Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5515e188-8771-310b-b722-9c9fa819af34.roa
File:                     5515e188-8771-310b-b722-9c9fa819af34.roa (raw, json)
Hash identifier:          Uuy/UBDdgoPA7bANbeSDlIvtrnWcxm27vc/fCdtZcWo=
Subject key identifier:   20:70:49:5A:ED:CB:52:C8:F7:DD:3E:AE:E8:42:B6:6D:8D:50:06:01
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584B83343F4C4C257EC746926B00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5515e188-8771-310b-b722-9c9fa819af34.roa
Signing time:             Mon 13 Oct 2025 22:23:52 +0000
ROA not before:           Mon 13 Oct 2025 22:23:52 +0000
ROA not after:            Sun 11 Jan 2026 23:23:52 +0000
asID:                     137816
IP address blocks:        38.75.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:83:34:3f:4c:4c:25:7e:c7:46:92:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct 13 22:23:52 2025 GMT
            Not After : Jan 11 23:23:52 2026 GMT
        Subject: CN=b153731e-83fb-41cb-aa03-14a601b4f862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:be:ac:dc:58:bf:94:04:f2:6c:60:b6:27:10:
                    02:ec:02:e4:9a:82:50:1b:7f:6d:b8:5d:51:04:c8:
                    84:32:81:6a:29:11:db:38:26:75:f0:d2:7b:41:e1:
                    eb:87:82:d1:e2:e2:db:33:a3:57:b5:7e:6c:c3:dc:
                    1b:66:88:e6:b5:4e:5b:74:85:e8:0f:0e:b6:39:8a:
                    95:e7:09:d4:e8:d7:fb:3a:63:fb:63:a4:e0:af:09:
                    65:3a:d0:d0:61:cf:a8:ad:8f:c8:b4:e8:a8:d1:86:
                    83:0b:a4:0a:9f:24:80:e1:2a:73:4b:3f:04:70:aa:
                    4f:e9:6f:75:12:05:51:16:15:a3:69:b1:c6:16:1d:
                    b0:e5:14:3c:d4:9a:db:3d:00:30:07:f1:45:ff:e2:
                    e1:b0:76:b4:74:b0:74:d2:90:b0:c4:15:e6:fb:6d:
                    9a:59:fb:87:ec:d2:a2:63:d8:8e:0e:f5:de:6f:73:
                    46:92:6b:d0:7d:ba:08:4d:1d:5a:03:35:56:d5:07:
                    10:14:c4:25:a8:01:1a:5a:93:8c:aa:d3:4b:de:af:
                    72:89:6a:d7:05:38:be:de:28:db:59:27:da:f3:b5:
                    08:22:16:28:7c:84:41:0e:9a:13:03:5d:3d:e1:cb:
                    91:05:35:88:58:f0:71:2c:9d:23:1b:07:be:0e:62:
                    4a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:70:49:5A:ED:CB:52:C8:F7:DD:3E:AE:E8:42:B6:6D:8D:50:06:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5515e188-8771-310b-b722-9c9fa819af34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.75.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:c4:83:15:d5:3e:0a:cb:5b:53:f6:5b:c6:32:22:e5:fa:de:
         64:07:a7:05:5c:8f:91:30:c3:03:c3:0a:37:b8:69:90:16:54:
         a9:6d:c1:69:e7:69:00:ae:cf:75:f2:8a:83:12:0a:34:f4:e2:
         26:70:54:24:4c:61:14:d6:bd:c4:60:01:e9:38:8a:a9:e4:08:
         d8:88:79:f6:40:84:00:83:e7:6a:30:70:2c:02:ec:7e:c4:c3:
         7d:6f:f5:c7:2e:b2:0d:be:18:e3:69:d4:16:65:87:5a:59:18:
         95:c0:27:1a:a7:c6:c8:a7:99:0a:fc:e3:27:81:41:1f:24:3c:
         5a:67:3b:1a:73:c5:5f:3e:c2:e3:ea:6b:39:4e:3b:c2:7f:25:
         c7:ad:0a:01:6f:55:04:6d:e4:74:c5:1f:62:c6:39:bd:10:70:
         b1:51:ae:d2:c5:ef:7f:63:c1:dc:75:5c:77:8d:c0:1e:0e:9b:
         ca:da:39:ab:dc:7c:f1:c0:94:11:a5:9d:13:8e:7b:ec:4f:f3:
         f6:a0:ac:ae:ed:83:3f:55:4c:c2:6f:75:19:d3:7a:96:52:3a:
         30:b6:55:8b:07:54:f5:1d:71:cd:6b:e9:5e:59:ce:d5:f6:5f:
         81:b9:0d:72:c7:a1:4b:6f:1e:ff:86:49:6b:c2:26:0e:2d:f1:
         d2:52:c3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:05:58 2025 by rpki-client