Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8d03d089-6f70-32f2-892a-46dd908d80eb.roa
File:                     8d03d089-6f70-32f2-892a-46dd908d80eb.roa (raw, json)
Hash identifier:          SAkfdLOpmTzacgbcMFajuXS2aiXenXGWpCCbfHkFMCg=
Subject key identifier:   D4:9E:9E:77:0E:DB:AD:18:40:51:DE:95:5F:D6:07:6E:96:E7:F1:06
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E9359914BCA7A13AB95975C80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8d03d089-6f70-32f2-892a-46dd908d80eb.roa
Signing time:             Tue 21 Jul 2026 19:32:48 +0000
ROA not before:           Tue 21 Jul 2026 19:32:48 +0000
ROA not after:            Mon 19 Oct 2026 19:32:48 +0000
asID:                     274659
IP address blocks:        38.226.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:93:59:91:4b:ca:7a:13:ab:95:97:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jul 21 19:32:48 2026 GMT
            Not After : Oct 19 19:32:48 2026 GMT
        Subject: CN=661967f3-3b3b-44a0-9e84-8b764e0e7656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a8:94:87:7a:ce:7a:7b:51:c6:c2:c7:5b:97:
                    af:56:b4:27:64:7f:41:45:2b:23:4d:dc:05:11:6d:
                    99:11:7a:49:7a:1b:3c:c0:50:86:21:01:77:73:d3:
                    4f:ac:9b:db:ae:72:13:f7:42:d1:82:ed:5c:1f:b8:
                    9a:64:d3:2d:f8:20:bf:8e:68:b9:9a:e4:58:07:32:
                    0f:37:e6:32:34:bb:14:e9:1c:de:f5:1d:66:cf:03:
                    6a:83:b3:50:bc:c5:b0:9f:3e:e2:05:c0:1d:8d:e3:
                    51:b7:d4:00:6a:85:79:dd:3c:10:89:d8:d7:0d:b6:
                    fd:2e:0a:a6:ee:8e:07:6e:dd:a9:25:a3:aa:1b:84:
                    8b:2a:82:44:df:ea:70:c3:2f:05:23:4f:e7:ac:aa:
                    e4:25:55:c3:92:3d:31:c4:68:0b:cf:30:3c:04:57:
                    5f:a4:b9:39:59:ae:a5:9c:b4:99:5d:8a:3d:ed:98:
                    c0:59:ce:21:41:1b:25:42:d3:9b:ed:b9:b7:67:e3:
                    70:c1:92:28:7d:0c:81:6e:63:50:23:77:13:fc:c3:
                    6d:43:5b:82:f7:e9:87:e3:4d:6c:42:f1:8b:53:85:
                    a1:e4:39:1e:be:a3:bb:c8:ab:e5:a1:f9:03:21:18:
                    c6:13:1a:d6:ad:d8:eb:7a:f5:1e:03:57:50:15:f5:
                    fc:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:9E:9E:77:0E:DB:AD:18:40:51:DE:95:5F:D6:07:6E:96:E7:F1:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8d03d089-6f70-32f2-892a-46dd908d80eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.226.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:4b:fc:3a:46:a0:04:f2:3f:ac:19:be:50:4c:95:11:96:67:
         1b:f7:ae:33:45:f6:7d:47:5a:b3:3d:24:e7:39:e0:99:35:82:
         67:0e:ac:9d:0a:23:9a:a6:6d:e7:33:35:2b:85:ee:5a:6d:fa:
         4c:d3:50:8f:5a:00:74:d0:6d:b8:87:b2:63:e9:46:6e:8f:6b:
         12:e9:a0:78:79:b3:39:8c:6a:4f:3d:dd:64:86:06:5e:2d:51:
         fd:58:de:77:fa:8f:98:ec:a5:fd:48:fb:de:aa:6e:e7:38:2f:
         f4:48:b2:87:2d:4a:a4:67:4f:d0:83:89:ed:96:4d:b1:76:02:
         56:72:91:c4:88:57:62:40:5f:1a:12:c4:ea:61:80:0a:4f:31:
         68:0e:91:26:6d:31:83:ba:2b:a4:7f:2c:b7:23:1a:14:fd:ed:
         37:96:fb:3b:0b:42:d1:3d:3e:f5:27:e7:f2:3e:14:8e:69:0c:
         2f:8b:ca:e6:2b:29:a5:3e:34:f3:18:34:a6:24:21:10:25:9e:
         52:90:b6:11:61:27:e0:93:f4:1f:8e:a2:45:2d:e6:f4:39:84:
         16:60:e5:d3:87:74:8a:75:da:41:b6:6b:01:e2:98:79:d1:03:
         a9:18:5a:f9:58:f2:17:b5:56:40:5e:e7:18:aa:bf:78:77:be:
         dd:24:a5:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:20:00 2026 by rpki-client