Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6bcfd916-304b-3152-96e3-e43e6b36d353.roa
File:                     6bcfd916-304b-3152-96e3-e43e6b36d353.roa (raw, json)
Hash identifier:          KNkU2gur67fifO53RPUONMw4iYMjq4atnJUnCfUukyw=
Subject key identifier:   B3:5F:F6:03:3F:ED:82:0E:31:E4:0F:6C:0C:84:3C:6F:FA:4C:CA:FB
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584DCAFB1C9E957CEABF842FF622
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6bcfd916-304b-3152-96e3-e43e6b36d353.roa
Signing time:             Mon 11 May 2026 01:00:24 +0000
ROA not before:           Mon 11 May 2026 01:00:24 +0000
ROA not after:            Sun 09 Aug 2026 01:00:24 +0000
asID:                     4922
IP address blocks:        38.44.224.0/21 maxlen: 24
                          38.46.160.0/21 maxlen: 24
                          38.46.176.0/20 maxlen: 24
                          205.164.184.0/21 maxlen: 24
                          205.164.224.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ca:fb:1c:9e:95:7c:ea:bf:84:2f:f6:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: May 11 01:00:24 2026 GMT
            Not After : Aug  9 01:00:24 2026 GMT
        Subject: CN=c7780662-8ea5-443f-aca5-1f38785669e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c7:69:b7:b4:10:42:8c:68:60:e2:7b:e9:22:
                    1a:ef:7d:cf:81:69:ed:55:fe:81:a8:e0:eb:1f:02:
                    2b:bd:a7:ba:96:0e:45:27:49:46:e4:c1:79:30:7e:
                    e0:ba:a2:03:65:d5:1f:68:0c:80:9b:20:61:1b:91:
                    95:83:90:7a:8f:c6:d6:f1:76:88:be:a1:10:36:5c:
                    76:d2:32:11:5c:2f:aa:3d:4d:cc:bc:2a:af:9d:2e:
                    4f:32:f7:04:31:9e:51:6f:45:4d:e9:10:b8:8b:ff:
                    0a:62:b6:68:54:f6:8e:d4:03:b1:01:e1:37:c3:e0:
                    73:5f:b9:c0:c2:96:91:40:f7:56:13:da:25:50:fa:
                    ee:98:3b:4e:f9:50:72:dc:18:99:a6:25:d1:8e:81:
                    81:e4:77:88:45:3b:d8:57:13:d3:5e:2c:24:18:bd:
                    4a:d2:36:8d:91:88:a1:36:31:f8:f0:16:2d:16:35:
                    5b:a5:29:08:6e:57:97:da:12:89:c3:84:c2:b8:19:
                    3b:3f:f5:fe:87:68:3e:a1:33:a5:42:70:1b:56:bd:
                    af:9e:63:3d:67:42:b1:5c:2a:97:aa:3d:dd:6a:24:
                    4b:4f:27:de:33:7d:24:fb:d0:f0:28:d5:26:fb:45:
                    90:53:a4:8a:18:47:ef:97:1d:68:4d:9d:b0:0a:62:
                    07:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:5F:F6:03:3F:ED:82:0E:31:E4:0F:6C:0C:84:3C:6F:FA:4C:CA:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6bcfd916-304b-3152-96e3-e43e6b36d353.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.44.224.0/21
                  38.46.160.0/21
                  38.46.176.0/20
                  205.164.184.0/21
                  205.164.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:16:cc:2e:09:b6:e7:00:1c:c1:40:f2:7c:93:fb:57:94:53:
         b8:b8:b6:65:d7:1b:48:be:fb:9c:b4:b6:8f:20:7f:98:86:54:
         c1:57:89:1c:b0:0d:ee:4d:c5:21:29:15:a9:c3:b9:59:13:4e:
         ec:93:9b:1a:52:02:db:7b:92:3e:f5:35:8f:e8:8d:b0:bb:a1:
         5d:86:37:2b:3f:f5:75:53:1e:c8:fc:ae:5f:8c:03:d3:1f:58:
         29:61:75:5d:d7:ae:f5:66:0b:29:dc:70:87:bc:72:ff:f3:e9:
         09:92:71:55:a9:a2:69:da:39:2c:d7:3f:61:7f:3e:21:d4:71:
         9a:a2:f3:46:60:8e:c7:73:88:a9:31:37:86:4a:58:d5:77:b1:
         3c:e4:ce:e7:bd:88:de:8a:a0:11:78:33:14:b2:58:94:ac:04:
         ea:e8:e9:09:e1:31:1f:ce:86:76:07:1c:ac:c6:38:6b:8f:3d:
         84:6f:4e:71:4b:dc:59:71:7f:2f:f0:cc:d4:f5:8c:08:96:98:
         44:a7:27:6c:74:61:e4:cd:ae:ce:93:7d:32:be:b7:a6:21:53:
         10:7a:b6:f1:39:90:2a:b0:a1:be:18:ef:cf:69:a7:b0:42:99:
         35:65:77:19:36:c1:17:3d:44:83:09:01:bd:33:44:d6:d4:05:
         87:13:cf:72
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 05:38:48 2026 by rpki-client