Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/7c11a7bf-0e2c-3fd2-b1b6-17c93ffd8a18.roa
File:                     7c11a7bf-0e2c-3fd2-b1b6-17c93ffd8a18.roa (raw, json)
Hash identifier:          Smjv7vnBK4d7ke/Vby9pPD4k3EFyepCHjmy9BsSrVEE=
Subject key identifier:   D4:93:09:47:41:DE:47:4C:39:48:DC:35:2A:AF:B0:17:83:0D:8E:3D
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D30840C7A780C57E575CFA200
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/7c11a7bf-0e2c-3fd2-b1b6-17c93ffd8a18.roa
Signing time:             Mon 16 Mar 2026 17:06:26 +0000
ROA not before:           Mon 16 Mar 2026 17:06:26 +0000
ROA not after:            Sun 14 Jun 2026 17:06:26 +0000
asID:                     212616
IP address blocks:        38.82.22.0/24 maxlen: 24
                          38.83.32.0/23 maxlen: 24
                          38.83.34.0/23 maxlen: 24
                          38.83.36.0/23 maxlen: 24
                          38.84.206.0/23 maxlen: 24
                          38.210.103.0/24 maxlen: 24
                          38.211.124.0/24 maxlen: 24
                          130.117.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:84:0c:7a:78:0c:57:e5:75:cf:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Mar 16 17:06:26 2026 GMT
            Not After : Jun 14 17:06:26 2026 GMT
        Subject: CN=bf12c957-86b7-4400-85d6-204f5bdc4656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5a:72:d4:19:07:10:24:fb:22:f7:ff:bc:7d:
                    98:dc:32:a2:cb:b4:30:1d:b7:fb:1a:74:64:43:f2:
                    91:be:f3:c5:db:e8:ef:9b:c9:3e:10:bd:cd:54:8e:
                    fc:fb:ff:b3:3d:08:a3:04:91:4b:82:c5:60:3f:31:
                    d1:12:15:79:78:56:d6:99:18:ad:92:7f:26:54:38:
                    1b:6b:6c:5a:22:fa:d0:f1:03:cc:8f:68:2e:0f:74:
                    81:5c:31:71:90:fa:58:d4:9d:e9:d5:36:e8:43:9d:
                    bd:b8:e2:a3:df:96:18:4f:d2:60:d3:a4:c6:52:a3:
                    77:3e:c2:4b:86:22:df:ab:79:e8:c7:f5:31:3a:8b:
                    9d:1c:65:ef:27:70:94:e5:6e:cf:62:10:f4:39:12:
                    9f:5c:37:78:18:bf:08:82:08:71:94:1d:c8:64:db:
                    da:2d:14:d8:f8:9b:a6:bf:89:33:d0:f4:5d:36:ad:
                    50:6b:1e:34:08:35:d3:d0:b7:83:f1:74:fc:54:56:
                    b0:ac:60:d0:6f:6f:55:1c:c9:8c:8c:a7:5b:de:b7:
                    8e:1b:0b:f1:da:0e:af:e3:3c:24:8b:50:ab:28:d2:
                    cc:64:6a:dc:b0:8e:f2:0d:4d:a3:6b:8e:35:d0:fb:
                    a3:3c:d8:8b:dc:f7:e4:18:6a:7c:80:31:0b:b1:28:
                    dc:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:93:09:47:41:DE:47:4C:39:48:DC:35:2A:AF:B0:17:83:0D:8E:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/7c11a7bf-0e2c-3fd2-b1b6-17c93ffd8a18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.82.22.0/24
                  38.83.32.0-38.83.37.255
                  38.84.206.0/23
                  38.210.103.0/24
                  38.211.124.0/24
                  130.117.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:cc:3e:80:30:8c:bb:a7:b9:cc:f8:e0:09:4c:3d:fd:0d:30:
         23:67:56:61:1f:04:ed:70:09:3d:ce:44:5d:f7:12:20:ec:0f:
         23:92:ed:a3:7e:4c:f5:cf:eb:50:d8:b0:73:e2:d8:2b:7c:33:
         1a:3f:79:7f:f5:4c:56:bb:27:d9:e4:b8:ea:de:fc:bc:98:5a:
         0c:b2:41:1d:2a:9a:de:6d:9a:3c:78:df:12:83:f5:2a:fc:fd:
         62:a9:e9:1b:17:d5:b9:e5:af:87:51:14:d6:18:04:64:af:15:
         5e:90:24:bf:08:5a:3f:75:7e:90:f7:7e:52:ba:09:ca:c1:2d:
         e7:87:77:6c:db:39:31:34:b0:a2:66:77:cf:fd:57:77:9e:8b:
         84:bf:c7:e3:93:fd:6b:81:c9:38:58:fa:46:ef:d4:1f:9e:10:
         ef:af:03:a4:17:84:f8:2f:16:d7:47:ca:5e:dd:57:8a:ac:af:
         64:00:34:53:b1:f7:4a:5b:70:20:63:ff:6f:63:5c:a2:61:33:
         40:db:65:91:a7:0c:6e:26:91:ad:67:c8:c9:22:8f:74:c2:94:
         b8:65:07:b9:ac:54:ec:26:05:05:9b:85:5d:30:a0:a2:6e:2b:
         ec:bb:8a:8a:37:2c:b2:c5:bf:f4:63:0a:4b:ee:0d:a7:86:fd:
         54:d6:58:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:28:06 2026 by rpki-client