Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6c6f0d02-0457-32ad-8ba8-8502c097ab6c.roa
File:                     6c6f0d02-0457-32ad-8ba8-8502c097ab6c.roa (raw, json)
Hash identifier:          UbwOahDMCoupZ66MGHjUIyFK9bNOgIv4Un9QvhqxV1Y=
Subject key identifier:   81:F9:6C:E7:AD:3E:BE:21:5B:7C:F1:60:07:A8:5C:3C:C6:2A:60:32
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F3CE2964E028ABF9B873DF200
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6c6f0d02-0457-32ad-8ba8-8502c097ab6c.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     272869
IP address blocks:        38.51.243.0/24 maxlen: 24
                          209.61.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:96:4e:02:8a:bf:9b:87:3d:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=3c6626da-1772-4e1c-8fb1-444af827954f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:93:85:24:56:fc:c5:fe:83:50:a9:83:13:6a:
                    f3:8a:d6:4e:8c:e8:47:34:a8:8d:9b:aa:b7:ef:11:
                    26:53:67:b2:09:2a:6a:e8:d8:6b:c0:56:26:6c:f0:
                    36:65:17:ef:33:8a:9c:74:1f:8a:a4:78:5f:5a:9c:
                    24:f4:6c:de:07:29:e5:80:34:cc:b9:41:59:b3:f2:
                    0e:77:ab:4e:e6:7f:ba:2c:6f:c9:ab:4e:48:d8:f4:
                    d0:3b:e2:ae:0c:25:41:0b:cc:46:4c:43:25:99:82:
                    47:da:3e:0f:02:07:50:b2:80:9f:bd:a6:db:9e:fb:
                    16:c6:da:cf:4d:70:8e:2c:1b:e7:c7:a9:de:43:75:
                    64:6b:c2:bb:1c:9c:74:60:b8:c1:5c:9c:9b:eb:7c:
                    fa:ca:6a:d8:92:92:34:e0:98:be:2a:13:b6:68:3a:
                    f4:75:de:e5:58:23:25:39:aa:58:9f:eb:66:a1:c7:
                    0d:9e:f8:8e:67:14:c4:99:99:96:c2:1b:13:22:25:
                    6a:ac:7e:95:40:2e:20:ff:5f:16:4b:f1:b7:ca:11:
                    98:f3:74:76:fa:ae:e1:20:c7:e0:49:8b:ab:4b:49:
                    02:96:ca:80:6e:86:93:f7:ae:73:a1:53:7d:62:ec:
                    c8:56:73:18:6f:3f:11:95:f1:1d:77:67:ef:74:c7:
                    7e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:F9:6C:E7:AD:3E:BE:21:5B:7C:F1:60:07:A8:5C:3C:C6:2A:60:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6c6f0d02-0457-32ad-8ba8-8502c097ab6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.51.243.0/24
                  209.61.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:68:20:06:e2:c6:e1:b8:14:74:1f:da:54:f0:0f:e0:7d:00:
         44:da:a9:cb:30:0e:8a:a5:43:4c:44:a6:3e:97:8e:ae:af:d2:
         24:35:50:ad:d6:03:d3:b9:e6:c8:b9:6b:46:25:b9:63:bb:9c:
         87:0e:dd:91:04:b4:a9:97:8d:7f:f8:a7:a2:9c:22:73:a3:b6:
         9f:9d:e6:1c:7d:84:c9:6e:a4:b1:0c:48:41:11:de:f5:71:bc:
         16:05:0b:77:50:d1:5b:14:fa:9f:87:d4:fc:22:45:97:d4:fb:
         9e:7d:ae:df:37:59:65:54:ae:be:68:0c:1f:5a:de:a3:4c:9f:
         16:9a:cc:1f:c8:0f:18:e4:46:3b:98:05:2c:35:4d:1e:00:62:
         d6:9b:ce:dc:01:88:49:d2:ed:e1:5a:dd:ca:04:b2:34:c8:98:
         eb:88:26:90:f3:2a:51:ef:46:60:47:ba:ee:de:6b:61:c7:79:
         99:d6:24:12:ee:6d:ed:89:8c:c5:32:75:c5:3a:af:6b:b7:00:
         f8:35:34:ad:1b:6d:38:2b:4d:aa:de:10:fc:fe:e5:fd:d3:d3:
         dd:04:e8:60:0e:6d:b3:22:49:3e:4a:8e:ee:d3:e6:89:13:4c:
         99:0b:40:3d:e8:c8:80:b4:9e:96:8e:88:66:01:0f:56:e4:a9:
         54:45:e1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 09:04:03 2026 by rpki-client