Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/80a0254d-0224-387c-8f96-f96dfad7eef8.roa
File:                     80a0254d-0224-387c-8f96-f96dfad7eef8.roa (raw, json)
Hash identifier:          GhmO8tnGcFjGZucMeCyQTdf+hAB64rOvP8FbNHMFlZQ=
Subject key identifier:   A5:C7:40:1A:ED:EF:DA:2C:D5:EB:6D:FE:30:06:34:FC:B4:6F:26:FD
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F27F2617AEB1107551771E080
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/80a0254d-0224-387c-8f96-f96dfad7eef8.roa
Signing time:             Sun 13 Sep 2026 01:00:12 +0000
ROA not before:           Sun 13 Sep 2026 01:00:12 +0000
ROA not after:            Sat 12 Dec 2026 02:00:12 +0000
asID:                     274845
IP address blocks:        38.130.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:27:f2:61:7a:eb:11:07:55:17:71:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep 13 01:00:12 2026 GMT
            Not After : Dec 12 02:00:12 2026 GMT
        Subject: CN=6565883a-d661-4dad-a1b2-8c139d37e70b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:91:33:da:91:d5:c1:ee:ca:63:0d:ae:02:a3:
                    8e:73:73:f5:e1:87:db:04:47:ea:a0:59:94:c7:76:
                    19:79:40:9c:b9:3d:18:2d:f2:9f:34:2f:a8:ea:46:
                    7e:e3:d2:5b:f1:8f:03:72:41:07:a2:43:22:e5:4a:
                    da:fb:c8:0a:9a:60:68:57:37:b7:31:7c:f1:1a:5a:
                    c5:ad:d4:48:bc:46:bf:7c:dd:62:a4:f7:13:13:10:
                    c6:81:cd:d3:53:85:1c:20:f2:98:03:fd:ba:56:a4:
                    38:81:8d:cb:2b:b0:36:b5:62:dc:56:15:50:e8:c7:
                    b6:cf:a1:72:19:c0:7d:75:67:6a:ab:ba:8e:fb:5c:
                    d8:b0:8f:51:86:bc:d4:70:02:f9:48:4d:ef:5d:ff:
                    b6:9c:34:0b:17:89:b6:d3:f5:7e:0c:b0:c0:75:20:
                    89:0c:bf:32:91:4f:8d:92:8a:37:37:c3:a9:d3:00:
                    35:0c:a0:ed:9f:88:5d:21:fa:42:c3:f3:a8:66:ba:
                    91:a4:92:28:8b:e5:f0:54:0e:8d:32:d6:81:05:70:
                    b2:09:08:66:d1:4f:fe:c0:c8:9c:fe:d5:b5:9c:6f:
                    ca:3e:e7:d9:58:9e:4a:90:96:4a:df:39:3c:3c:52:
                    84:e2:a6:5d:c9:b9:1b:c0:dc:36:7f:30:69:4c:d4:
                    e3:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:C7:40:1A:ED:EF:DA:2C:D5:EB:6D:FE:30:06:34:FC:B4:6F:26:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/80a0254d-0224-387c-8f96-f96dfad7eef8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.130.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:c8:42:8f:c2:4c:f2:c8:5d:58:6b:16:c8:50:7a:27:ce:02:
         43:6f:ae:c6:d7:71:fe:71:da:a7:11:71:d3:2c:17:a5:f1:7a:
         e4:a0:74:0a:0b:d8:7f:77:d1:cd:07:3e:35:78:7b:29:71:9d:
         d2:1f:e4:a7:3d:6d:79:f3:63:d7:6f:68:16:29:c4:b1:03:29:
         db:b6:40:d6:f4:ca:f7:95:ec:3e:c8:9c:6c:dd:3e:92:48:ad:
         a0:81:b1:b5:e0:c5:6f:b1:47:88:bd:1c:af:c1:b8:06:e1:fa:
         5a:08:80:f7:31:95:e4:18:19:98:8b:f2:99:5e:01:a7:fd:35:
         f6:94:31:c7:4d:77:a2:8d:8d:3f:33:6f:30:4a:db:a7:11:d2:
         e9:f1:d3:f1:18:29:ac:86:7e:87:19:07:ee:92:c5:ff:43:19:
         15:2c:3e:8a:11:f7:dc:16:bc:ff:bd:ba:7a:44:97:03:59:81:
         e7:c0:70:3f:4d:f7:cf:61:e7:3b:1b:46:f3:c9:5e:12:d0:18:
         bf:73:b2:7a:25:fc:37:a8:d5:5d:f4:2e:8b:4a:81:9e:d3:01:
         43:04:42:63:50:66:d5:c2:39:b8:33:93:63:bd:81:fb:e0:11:
         46:7e:68:0a:d0:39:1e:b7:45:31:7c:24:dd:ff:9c:8d:f1:32:
         c2:ec:ba:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 17:38:43 2026 by rpki-client