Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/84a611c4-8da6-3344-b367-ecd628352675.roa
File:                     84a611c4-8da6-3344-b367-ecd628352675.roa (raw, json)
Hash identifier:          iNfoAUQIbsInb9uUxwDoQ+eVh4ls0gO0xeC7FP/tFMQ=
Subject key identifier:   2E:D4:6F:83:6A:02:7B:1C:ED:42:FD:4F:6F:E8:D0:0A:CE:A5:15:47
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F4987F3EC64DDCAA29A7B2A00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/84a611c4-8da6-3344-b367-ecd628352675.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     150161
IP address blocks:        38.175.0.0/19 maxlen: 24
                          149.71.176.0/20 maxlen: 24
                          154.40.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:f3:ec:64:dd:ca:a2:9a:7b:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=e5c76046-fbe3-43ea-934e-90c4bff7a094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:09:ff:c1:17:39:64:fc:f5:5d:91:54:0a:8d:
                    fc:99:50:96:9e:e7:53:3f:2c:d0:2f:6a:12:9a:81:
                    db:16:c1:99:11:78:24:49:86:f7:97:70:a1:69:e9:
                    06:d3:3d:66:9b:e8:75:93:c1:5d:35:29:76:5f:a5:
                    42:b5:2d:80:75:96:57:d1:8e:57:0a:47:f0:b8:38:
                    2e:be:2e:05:ef:ae:4f:ea:98:7a:a2:38:11:8b:5e:
                    2e:c2:57:97:c9:b3:b6:89:84:62:4c:aa:00:31:83:
                    01:60:8b:a6:98:9e:31:ff:93:fe:c0:01:e0:81:4f:
                    b8:fd:89:32:60:0c:cc:84:f5:cd:88:7c:bc:eb:90:
                    78:34:e9:b6:15:ae:ca:65:fd:b2:dc:b6:60:a2:21:
                    56:21:26:f4:4f:59:68:e5:ac:c2:92:ad:e7:54:6d:
                    b3:1c:fb:e1:61:54:14:0a:a8:14:c0:2d:24:f7:46:
                    a8:c4:bb:c6:5b:e5:c9:32:16:88:fd:14:12:24:71:
                    46:60:0d:48:ca:15:48:fb:93:d2:d0:6b:5f:25:b0:
                    70:ff:59:3b:9b:4e:2a:28:0e:f1:03:b5:48:ad:99:
                    7e:22:ad:5a:16:e2:22:a4:9b:1c:dc:3a:08:76:3b:
                    1a:2c:a2:9f:55:b6:71:f4:41:35:00:bb:6b:d9:b0:
                    40:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:D4:6F:83:6A:02:7B:1C:ED:42:FD:4F:6F:E8:D0:0A:CE:A5:15:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/84a611c4-8da6-3344-b367-ecd628352675.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.175.0.0/19
                  149.71.176.0/20
                  154.40.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:f2:81:03:38:0f:8e:1b:20:cb:86:cb:4e:73:f3:3d:30:d2:
         cc:b2:a7:d1:f9:93:15:0e:f1:5d:90:64:97:f4:20:d0:f1:12:
         0d:3f:27:63:12:81:20:2b:80:7d:e8:40:dd:fa:cb:f2:f1:1e:
         dc:16:ac:0b:e9:e8:70:92:df:bd:36:e1:e5:0d:0f:2c:59:0c:
         b6:22:f1:c4:e8:19:c0:4d:37:27:39:00:83:0e:38:ca:b1:d7:
         96:f8:a8:e4:db:ef:8a:a1:b4:09:9b:99:cb:7b:f8:20:96:93:
         4b:4c:d5:b5:62:e4:88:04:fb:06:1e:76:c6:86:7b:b2:9c:ce:
         41:48:45:13:c2:c5:a9:41:5c:ba:10:e6:85:55:87:44:fb:9a:
         80:3e:0b:8a:bb:b8:5e:db:bf:c2:e8:e5:65:34:43:8c:19:b4:
         e2:55:8a:e2:eb:75:d0:32:aa:58:cb:c9:8e:e3:dc:4b:72:3b:
         5b:0c:83:f7:54:67:1d:ba:b8:b5:38:1a:90:68:8d:90:a8:5c:
         cb:91:fc:b9:9f:35:03:29:04:6f:da:d4:54:93:d0:73:92:bb:
         52:5a:da:bc:ec:f7:03:d8:69:b2:13:4a:2f:86:95:f4:5d:5e:
         a1:9e:71:04:94:c7:85:cd:1d:3b:9b:12:dd:aa:72:3b:51:13:
         cd:96:aa:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:46:16 2026 by rpki-client