Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6e8e82b9-57f6-37da-a4e4-765cce0df783.roa
File:                     6e8e82b9-57f6-37da-a4e4-765cce0df783.roa (raw, json)
Hash identifier:          7eQE7BZ8L3NfOGLSOA8mBkBp/QPhOSSwig5GY0XH/Eg=
Subject key identifier:   CF:7D:BA:90:34:B2:5E:9B:6F:AC:63:FD:19:D7:C2:FF:76:2A:6B:BE
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F4C3D6F00C77FF61188FB2200
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6e8e82b9-57f6-37da-a4e4-765cce0df783.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     150044
IP address blocks:        38.159.122.0/23 maxlen: 24
                          154.21.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:6f:00:c7:7f:f6:11:88:fb:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=35a20f95-b7f8-417e-906c-0de18911eca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:54:fb:82:3b:31:11:ec:6f:e4:8d:01:0a:0a:
                    ff:83:c6:d6:f6:27:0b:32:e5:46:15:08:31:9d:ae:
                    ec:80:c6:ad:83:88:10:32:26:1d:1e:5a:4a:04:f4:
                    76:24:48:93:62:3b:6a:65:b9:4e:f5:99:79:3b:02:
                    ba:e5:59:8f:c2:e5:db:0c:71:c8:d2:34:b1:e6:4a:
                    8d:eb:40:ae:49:93:7e:f8:b8:7f:4f:63:53:d2:15:
                    78:8c:01:e4:39:d8:1d:e8:34:02:04:a7:90:38:34:
                    21:fb:cd:a8:ff:19:9d:b7:7e:63:53:4d:58:9e:31:
                    6b:3d:fa:25:08:33:7d:3a:99:7e:45:05:05:8c:96:
                    7e:07:0b:71:05:8a:20:b7:3f:ac:ef:f6:92:63:e9:
                    2c:52:6c:62:de:d2:35:f6:56:b5:50:38:e6:d8:01:
                    26:ec:4c:83:15:1f:f7:15:49:b4:bb:8a:09:a2:93:
                    d1:26:f3:b6:18:9c:d8:2c:de:18:20:87:44:b9:03:
                    61:12:2e:e8:27:94:95:29:b1:b3:d0:e0:3b:98:1e:
                    1d:f4:84:60:03:c1:bf:db:39:30:4e:b7:c4:08:50:
                    56:91:2b:98:85:83:90:1b:a5:94:59:bb:86:3c:e8:
                    56:88:cf:83:11:c1:ad:26:34:00:fe:59:9f:a8:82:
                    e2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:7D:BA:90:34:B2:5E:9B:6F:AC:63:FD:19:D7:C2:FF:76:2A:6B:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6e8e82b9-57f6-37da-a4e4-765cce0df783.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.159.122.0/23
                  154.21.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:23:09:00:fd:31:aa:b7:aa:e3:51:1e:23:75:ac:5a:d6:d3:
         cf:6c:e4:9d:ad:05:0d:78:1d:b5:a1:c9:a4:04:a9:73:22:ba:
         7e:13:48:15:fa:8b:35:62:52:36:82:7c:1a:2f:1c:1d:d0:0d:
         be:e9:a8:af:c3:4b:e7:78:3e:cd:2a:91:e0:88:53:d8:3f:07:
         18:30:75:39:30:fb:74:d3:48:2b:82:be:c8:fd:7e:1d:0a:5b:
         5f:c3:92:22:80:f7:ce:12:c1:bd:ca:c8:f4:df:14:3b:62:ff:
         82:b8:38:9e:d2:ec:f9:90:21:26:bf:39:73:3f:dc:f7:69:04:
         d1:53:28:4c:88:df:73:62:e9:6f:e2:a9:e5:26:33:b1:6c:7b:
         27:95:07:34:89:79:5b:86:a2:1c:15:bd:03:10:bb:55:e4:b7:
         e3:37:03:97:61:58:11:74:95:b7:17:6d:71:77:ef:a9:c3:0c:
         39:09:6d:c5:75:55:73:2b:d4:ab:9e:b4:41:4b:6e:dc:07:b3:
         16:49:e1:4d:10:23:83:81:62:92:be:e5:7b:aa:03:61:20:7b:
         57:20:62:11:79:d8:d3:5a:f8:e0:b6:c1:99:25:da:cd:78:61:
         a5:9c:ae:5b:e9:95:17:35:0e:32:91:03:8e:e9:9b:33:e7:c9:
         38:bc:a0:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:46:45 2026 by rpki-client