Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/718c7d81-d37e-3832-a526-ea9f1f684b8e.roa
File:                     718c7d81-d37e-3832-a526-ea9f1f684b8e.roa (raw, json)
Hash identifier:          6D8J8bx3YQZWAdLZgDef5lsccaWm6VnTXfKVI5M/a1M=
Subject key identifier:   8C:9F:A3:EB:F9:64:67:01:84:AF:22:93:F4:E7:B5:A6:4A:2C:D0:2F
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E842A3E566F513917995BB766
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/718c7d81-d37e-3832-a526-ea9f1f684b8e.roa
Signing time:             Thu 16 Jul 2026 09:00:12 +0000
ROA not before:           Thu 16 Jul 2026 09:00:12 +0000
ROA not after:            Wed 14 Oct 2026 09:00:12 +0000
asID:                     33647
IP address blocks:        38.158.32.0/19 maxlen: 24
                          206.85.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:84:2a:3e:56:6f:51:39:17:99:5b:b7:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jul 16 09:00:12 2026 GMT
            Not After : Oct 14 09:00:12 2026 GMT
        Subject: CN=2423841e-9e5a-4d84-bbbf-f95b8376cb76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c0:10:89:0d:5c:28:c4:e0:2b:36:9b:a6:81:
                    d2:8f:08:63:7f:a1:03:0d:76:9b:7f:f8:7a:be:5e:
                    b7:77:4e:61:47:71:73:f1:df:0f:c5:07:f7:9b:d0:
                    99:2b:02:b1:f1:b3:15:c7:8b:71:c6:10:ae:38:e9:
                    6e:1d:6c:ab:ce:4d:f8:ab:d7:42:d3:0c:4d:74:6a:
                    bd:a3:fd:5b:43:ed:5d:4e:12:49:29:13:01:29:c9:
                    56:a9:3c:bc:0e:98:d2:56:ec:39:a7:23:8e:73:28:
                    c5:c5:52:7b:88:ed:35:b8:95:be:41:5b:81:d7:eb:
                    c9:cd:1e:1c:1d:d0:a6:0e:06:a8:56:1a:09:73:8e:
                    6e:57:83:e2:29:6e:95:82:d4:02:6f:9c:21:d3:ad:
                    6b:b2:95:cd:35:e7:c3:5b:f7:cf:27:33:ed:b8:f2:
                    ee:b1:fa:e5:e1:ee:f8:49:6f:29:fc:02:f7:6e:cc:
                    28:9c:b5:ed:6a:77:6c:e3:5b:85:d9:13:1a:44:cc:
                    5b:a9:e4:15:89:a5:76:96:59:67:f0:79:4e:7d:dd:
                    25:00:53:22:0e:39:30:ab:5b:76:ff:7c:0d:6e:f0:
                    95:73:9d:e3:23:e0:8d:86:36:9e:2e:c3:f8:fd:e9:
                    25:c3:10:57:bf:dd:03:51:dd:52:02:eb:ff:fc:d1:
                    38:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:9F:A3:EB:F9:64:67:01:84:AF:22:93:F4:E7:B5:A6:4A:2C:D0:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/718c7d81-d37e-3832-a526-ea9f1f684b8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.158.32.0/19
                  206.85.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:3f:1d:c6:d9:6b:6f:8c:e6:7f:dd:7d:d0:94:f8:d1:5c:f0:
         1f:ec:3f:87:a6:08:88:de:d1:5e:af:63:f2:72:44:f3:d7:09:
         fd:7f:38:8c:4a:2d:eb:06:e4:a7:1b:80:be:29:bc:c5:fa:da:
         be:54:d3:dd:0d:29:f1:b3:f0:e7:34:cd:a0:15:e4:48:13:9c:
         08:61:c7:fe:6c:35:b8:f1:c0:f2:dd:5e:45:17:52:02:b9:ef:
         26:98:74:a3:58:fe:e8:65:b8:4e:ca:4c:36:97:fc:e6:b3:72:
         2a:23:be:cc:67:af:c0:e4:17:21:bd:e2:81:0c:b8:26:dd:f1:
         6d:d7:26:83:f8:a2:b1:2e:07:10:ac:f8:57:a3:0b:0a:b1:03:
         7b:a7:5e:37:6d:0d:34:0b:bb:bd:68:82:05:cd:5e:fe:26:2c:
         33:d4:89:bb:e4:9f:9d:82:1e:3b:f9:93:bc:73:75:56:5c:1d:
         71:8b:4a:98:68:73:b7:42:c3:c3:78:af:8d:43:b8:b0:40:8f:
         4d:f3:1e:4a:28:c5:12:86:91:f2:73:96:5a:df:04:68:f6:b3:
         64:de:73:20:d8:3a:25:63:36:aa:88:87:54:85:46:ef:82:1d:
         c4:3f:ff:eb:55:50:0b:4a:02:99:b1:3b:16:12:ee:fb:c3:83:
         af:40:54:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:14:25 2026 by rpki-client