Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/73337759-a616-394e-b9cd-b43d65aa772e.roa
File:                     73337759-a616-394e-b9cd-b43d65aa772e.roa (raw, json)
Hash identifier:          20hcskm3GpwvJBIr8HPYMuFXb6lyhnMpA0a+bFi0v1k=
Subject key identifier:   CF:25:92:A0:D5:C1:8F:C9:4C:2B:E9:BF:FB:9F:CE:17:3B:F3:26:5D
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D30872A821B0B8B6B36665CC0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/73337759-a616-394e-b9cd-b43d65aa772e.roa
Signing time:             Wed 07 Jan 2026 14:37:24 +0000
ROA not before:           Wed 07 Jan 2026 14:37:24 +0000
ROA not after:            Tue 07 Apr 2026 13:37:24 +0000
asID:                     213378
IP address blocks:        38.126.227.0/24 maxlen: 24
                          38.146.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:87:2a:82:1b:0b:8b:6b:36:66:5c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jan  7 14:37:24 2026 GMT
            Not After : Apr  7 13:37:24 2026 GMT
        Subject: CN=cebe1ece-808a-412d-97a6-7f0de84b7cea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e1:d0:73:c1:31:9d:14:2b:cb:d9:b3:33:be:
                    aa:a2:7d:f9:9f:a4:5e:0f:5b:9b:5b:5d:50:a6:f9:
                    e2:5b:0c:17:8f:db:07:09:c2:a1:c8:75:2e:89:31:
                    57:08:86:8b:0b:63:7e:7f:4f:b9:29:2b:a8:7f:3f:
                    b7:06:14:b2:5c:9d:97:c9:88:d2:71:ec:a4:7a:14:
                    b5:ae:fc:63:b3:69:c6:f6:02:98:a9:5a:6d:e0:da:
                    df:9e:b7:bb:82:f0:2c:38:e6:4c:4d:91:11:be:27:
                    4d:fa:78:e3:6a:e0:f5:1e:52:8f:1d:54:d7:94:70:
                    40:4e:23:08:52:26:a4:e9:03:2f:94:a8:0a:e6:a0:
                    43:ef:69:d1:78:59:cd:d5:dd:0e:24:13:2e:42:7b:
                    75:ff:f5:77:92:09:8c:3c:b4:40:68:61:0b:63:cb:
                    c7:c8:ca:d9:a1:9b:2e:f9:6d:ec:c4:60:2f:07:63:
                    6c:fe:e8:9e:6d:4c:c5:9e:03:87:bb:c1:54:a7:21:
                    94:e3:ae:3c:40:e7:99:f4:1c:b2:47:d0:da:c5:30:
                    09:06:96:85:cf:27:09:49:32:9c:dd:07:3b:6e:aa:
                    a5:06:03:18:c4:8d:20:99:90:e3:d1:28:37:a2:33:
                    ff:28:7b:b6:54:00:06:70:ac:ec:30:9c:34:01:69:
                    41:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:25:92:A0:D5:C1:8F:C9:4C:2B:E9:BF:FB:9F:CE:17:3B:F3:26:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/73337759-a616-394e-b9cd-b43d65aa772e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.126.227.0/24
                  38.146.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:bb:31:16:9f:47:71:e1:f5:a6:e5:b7:7f:f8:21:88:76:cd:
         74:88:58:0e:f7:c7:91:71:5c:72:c5:8e:2e:8f:2c:6d:6f:22:
         b9:d1:db:a0:c7:0e:a7:39:80:4a:82:0e:0e:f4:50:87:e7:48:
         98:5a:cc:c2:fa:1a:5e:ac:59:89:49:49:bc:50:8f:86:ea:cb:
         6f:d6:23:d0:8f:18:27:db:2e:bc:31:49:a1:50:49:8b:ef:03:
         3a:99:c8:7d:94:a6:cb:12:6a:b7:e9:a0:ee:43:7c:50:21:1d:
         5a:ef:de:2b:12:c3:4f:33:44:e0:94:53:a4:96:46:d7:dd:d1:
         a2:28:74:f7:8c:36:91:82:cb:75:f2:35:28:23:ab:11:33:db:
         df:d5:83:77:6d:af:15:e8:00:71:19:1b:6c:37:ec:4d:0f:42:
         02:8c:9d:ab:43:1a:76:1d:78:66:36:62:27:eb:c8:f8:ac:a6:
         1b:8d:c9:a1:48:e8:29:7e:b1:c4:0c:a9:c5:fc:e2:59:0c:38:
         32:9e:e6:f7:8a:d1:bd:40:bb:60:a7:c5:e6:59:0a:cb:4b:5c:
         74:3a:50:2b:be:1e:4c:29:f0:ab:0e:69:6d:fe:64:0e:96:84:
         fb:22:3f:b3:06:bf:77:5e:1f:83:84:63:b2:a7:02:e0:e6:fd:
         23:16:d4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:28 2026 by rpki-client