Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/63227ec1-adfb-3357-bb3c-74b47ef707c0.roa
File:                     63227ec1-adfb-3357-bb3c-74b47ef707c0.roa (raw, json)
Hash identifier:          y88FXcUPRhvXFNdBsPpwb/eQvGmHNpEwSJyUUuCwgX0=
Subject key identifier:   FC:3C:81:89:C8:F0:C0:A4:04:BF:F1:4B:6E:A0:FA:41:A9:B5:E2:BE
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E5E7A05029969B229551D3100
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/63227ec1-adfb-3357-bb3c-74b47ef707c0.roa
Signing time:             Thu 02 Jul 2026 21:00:12 +0000
ROA not before:           Thu 02 Jul 2026 21:00:12 +0000
ROA not after:            Wed 30 Sep 2026 21:00:12 +0000
asID:                     150654
IP address blocks:        38.123.104.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5e:7a:05:02:99:69:b2:29:55:1d:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jul  2 21:00:12 2026 GMT
            Not After : Sep 30 21:00:12 2026 GMT
        Subject: CN=42e42bd0-87df-4fb7-a944-0a842e9cc555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f4:72:ab:0b:c8:3f:92:57:b1:e6:02:24:3a:
                    dc:06:c1:be:69:0e:ee:8c:80:b0:8b:00:cc:3a:01:
                    84:a6:44:9a:98:9c:42:56:d7:7a:95:4b:2f:d2:fb:
                    13:87:58:21:91:43:6c:4a:e2:5a:1c:ec:60:96:03:
                    d3:a5:ee:92:7d:1d:39:06:3d:39:82:2d:c2:8f:ed:
                    5d:b1:66:59:4e:b5:02:1b:a0:77:cb:1f:ad:cb:72:
                    d4:ca:04:82:39:f5:a1:02:99:33:97:ba:6a:8c:d3:
                    d7:9a:58:b7:39:b5:7c:86:3a:f7:d2:0d:c9:52:36:
                    e7:38:0b:e1:5b:0e:48:19:50:3c:a9:a6:71:9b:09:
                    cd:88:59:33:90:d5:96:24:0b:e4:4d:f6:c8:4b:e6:
                    59:7e:22:c3:f9:d1:d0:17:7e:31:90:89:6a:52:3e:
                    8c:c7:6c:12:da:67:c4:04:e4:75:c4:d7:d4:75:1a:
                    2a:16:b5:16:56:80:10:89:52:41:2b:fb:ba:0c:33:
                    8b:f9:ab:3c:66:7f:c9:8e:8a:f1:e8:a8:c8:94:e4:
                    e3:39:9d:f4:45:cb:fb:e7:86:3b:fb:6d:4f:a6:16:
                    8c:ca:35:74:2b:12:c1:b6:5e:f1:33:c5:f5:ff:c8:
                    54:6e:4b:7e:b9:4e:72:56:ac:51:10:da:a5:52:00:
                    85:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:3C:81:89:C8:F0:C0:A4:04:BF:F1:4B:6E:A0:FA:41:A9:B5:E2:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/63227ec1-adfb-3357-bb3c-74b47ef707c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.123.104.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:53:74:6e:a2:08:78:0e:0c:d4:3e:f9:f2:ca:cf:09:8e:7d:
         2f:7a:1f:30:b8:56:25:ad:64:05:d9:4d:c6:38:c1:ee:76:17:
         a5:5d:5a:7b:58:04:ca:cc:b4:b9:d4:a8:b2:7e:92:bd:db:cb:
         28:40:db:05:28:e4:5b:72:aa:d7:4c:d9:10:2e:2e:d1:33:3c:
         29:41:59:3a:99:de:5a:e4:b1:cb:77:2c:c6:2c:d5:2a:2b:0a:
         26:61:dc:47:9e:03:bf:f0:10:87:02:d0:9b:9d:25:0d:c9:40:
         70:cd:af:6a:78:ad:9a:51:11:b0:bc:43:e4:c9:7e:14:e3:3e:
         f0:f7:ef:17:23:d3:08:56:25:4f:2f:2c:26:3d:46:83:67:f6:
         a7:99:6d:dd:35:63:38:68:eb:22:94:23:30:7c:6a:7c:88:43:
         06:84:66:5b:9f:e9:b0:c0:a7:7b:6e:19:28:39:82:dc:15:ce:
         0d:a6:37:6b:69:f3:80:e1:6d:7b:21:18:e7:e0:7b:25:30:d8:
         98:5d:f0:4d:d8:92:40:43:88:d1:98:a5:62:78:74:78:a2:41:
         49:a8:df:ce:d3:77:51:f6:c1:81:a1:c3:8e:ce:86:3e:e7:2c:
         97:e4:ca:62:26:0b:fe:9c:a3:30:d5:19:1b:db:f5:51:4a:34:
         e1:97:6b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:23:04 2026 by rpki-client