Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/53401e96-6e50-3d67-bc16-4ce932476cec.roa
File:                     53401e96-6e50-3d67-bc16-4ce932476cec.roa (raw, json)
Hash identifier:          Cz71n/I4K6wwHOspdMaEtIbvUSlgVnJHna0wGFjEv6M=
Subject key identifier:   CF:2D:8E:4F:B1:64:06:54:A2:C5:F4:F9:75:B2:C4:70:BB:8D:69:49
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F4C3D632C9346355CA69B70A0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/53401e96-6e50-3d67-bc16-4ce932476cec.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     272044
IP address blocks:        38.159.176.0/24 maxlen: 24
                          38.255.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:63:2c:93:46:35:5c:a6:9b:70:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=fc46a3fe-7864-4b5e-bbe5-13a0f4bec3b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:24:f5:d4:43:16:92:0c:3b:3e:78:86:08:97:
                    73:ba:9a:6b:56:12:53:ef:02:50:95:62:30:f8:4d:
                    5b:68:bd:a3:9e:8a:0d:8b:b2:f3:e5:cb:d3:04:a9:
                    9a:4b:e0:a8:c5:dc:46:db:da:0c:94:07:ef:50:e4:
                    cf:9f:36:3a:08:d5:d7:22:1e:fd:03:08:07:c0:6a:
                    c8:f1:da:2f:a5:50:87:01:6c:99:bd:c8:e0:36:41:
                    19:88:58:ea:b5:90:24:78:93:e5:e2:38:42:01:5c:
                    31:ad:92:27:23:10:6d:a8:24:f2:a5:d3:2b:51:2e:
                    fe:c4:2e:3b:73:c9:ab:bd:fb:5e:ad:0f:b7:24:54:
                    51:e2:1f:7d:83:0f:f1:27:1a:1d:25:d6:ce:e7:7c:
                    d4:74:c2:a6:92:9c:c8:56:4f:6b:ea:c7:c0:75:ac:
                    79:38:f6:a1:5f:46:0d:9c:f8:3e:0a:5d:2f:be:fd:
                    91:de:38:82:55:65:49:e1:0e:57:1a:9e:de:42:43:
                    51:7a:62:ae:2e:d9:00:72:a9:82:30:57:0f:df:7f:
                    e3:66:5e:28:e0:be:f2:d8:1e:39:06:d7:d9:4b:4e:
                    5d:2b:98:7d:63:68:0b:14:e9:97:20:fd:6e:55:2d:
                    bd:76:d4:56:57:24:64:6e:f0:31:44:e0:3b:ce:e2:
                    67:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:2D:8E:4F:B1:64:06:54:A2:C5:F4:F9:75:B2:C4:70:BB:8D:69:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/53401e96-6e50-3d67-bc16-4ce932476cec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.159.176.0/24
                  38.255.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:b0:4d:6f:f5:d5:aa:8b:ae:ea:30:c5:a7:45:f4:9c:d2:d9:
         0c:94:31:73:49:7b:e8:9b:ab:62:5b:aa:b6:b3:0b:25:18:31:
         2e:e9:2f:bb:6f:4d:91:e4:42:1a:17:48:5d:4e:bd:9f:c3:c4:
         da:3d:df:45:1e:03:39:67:fd:3d:fc:0d:ab:4e:9e:b5:0e:02:
         96:26:2b:60:f8:82:65:cd:d5:63:48:f4:48:30:7f:5f:e0:ad:
         da:a7:ec:70:4c:95:48:a3:02:18:f1:2a:67:c9:73:80:d6:0d:
         e7:5f:a1:25:42:d4:14:89:bd:a4:d3:21:4b:a0:46:af:6a:da:
         93:62:ea:a3:e1:bd:e4:c4:4c:d2:d9:d5:0d:ff:63:70:49:65:
         d2:25:4f:50:99:97:a7:16:b6:d4:64:f7:58:9a:72:f5:15:d2:
         16:ee:38:41:e8:a5:52:22:05:46:cb:19:14:79:ea:29:9b:82:
         2c:d8:bf:af:64:10:bc:26:4d:60:c5:79:db:c7:62:05:d7:11:
         34:0a:12:81:19:64:92:b8:5f:bb:e8:1e:f1:7c:07:bc:1d:1f:
         c3:5f:24:e4:10:49:d1:7a:d3:bd:7e:5a:e6:d4:1e:40:f1:a2:
         47:ca:04:b6:a7:29:69:44:aa:65:f7:b1:f1:9d:00:06:54:8e:
         b5:d1:26:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 22:34:25 2026 by rpki-client