Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/888a0add-6418-3871-a4a7-96c5b9718181.roa
File:                     888a0add-6418-3871-a4a7-96c5b9718181.roa (raw, json)
Hash identifier:          RjUoGntXSvm0Q4Avj678FVKiBdRDud/BGxJHsglZY6Y=
Subject key identifier:   EB:13:29:D5:40:AB:42:6C:91:15:C8:86:89:4B:C2:D5:96:6E:0B:00
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E5A4A205D61EECAE89D327380
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/888a0add-6418-3871-a4a7-96c5b9718181.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     0
IP address blocks:        38.212.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:4a:20:5d:61:ee:ca:e8:9d:32:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=866ff681-0f89-48a0-9831-efa87372d129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:2f:d2:b4:86:d6:de:91:1c:d7:6f:e6:cb:60:
                    d7:25:b9:96:62:71:ae:de:5c:32:55:11:5a:fc:90:
                    c4:fb:e0:30:a9:1f:05:85:10:fd:16:fc:02:85:2a:
                    e0:a8:1c:52:83:99:96:be:aa:e0:82:70:16:7b:77:
                    6e:01:43:2f:4f:70:fe:20:60:57:54:d8:94:7c:11:
                    6c:44:13:d6:67:01:db:ef:76:6f:a5:c2:c8:01:5b:
                    d9:6b:ff:08:b0:3c:dc:9b:7d:40:38:0b:57:d7:21:
                    3c:ef:87:f8:07:74:19:ba:9d:55:8d:83:1b:ba:be:
                    5c:c3:6d:e6:09:76:7b:52:ac:3d:9e:52:5d:03:41:
                    3a:49:b5:99:62:76:f2:5d:0a:f3:db:e0:39:5d:72:
                    cc:a5:17:3f:cc:05:f9:e5:9a:77:20:1d:7a:96:60:
                    73:96:a9:d6:3c:73:82:60:61:95:67:9a:90:b6:6f:
                    ae:05:7c:2e:21:45:ec:be:98:a6:f4:c7:fc:55:69:
                    61:65:91:4c:2d:2b:3e:2f:99:c3:97:1a:5a:69:50:
                    10:ed:0a:0b:f6:3f:e2:2e:1e:6c:4d:4c:a9:93:fc:
                    8b:d6:c6:1d:97:36:79:fe:93:1e:bd:f9:ff:77:c4:
                    6a:81:45:00:d5:2a:67:50:7e:bf:14:c9:6a:ea:c8:
                    d7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:13:29:D5:40:AB:42:6C:91:15:C8:86:89:4B:C2:D5:96:6E:0B:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/888a0add-6418-3871-a4a7-96c5b9718181.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.212.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:bc:34:8b:90:55:22:c5:39:19:ef:93:77:0d:82:2c:c6:7e:
         ed:a8:71:7f:0d:85:3a:05:d8:02:9f:d0:82:b7:e1:6d:c2:9e:
         d8:ad:d5:7a:65:60:bf:53:91:78:bf:38:5e:17:b0:32:f4:29:
         7c:ed:f8:23:9f:96:db:32:73:01:ac:df:9d:72:32:c3:c0:f3:
         73:aa:09:4d:12:75:f1:80:b6:f4:a3:ac:c7:21:ae:85:65:11:
         b7:39:25:51:5f:cb:4d:fb:ce:d4:3e:63:af:77:69:a1:2c:dd:
         cb:7e:37:75:95:41:fc:bf:0b:c8:6c:67:3d:5a:a7:b2:66:fe:
         3e:03:50:4a:15:e7:c2:b7:68:f4:8c:34:13:2b:ce:f6:bd:e8:
         05:81:da:f5:2c:de:a1:b6:de:60:4f:28:e7:76:72:d9:80:73:
         c3:20:ef:23:41:e7:1d:c2:b7:9e:58:b5:ed:6d:ff:d1:ab:1d:
         30:5f:87:1a:e1:44:ea:da:d2:5a:9d:47:2e:b8:4b:39:97:d3:
         41:ee:0f:7f:39:e0:67:b7:69:0d:d7:f3:32:72:4e:9b:08:fe:
         40:c9:cb:10:d2:e6:bf:07:22:08:30:b9:ac:fb:ab:35:2b:2b:
         e2:05:30:be:6d:02:04:86:d4:15:4d:40:21:e1:a4:95:c4:44:
         af:35:8d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:27:28 2026 by rpki-client