Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8e6151e7-f3a4-302e-9c0d-19b5b41fb015.roa
File:                     8e6151e7-f3a4-302e-9c0d-19b5b41fb015.roa (raw, json)
Hash identifier:          gOaRguj0PgLQ1lmTuNecNU8ukDFmXcGA4eibl0E6h8g=
Subject key identifier:   F6:64:A9:F8:75:BA:97:57:E8:11:0A:A7:35:0D:83:6C:B7:DE:85:01
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E561A12B064F9D9EB2D7E6D40
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8e6151e7-f3a4-302e-9c0d-19b5b41fb015.roa
Signing time:             Mon 29 Jun 2026 21:00:12 +0000
ROA not before:           Mon 29 Jun 2026 21:00:12 +0000
ROA not after:            Sun 27 Sep 2026 21:00:12 +0000
asID:                     399728
IP address blocks:        38.87.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:56:1a:12:b0:64:f9:d9:eb:2d:7e:6d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jun 29 21:00:12 2026 GMT
            Not After : Sep 27 21:00:12 2026 GMT
        Subject: CN=aabe7bbb-ed22-4976-a21d-5fbbf0519b7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2c:0f:d4:3f:4a:82:b8:1e:e6:d1:f3:a8:a7:
                    59:28:3c:45:f8:69:dc:b8:a3:c5:f3:55:f1:f1:9e:
                    3a:20:41:27:98:0f:a3:84:a3:b9:8f:9e:39:89:64:
                    a5:d8:a3:f1:6c:f1:f6:e9:02:2f:d7:0e:1b:98:54:
                    3b:37:09:b8:6d:ff:88:08:0d:79:51:b7:32:d1:ce:
                    22:8a:07:95:65:0f:1e:c9:fe:14:d7:fe:19:ba:04:
                    97:ec:52:4b:2b:45:56:ca:47:b8:c1:27:01:d0:11:
                    49:72:1d:9c:89:42:d7:d0:ac:17:60:70:d9:6b:35:
                    92:3d:73:c8:1a:31:cf:83:2e:f2:0c:96:49:26:24:
                    de:ee:98:c7:0c:7b:cf:99:e3:40:d4:ca:9f:a6:9a:
                    d8:e2:45:57:39:99:72:36:ab:5b:1d:01:6e:d5:81:
                    94:29:c5:00:42:ea:3a:1d:21:4c:e4:78:66:08:0e:
                    25:52:50:ec:b0:83:9e:0c:31:59:d2:8d:8d:12:bf:
                    72:5b:5a:02:98:53:51:40:85:a5:ba:6c:37:51:20:
                    b2:49:0c:2c:2b:66:f8:59:83:c1:bc:75:6d:23:4b:
                    b9:9c:f0:37:81:ee:c8:46:1e:23:67:08:37:9f:a0:
                    c6:f3:92:6b:f1:85:d4:b4:3f:32:b7:b0:26:b9:93:
                    7e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:64:A9:F8:75:BA:97:57:E8:11:0A:A7:35:0D:83:6C:B7:DE:85:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8e6151e7-f3a4-302e-9c0d-19b5b41fb015.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.87.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:1e:73:01:3f:64:d0:d4:a5:ac:ec:90:88:eb:26:a2:08:cb:
         c4:e0:e8:73:ec:a3:5b:61:23:63:ba:95:22:52:c3:85:57:10:
         70:c3:ef:f6:31:8e:0b:08:df:24:b7:8a:d3:b0:a7:3d:02:4a:
         6a:8f:2d:9a:a0:b6:fa:67:6a:05:ad:1a:d3:f3:77:bd:a3:5e:
         b1:af:ee:86:3f:6a:46:71:77:bf:02:d8:12:6f:e0:ed:e7:c2:
         1e:e7:b8:56:63:32:61:68:14:01:36:93:21:01:95:76:a4:d0:
         62:c2:50:4e:cc:92:0b:0f:23:93:59:60:40:3c:4b:e7:fc:02:
         a5:cd:06:18:0b:2b:28:70:6e:0f:30:cc:33:82:76:bc:10:be:
         89:2e:e1:9f:ed:7b:cf:23:8b:f7:24:3e:18:ed:4b:44:2a:43:
         28:1a:da:94:2c:6e:cd:c0:18:e2:8b:9a:06:51:8b:ef:17:a3:
         14:88:fc:d9:89:c0:e0:c8:2a:04:ab:f4:b6:86:09:6d:ac:be:
         e6:7f:35:55:a4:27:b0:66:95:e4:dd:1c:70:df:20:4e:e5:3f:
         7f:a0:31:57:3f:c9:35:6e:29:07:48:f5:39:f4:da:ee:7e:9e:
         b2:ef:73:f8:0c:df:fa:fa:ae:00:0d:9f:72:b5:6e:54:22:0b:
         69:cf:0f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:12:05 2026 by rpki-client