Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8dc5e404-d457-327e-acc0-7d988251b645.roa
File:                     8dc5e404-d457-327e-acc0-7d988251b645.roa (raw, json)
Hash identifier:          pDtp0K/DoNuBYUhssoTa4HumLgUVe/rg3UTkRaCqLcU=
Subject key identifier:   2A:66:C2:00:9C:EE:9F:CE:2E:E9:EB:DF:A0:8E:AB:5A:27:2F:93:FF
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584DAB3C2D330C19C4FE2CC77D40
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8dc5e404-d457-327e-acc0-7d988251b645.roa
Signing time:             Wed 29 Apr 2026 16:06:03 +0000
ROA not before:           Wed 29 Apr 2026 16:06:03 +0000
ROA not after:            Thu 23 Jul 2026 21:28:01 +0000
asID:                     272809
IP address blocks:        38.51.156.0/22 maxlen: 24
                          38.51.176.0/22 maxlen: 24
                          38.51.180.0/22 maxlen: 24
                          38.51.184.0/24 maxlen: 24
                          38.83.88.0/22 maxlen: 24
                          38.83.92.0/24 maxlen: 24
                          38.83.93.0/24 maxlen: 24
                          38.207.192.0/18 maxlen: 24
                          38.247.192.0/18 maxlen: 24
                          38.248.128.0/18 maxlen: 24
                          154.45.128.0/18 maxlen: 24
                          206.85.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ab:3c:2d:33:0c:19:c4:fe:2c:c7:7d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Apr 29 16:06:03 2026 GMT
            Not After : Jul 23 21:28:01 2026 GMT
        Subject: CN=9b74acc3-3350-4054-8472-d06a9c52efa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:12:4f:69:34:e4:75:1b:76:0b:4c:2a:38:fc:
                    5e:ec:45:17:0c:39:7e:e3:57:ea:df:b6:b2:65:33:
                    ba:e7:19:61:19:20:e7:d5:b7:7c:35:56:57:6a:0e:
                    c5:01:4a:07:a2:d5:dc:4f:91:4b:17:4c:51:79:dc:
                    38:b2:36:67:df:6f:4a:0f:68:12:16:2e:6f:88:ea:
                    1c:a6:b3:54:da:a1:17:62:e4:18:58:25:9f:cd:13:
                    74:9f:6d:97:04:ee:a5:cf:72:33:f7:fa:41:0c:be:
                    f0:13:0e:65:6a:44:dc:16:98:ea:48:45:63:4b:68:
                    f1:0c:3f:85:a1:57:13:7d:a1:6f:f6:fc:11:c2:5f:
                    76:ed:2b:b0:82:c2:db:f2:d1:dc:46:af:a8:75:10:
                    9a:40:0d:ca:a8:7a:eb:51:3c:c0:27:6b:f7:7d:ad:
                    32:1c:cc:df:1a:e5:49:c3:67:1a:e3:14:35:36:7f:
                    a4:fc:82:31:a9:c6:b3:5d:66:b5:5e:e2:90:c9:04:
                    b4:75:13:6f:0f:69:fd:d8:1b:25:56:ea:bb:c5:ee:
                    de:2c:2c:a6:bb:63:48:6b:ba:f3:24:47:43:5c:29:
                    0c:93:e6:67:71:9f:20:1f:3f:d1:04:21:27:0c:79:
                    bc:c5:3a:e3:99:b8:2f:b3:95:2a:fb:19:17:6f:76:
                    10:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:66:C2:00:9C:EE:9F:CE:2E:E9:EB:DF:A0:8E:AB:5A:27:2F:93:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8dc5e404-d457-327e-acc0-7d988251b645.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.51.156.0/22
                  38.51.176.0-38.51.184.255
                  38.83.88.0-38.83.93.255
                  38.207.192.0/18
                  38.247.192.0/18
                  38.248.128.0/18
                  154.45.128.0/18
                  206.85.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:ca:25:cd:e4:9a:8b:81:ea:b3:b9:17:99:9f:1a:c6:83:78:
         f9:77:8a:fd:b0:e9:61:d2:87:3f:27:7e:83:1c:df:72:d8:ab:
         46:b6:9a:6b:de:11:fe:eb:da:ac:62:08:23:a4:78:ea:97:4e:
         56:e7:ab:31:37:22:25:e5:c4:06:ed:16:c3:b0:9c:fd:3d:02:
         3d:d8:0c:7c:2e:c2:e4:dd:af:9f:98:d5:c7:57:f6:d9:ef:48:
         91:ea:67:95:11:1b:c3:90:54:84:8b:db:cd:df:01:29:5a:9e:
         7f:fc:7f:ad:76:38:0e:6a:8f:bf:12:44:93:9a:d7:93:68:bd:
         7c:be:50:c1:a5:33:92:7d:de:8b:b4:2b:9f:db:7b:e3:d2:72:
         17:1f:17:a8:8f:36:ea:96:0c:33:e4:c5:b6:00:d6:97:39:ec:
         a1:21:bc:66:f5:92:6d:0d:69:71:41:e6:f6:fa:54:48:da:44:
         c1:8c:68:e7:56:98:9d:35:aa:fe:ee:e1:d2:a7:c8:82:b8:4c:
         b2:49:ae:cd:08:a0:23:d8:86:6b:fb:90:c5:a0:5b:84:3b:c4:
         14:0d:ad:fa:e0:7d:66:cb:aa:e6:f3:81:73:61:d9:84:08:1f:
         04:36:52:b1:49:ba:6a:9c:32:5e:03:59:a4:52:59:8c:7e:1f:
         37:80:04:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:03:52 2026 by rpki-client