:07:f2:b7:af:3c:9c:e0:a6:fe:ed:0b:61:27:
         d7:99:da:f4:1e:a2:92:e8:e2:06:61:12:43:14:f6:97:21:3d:
         fc:32:5f:0a:e8:41:6e:3c:6f:04:0e:23:0d:b4:be:8f:f2:5c:
         8b:3b:d8:f5:30:fe:5f:af:99:04:c0:8f:1c:70:fb:64:b1:88:
         a8:00:7e:d5:39:be:0f:64:f2:dc:e5:6b:a5:23:5b:25:39:08:
         13:67:c0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:44 2026 by rpki-client