Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6a652b3a-dff6-3ba2-8e08-6e9bc446469d.roa
File:                     6a652b3a-dff6-3ba2-8e08-6e9bc446469d.roa (raw, json)
Hash identifier:          9t+iRZhOFHRoX82cbKyyGaQvK6m015zVEcVs94VxG+s=
Subject key identifier:   96:E7:D5:45:97:75:B3:01:9B:18:F4:A6:9A:C8:12:A1:A4:1B:A3:10
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584B8B7DEB593C4A2B38EC94A258
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6a652b3a-dff6-3ba2-8e08-6e9bc446469d.roa
Signing time:             Thu 16 Oct 2025 21:38:46 +0000
ROA not before:           Thu 16 Oct 2025 21:38:46 +0000
ROA not after:            Wed 14 Jan 2026 22:38:46 +0000
asID:                     271907
IP address blocks:        38.51.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:7d:eb:59:3c:4a:2b:38:ec:94:a2:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct 16 21:38:46 2025 GMT
            Not After : Jan 14 22:38:46 2026 GMT
        Subject: CN=f78829a1-60f6-42e0-abc1-be9538d16766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:14:c4:f7:38:25:f4:1f:81:0f:ae:7d:b4:25:
                    3b:3c:81:80:47:ec:0b:77:57:1e:1f:a4:30:ca:9f:
                    96:cc:a5:8b:fb:1f:96:95:70:62:e6:1c:78:d4:5f:
                    50:6e:1c:13:0c:4e:ee:fd:e0:3d:af:0e:c2:65:e7:
                    d9:0f:6f:f9:1f:6a:4c:ac:d7:1d:14:f3:55:09:0b:
                    ab:3e:68:af:31:fd:e1:5b:b6:31:3f:d8:de:77:a1:
                    9b:d4:c2:51:31:7d:a0:89:f1:12:18:80:96:c6:f6:
                    05:86:26:e3:da:fd:b2:8f:ac:94:cb:21:2a:42:a7:
                    14:3f:4b:ec:56:6e:5c:05:30:85:86:8e:7d:d0:4a:
                    59:dc:3b:02:be:8d:49:b9:c4:9a:8e:49:0e:fd:6e:
                    0d:8b:00:f8:5a:d7:94:f2:ce:26:e4:38:6e:c5:ed:
                    18:68:b0:d1:51:4f:92:3f:1c:0d:42:1a:a1:d4:1d:
                    ad:dc:1b:85:82:51:fa:ae:0b:86:41:f2:44:ac:de:
                    7a:1d:b8:4f:fd:85:f9:32:b6:e4:a7:33:ac:83:52:
                    b5:ca:00:e9:62:03:54:a6:15:46:2d:a0:6f:29:92:
                    d6:a6:c3:00:07:89:13:a6:72:07:60:8d:37:f9:b5:
                    88:ba:97:56:45:b4:ea:16:ff:77:fc:fa:1e:58:b9:
                    e7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:E7:D5:45:97:75:B3:01:9B:18:F4:A6:9A:C8:12:A1:A4:1B:A3:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6a652b3a-dff6-3ba2-8e08-6e9bc446469d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.51.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:ff:a5:61:8a:69:53:e9:0c:42:99:7f:32:6d:80:d2:87:0b:
         08:b8:14:3f:b2:ef:ff:21:59:04:2a:ee:13:65:06:28:8d:31:
         10:a7:d2:79:82:ed:fd:85:c7:6e:bf:39:f1:61:02:7a:7e:18:
         25:c2:49:7f:f3:01:54:1c:71:40:62:c5:51:cd:3a:60:06:eb:
         75:c2:a5:22:18:d9:89:9a:c1:57:03:a3:1b:a0:0c:76:ca:03:
         44:fb:56:c9:ad:cb:bc:3c:df:74:91:d7:7c:d3:1c:ba:54:57:
         62:a5:d1:a7:8b:13:90:3c:58:85:88:ab:08:55:ec:87:cf:8b:
         1a:02:9a:4c:e4:56:73:82:3e:de:d2:2a:09:c9:53:52:50:29:
         02:1d:1c:ac:42:82:36:2f:b5:9a:91:21:7d:ce:89:1d:4d:83:
         72:26:a3:be:ac:85:13:74:96:a5:09:4d:0d:b1:47:90:d8:36:
         b5:b6:00:0f:dc:18:d6:25:f7:27:44:8e:11:6c:60:53:18:c1:
         4b:57:b2:6d:75:1c:b2:0f:d4:c6:0f:f4:86:0c:81:a2:d1:7a:
         95:0c:a9:70:79:2d:fe:9c:92:2c:89:ff:45:6d:05:98:06:43:
         92:ea:9f:fb:ab:b8:87:a8:89:77:9b:bf:3c:ce:5e:72:a8:44:
         de:e4:fa:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:52:43 2025 by rpki-client