Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/707e460e-0208-32a2-9201-b1df7dc7bc51.roa
File:                     707e460e-0208-32a2-9201-b1df7dc7bc51.roa (raw, json)
Hash identifier:          QMawhmSVlQF9i5sySsBqBicLxcqIpxTycVsnNjbjIuQ=
Subject key identifier:   6E:3F:05:F1:3F:F8:4D:AE:F1:91:ED:E3:D8:A7:03:47:9E:F2:3C:D0
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F30528FCBE788F60978B0BA80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/707e460e-0208-32a2-9201-b1df7dc7bc51.roa
Signing time:             Wed 16 Sep 2026 01:00:12 +0000
ROA not before:           Wed 16 Sep 2026 01:00:12 +0000
ROA not after:            Tue 15 Dec 2026 02:00:12 +0000
asID:                     271803
IP address blocks:        38.56.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:30:52:8f:cb:e7:88:f6:09:78:b0:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep 16 01:00:12 2026 GMT
            Not After : Dec 15 02:00:12 2026 GMT
        Subject: CN=5811b7e0-7f37-4a6e-bc21-a802786a6882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d9:28:b5:d7:c8:eb:81:96:ac:a9:37:8c:fe:
                    b4:37:9b:5f:de:27:7d:af:2c:a6:52:d6:b3:40:3f:
                    57:1d:7b:ba:70:58:d6:36:8e:da:52:86:da:17:93:
                    c7:40:73:22:6e:c7:6b:69:36:b0:90:d8:95:9b:76:
                    69:53:a4:78:91:83:71:cd:db:6d:eb:89:26:8e:a9:
                    0e:b5:a5:67:9b:46:73:82:5b:ef:c9:70:45:14:6e:
                    09:03:b0:a3:cd:a3:0a:47:58:35:f2:64:39:62:ee:
                    6a:15:53:6d:a3:d2:d7:db:31:84:d5:96:f0:cc:13:
                    cc:e9:82:18:74:6a:83:67:bc:1f:ca:a5:61:d6:54:
                    76:7d:42:62:63:88:97:aa:ca:80:6b:1e:97:98:92:
                    4c:cc:91:b6:9c:8b:73:b0:9b:7f:52:12:e7:35:01:
                    27:d9:65:03:bb:22:9d:e2:fd:e6:36:9a:12:5b:fd:
                    7b:ca:36:bf:96:72:6c:a8:48:33:9d:62:ca:11:0d:
                    3f:1f:11:da:2b:60:88:cd:b1:65:cb:08:5c:96:72:
                    a3:77:64:0c:63:f8:b9:30:2e:c9:cc:9f:e2:e1:09:
                    42:53:53:28:2b:ea:a5:fa:1a:06:74:8b:52:55:59:
                    0c:7b:ac:71:14:d8:2a:4e:e8:06:34:ee:fd:2b:6d:
                    d4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:3F:05:F1:3F:F8:4D:AE:F1:91:ED:E3:D8:A7:03:47:9E:F2:3C:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/707e460e-0208-32a2-9201-b1df7dc7bc51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.56.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:7e:3b:58:e1:46:e0:b2:57:11:1c:f5:78:57:eb:7e:9a:f5:
         4b:fe:4e:8f:87:89:0a:63:61:6e:8d:5b:a9:1d:f5:f4:87:87:
         92:ee:43:ac:cc:c9:6f:0b:ec:80:56:b3:6b:ee:02:ef:7e:c9:
         c5:4d:ba:66:dc:38:d7:ce:ec:13:71:32:05:55:7c:48:6e:12:
         63:33:ec:d0:60:a2:39:db:3e:54:ea:c6:3f:68:3b:46:21:ed:
         d8:85:7c:cd:59:dd:2b:e1:ba:da:35:cc:db:01:5b:c7:51:8c:
         2b:2e:19:ea:67:8a:b0:91:a1:fb:6b:c2:d4:56:e6:79:5a:09:
         23:90:ab:6b:37:a6:66:b1:ca:5b:35:41:54:b6:2c:8a:35:7f:
         80:4d:f9:5d:d3:a7:cf:86:7c:c8:11:80:93:14:43:37:0f:ae:
         3c:a2:ad:67:6c:42:5b:46:9e:c8:40:3a:53:85:d1:91:a1:07:
         c9:f5:f0:4b:3d:63:7a:c7:7c:69:14:58:26:88:16:29:91:46:
         6d:53:d7:40:17:ac:c1:54:b1:a7:01:bc:26:76:d7:85:fa:bb:
         c2:28:c9:ec:d4:2c:8d:4c:b9:22:e3:bb:28:61:05:80:e4:f5:
         f7:c5:e1:43:9c:78:7e:54:99:c4:b0:b2:d8:ef:b6:98:21:ba:
         10:b6:ff:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:51:24 2026 by rpki-client