Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/506ff167-0579-3f14-b17f-fdcbae7fd17d.roa
File:                     506ff167-0579-3f14-b17f-fdcbae7fd17d.roa (raw, json)
Hash identifier:          CeG2r6bjvxCxdOEFQVv9Ud7Um8eEZLHM99kCgmpceQY=
Subject key identifier:   F2:35:94:0F:CA:22:ED:9A:47:67:92:BE:5B:93:7F:01:EC:EB:BC:A1
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584DCCAD826B49E3A31781DC2600
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/506ff167-0579-3f14-b17f-fdcbae7fd17d.roa
Signing time:             Mon 11 May 2026 15:36:05 +0000
ROA not before:           Mon 11 May 2026 15:36:05 +0000
ROA not after:            Sun 09 Aug 2026 15:36:05 +0000
asID:                     274298
IP address blocks:        38.158.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cc:ad:82:6b:49:e3:a3:17:81:dc:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: May 11 15:36:05 2026 GMT
            Not After : Aug  9 15:36:05 2026 GMT
        Subject: CN=30977bb0-b32d-484a-8aee-fb5a0e7107f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:28:8b:d4:fd:31:c0:70:c1:05:ff:fd:3a:02:
                    ea:40:ec:e2:ec:fb:f4:26:48:7a:5e:cf:25:c3:23:
                    dd:d0:e3:86:c5:7c:ee:d3:a2:a1:7d:7d:30:79:b9:
                    79:5d:7d:d8:5c:fe:6a:62:ce:86:a6:5b:57:95:16:
                    1a:e4:e5:c3:c1:77:6e:ed:91:02:24:4d:10:4b:f5:
                    bf:8e:ae:2a:a6:50:a4:02:ea:89:20:68:34:70:10:
                    0d:31:c8:91:15:3f:f0:a3:28:0c:d9:46:f2:a2:0b:
                    c9:82:3d:b3:60:02:f3:15:b7:43:2d:87:77:a3:c4:
                    ce:95:ca:1c:52:7d:47:d6:bf:b8:ce:0f:ed:4f:1e:
                    bc:3f:6a:50:7b:9e:db:d5:95:fd:d8:a0:26:8e:b6:
                    52:a7:93:11:78:d3:45:06:7c:5c:b5:76:bb:02:42:
                    5a:43:fa:da:0d:d3:29:24:51:b3:8c:e3:41:1b:68:
                    44:d4:c2:81:cf:b1:d1:a6:b5:63:0b:d7:ec:6e:89:
                    98:10:b6:f4:40:17:eb:77:c5:03:b6:58:d9:84:fa:
                    3c:ef:1c:98:ff:c0:a0:bb:3a:ae:25:ae:d4:73:25:
                    d7:41:3a:d9:b5:e3:e3:67:73:74:9f:79:5e:e9:3c:
                    29:bb:06:58:d9:ed:fe:51:27:f8:f6:92:79:d0:5b:
                    51:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:35:94:0F:CA:22:ED:9A:47:67:92:BE:5B:93:7F:01:EC:EB:BC:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/506ff167-0579-3f14-b17f-fdcbae7fd17d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.158.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:3d:8a:88:8a:c2:d9:0d:d3:df:36:6f:be:a2:b6:70:a2:62:
         d7:96:b2:92:cb:ca:57:18:6f:af:3a:08:21:32:c6:13:0a:e2:
         e7:c1:88:37:b7:a6:3f:29:a4:1e:cb:35:ca:ed:dd:46:9a:3b:
         a8:ad:02:28:c1:28:a9:8e:51:b6:e3:a2:74:5d:91:36:0a:3c:
         c0:31:7b:16:d1:9b:b5:3c:58:24:b2:30:25:25:e0:ae:81:a3:
         d7:c5:ed:39:5b:17:78:19:ae:2f:e3:e1:e2:ac:61:fb:51:3f:
         c0:8f:b3:70:81:2e:04:8e:da:32:68:65:2c:b1:3f:c0:32:8c:
         8d:42:60:2b:42:80:62:0a:38:09:b2:4f:0d:ce:20:52:e8:b3:
         45:81:15:9a:28:9d:f6:53:38:a9:dd:d4:9f:72:fa:5d:c0:80:
         ec:56:af:d2:22:e7:7a:34:2e:3c:1f:8e:4d:7a:2e:60:37:0b:
         90:e7:65:ff:af:68:7a:0b:b0:87:35:b7:c6:8d:2a:d3:b2:71:
         9d:94:7d:db:26:a1:87:83:97:7d:20:c2:24:31:e9:06:74:d2:
         39:48:c9:d9:4b:f7:1a:34:d2:07:6d:be:7f:02:15:d3:eb:ca:
         7b:37:48:4b:ee:25:95:a1:51:16:db:b5:86:e9:d3:b5:b8:69:
         5b:42:13:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:17:56 2026 by rpki-client