Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6422072b-281c-349e-84fe-88af915c55e7.roa
File:                     6422072b-281c-349e-84fe-88af915c55e7.roa (raw, json)
Hash identifier:          keK3T9DNyuO4O0KVgofznikRagyv0n/KZQRKKr00aqQ=
Subject key identifier:   59:14:EC:07:D2:16:51:5A:13:ED:D1:83:04:E3:5C:06:D2:AB:71:01
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F1F9242031DFE591131A2F2F0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6422072b-281c-349e-84fe-88af915c55e7.roa
Signing time:             Thu 10 Sep 2026 01:00:12 +0000
ROA not before:           Thu 10 Sep 2026 01:00:12 +0000
ROA not after:            Wed 09 Dec 2026 02:00:12 +0000
asID:                     147237
IP address blocks:        38.108.230.0/24 maxlen: 24
                          38.109.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1f:92:42:03:1d:fe:59:11:31:a2:f2:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep 10 01:00:12 2026 GMT
            Not After : Dec  9 02:00:12 2026 GMT
        Subject: CN=a5c4e559-539f-4de1-96f9-48e20e905655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e2:e8:96:e3:59:51:ac:9c:d1:09:71:9e:ea:
                    21:85:c6:ae:58:98:e4:37:a9:3d:f0:61:19:84:95:
                    f1:14:de:13:ab:cf:63:2c:6e:f1:94:e8:cc:27:6d:
                    db:74:bf:1b:39:db:39:b6:03:fb:e3:23:25:d6:45:
                    e8:e0:f5:5c:38:f7:ab:6c:cf:df:61:d3:da:f2:de:
                    b4:47:3c:3a:93:46:36:ab:ed:8f:6c:c1:0d:1c:7e:
                    c3:47:63:fe:9f:6f:fa:0c:b8:95:ae:9e:c8:61:e8:
                    a5:36:db:89:67:8f:bf:92:6e:a1:31:9f:9e:e9:ea:
                    01:78:56:d7:16:08:19:49:07:7d:8d:11:95:f4:89:
                    92:f6:7d:24:c6:2c:09:37:fb:72:75:77:ce:c6:e7:
                    1e:b4:14:ad:b0:6d:8a:a2:85:6c:7d:c4:dd:12:9e:
                    cc:86:97:ff:7a:a5:16:db:e1:be:da:42:2d:c0:f8:
                    4a:c1:ec:b3:82:46:58:17:bd:68:9d:84:64:c4:65:
                    5d:a7:00:25:a6:9f:87:f9:0d:54:13:6b:8e:95:5c:
                    3e:91:4b:bd:ed:ee:14:46:4a:a7:7d:07:f3:2c:0c:
                    a3:50:1d:19:3b:58:30:4b:63:a4:06:50:f8:95:a8:
                    f8:3c:5f:e7:81:8b:6a:ee:a6:b6:cc:d4:67:74:5b:
                    09:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:14:EC:07:D2:16:51:5A:13:ED:D1:83:04:E3:5C:06:D2:AB:71:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6422072b-281c-349e-84fe-88af915c55e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.108.230.0/24
                  38.109.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:49:05:3a:30:56:1a:cc:1e:ca:87:82:3e:fe:75:53:e7:cb:
         08:5c:d9:0d:c0:cd:97:ce:e5:75:98:cb:8a:33:dc:0a:f6:35:
         33:fb:bc:1e:00:5d:82:2a:bd:ae:1e:8a:b2:7e:48:ef:71:9f:
         7f:9c:0d:2e:6b:51:11:3f:db:a5:b5:53:5f:ab:24:5a:21:e0:
         01:b9:fc:f7:8a:50:a0:a8:79:ce:9a:67:56:22:62:5f:e0:b5:
         6c:78:41:c0:a5:b3:b1:b2:90:81:8f:a1:5e:1a:03:7a:56:03:
         58:d8:e4:9d:6f:e6:51:7a:5c:81:22:54:bb:e3:0b:73:f3:f9:
         98:73:af:5c:36:0b:57:4b:f6:00:f3:b1:76:fd:ad:8d:36:ff:
         8c:aa:ce:0a:09:2e:06:ea:8f:d7:eb:aa:8d:3f:22:68:46:3c:
         63:18:f1:63:33:c4:29:32:64:7b:25:8b:58:4f:06:f9:6b:24:
         2b:63:21:5c:ea:b2:c9:bf:33:1d:bb:c2:b9:20:f4:e0:74:5d:
         e5:23:32:18:4d:2a:a2:8d:a1:f2:ee:df:76:e9:a6:28:7f:3c:
         a9:f0:a2:28:b4:eb:1b:ec:17:3e:02:e5:67:01:8d:f6:26:64:
         8c:f8:af:de:11:d2:83:b4:da:39:ca:34:b7:d6:f2:5a:ad:7c:
         5a:17:4c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 17:34:23 2026 by rpki-client