Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6bff27d7-2550-3d3a-94b4-4236665cde24.roa
File:                     6bff27d7-2550-3d3a-94b4-4236665cde24.roa (raw, json)
Hash identifier:          jEsxo/12PzJcEy6L8Nst/vgyrAoGmB/rWRdeky/Bk2k=
Subject key identifier:   9B:8F:3F:BD:7F:EF:56:94:C6:D8:0A:8A:CF:A3:B5:87:23:F8:F9:2E
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F498996EDEE472108ACEAEC80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6bff27d7-2550-3d3a-94b4-4236665cde24.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     272083
IP address blocks:        38.44.16.0/24 maxlen: 24
                          38.44.17.0/24 maxlen: 24
                          38.44.80.0/20 maxlen: 24
                          38.58.200.0/21 maxlen: 24
                          38.129.40.0/23 maxlen: 24
                          38.159.192.0/19 maxlen: 24
                          38.188.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:96:ed:ee:47:21:08:ac:ea:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=7fe4fae1-b6ca-45eb-b122-f730a3adb331
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:13:09:3b:49:3c:e4:69:34:7f:75:ac:02:29:
                    8d:3c:c9:58:01:ad:43:90:0a:4e:20:99:f2:58:c2:
                    b7:58:a7:5d:bc:14:a3:b8:a3:25:8c:0e:77:af:36:
                    b6:22:c9:fe:4c:3b:4e:a9:d1:6b:9c:aa:8e:60:00:
                    6a:d0:68:fb:4d:ad:2b:0e:63:e1:8b:a9:4e:78:eb:
                    52:a5:73:3c:06:c1:12:47:a8:0d:aa:65:9e:03:a0:
                    a1:3b:dd:a2:69:98:19:b6:43:9c:72:c9:ab:fd:c3:
                    26:84:c8:9e:27:1a:80:57:78:45:44:eb:12:c4:47:
                    9d:e0:1f:2b:50:14:b7:bf:ae:d4:88:b6:8c:04:9b:
                    e2:bf:77:8b:29:c3:da:6d:fc:18:96:db:8b:e1:64:
                    44:7b:fe:d7:7b:36:5f:3d:e0:ff:03:ae:2a:e6:71:
                    49:8e:81:57:0b:09:50:d7:4e:c4:7d:f1:e6:e4:e8:
                    0b:1f:04:1e:ea:38:a8:72:87:9d:65:3e:71:3a:6b:
                    a5:11:11:0f:57:e0:55:fa:24:1d:11:ca:03:cc:8e:
                    b6:ac:fc:80:23:c4:0b:de:04:96:19:16:b3:c9:e4:
                    fc:6b:6d:c4:fd:51:a8:46:6e:14:ac:af:fa:1d:e8:
                    f9:b4:56:7c:2d:2f:ca:6c:f0:13:99:a2:9a:61:1b:
                    09:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:8F:3F:BD:7F:EF:56:94:C6:D8:0A:8A:CF:A3:B5:87:23:F8:F9:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6bff27d7-2550-3d3a-94b4-4236665cde24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.44.16.0/23
                  38.44.80.0/20
                  38.58.200.0/21
                  38.129.40.0/23
                  38.159.192.0/19
                  38.188.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:a0:8c:8c:5c:37:5b:c6:0d:c0:02:97:66:84:5f:f0:57:d6:
         31:e0:b0:0c:e5:49:39:38:ff:37:7c:f7:6a:25:b6:94:4a:8c:
         9f:d9:07:40:c9:1a:b5:b2:11:50:4a:ad:1a:08:58:26:ce:ce:
         6e:a8:a5:3b:a9:43:3b:a3:58:a3:04:37:aa:e7:3b:9d:df:0a:
         ae:bf:1a:ab:84:67:45:50:a9:86:95:87:e0:96:55:a2:99:cc:
         3c:17:73:cb:0c:23:87:9b:af:45:ab:7b:37:49:b1:6d:d2:b4:
         65:c1:a9:6a:15:0f:7e:a4:37:ec:c0:02:eb:24:82:1a:90:3e:
         c7:1d:06:65:b6:d2:37:94:bb:a4:9f:11:c3:ba:d0:f9:c7:a7:
         16:d7:70:18:ea:99:b9:64:69:eb:2c:e3:1c:b9:1c:a7:22:41:
         a0:5b:aa:99:04:64:ee:56:6c:d7:8e:d8:b0:a7:8a:13:39:52:
         87:78:22:5f:d9:a8:35:9b:6a:ce:b8:42:11:7e:d7:70:f6:29:
         04:23:06:0c:18:b7:0a:7a:e7:26:bb:6d:6c:05:f7:11:76:d5:
         23:3b:20:5b:ca:75:5b:f4:52:1c:9b:fc:15:cc:c8:55:e4:70:
         b9:6d:52:dc:8d:19:45:80:4a:28:10:86:cc:8e:78:14:1f:17:
         5c:19:d0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:18:23 2026 by rpki-client