Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8ee807fd-6849-3d89-b054-cc8d7f0be35d.roa
File:                     8ee807fd-6849-3d89-b054-cc8d7f0be35d.roa (raw, json)
Hash identifier:          EHzLqZeUmu/Q6PcIaQjMglKCEn2WDiAcjEhMUY9f+3U=
Subject key identifier:   B5:72:CF:ED:79:69:AB:80:5E:18:CF:D8:4F:5F:2A:78:A2:72:F2:AF
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E9653635AA399E04417B453C0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8ee807fd-6849-3d89-b054-cc8d7f0be35d.roa
Signing time:             Wed 22 Jul 2026 21:07:47 +0000
ROA not before:           Wed 22 Jul 2026 21:07:47 +0000
ROA not after:            Tue 20 Oct 2026 21:07:47 +0000
asID:                     21859
IP address blocks:        38.81.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:96:53:63:5a:a3:99:e0:44:17:b4:53:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jul 22 21:07:47 2026 GMT
            Not After : Oct 20 21:07:47 2026 GMT
        Subject: CN=225a1e7c-2503-4e31-a9c7-44005bd0f16f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:3c:ce:10:6d:11:0a:26:77:a7:eb:a4:e2:d5:
                    a8:d1:f0:79:ae:bf:9d:a8:0d:18:91:21:b6:f5:dd:
                    05:c6:5f:5a:ee:64:33:af:52:05:0b:71:5b:bb:b1:
                    77:51:c6:49:fe:1a:2d:f6:48:cf:2c:3d:22:98:17:
                    69:e1:ba:73:1b:55:a1:e3:d4:92:74:73:37:50:a6:
                    99:e4:6a:94:80:76:73:7a:86:04:1f:2a:13:d3:47:
                    c5:f5:27:3e:94:eb:13:b8:90:41:29:82:d4:36:a0:
                    30:ec:5a:4f:aa:08:26:56:0c:2e:64:e6:6d:07:be:
                    6b:cc:a1:15:da:3f:c4:df:e9:fc:93:1b:4e:44:20:
                    c3:e4:02:70:12:13:82:8f:7c:d8:97:48:95:18:85:
                    fd:35:90:01:ad:2c:dc:6f:c5:0d:f3:c3:bf:78:4d:
                    57:cf:37:3f:cf:9d:bf:44:0c:44:57:6f:9b:05:3d:
                    0a:93:ba:15:e1:8e:40:d6:b9:8b:8f:85:6c:17:b6:
                    10:7e:4f:e6:de:36:6e:e2:cc:34:17:b4:a8:35:a9:
                    63:73:9f:b0:37:e8:b4:bf:25:6f:cd:8b:09:ff:3e:
                    02:39:95:c3:c0:36:15:e1:32:ae:f4:95:68:87:6f:
                    ed:90:02:c4:d3:8c:6b:53:c4:11:50:cc:97:39:6c:
                    04:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:72:CF:ED:79:69:AB:80:5E:18:CF:D8:4F:5F:2A:78:A2:72:F2:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8ee807fd-6849-3d89-b054-cc8d7f0be35d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.81.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:59:90:05:41:55:35:f5:83:40:10:a3:b3:2b:86:88:3d:6b:
         7c:ef:e9:61:e0:20:79:97:3a:0a:c1:03:2c:09:d5:e8:23:8b:
         85:95:87:67:4e:2d:48:95:de:aa:72:f2:dc:6e:b2:4e:66:64:
         e2:a3:1c:6f:95:09:41:e4:2c:be:30:0b:c1:20:2b:d5:52:7d:
         56:e4:75:c9:73:57:db:80:49:4e:74:e5:b4:35:76:8f:6f:d0:
         d4:46:d1:21:29:d4:f6:23:df:35:5f:28:1d:bb:7f:2a:6c:4b:
         a1:81:51:a1:12:56:aa:c0:7c:be:ef:88:6e:3b:4c:9f:1d:9e:
         07:a7:00:e9:46:5f:35:a6:45:36:f1:7d:4e:8e:8c:65:a8:4c:
         35:e6:a5:53:90:59:73:b3:e6:b2:1a:ff:82:9b:c0:d6:e0:d5:
         c4:f9:0b:11:b5:7d:87:39:9f:17:3d:f4:f7:2c:98:18:63:39:
         9b:02:5f:7a:54:1f:ad:70:a6:ad:45:26:b9:f2:ef:33:3c:65:
         09:f1:f1:79:ef:3a:8c:22:33:3e:7e:37:59:8b:37:2e:b5:f2:
         d3:b1:8f:17:a1:23:06:07:2a:14:50:2e:c6:bb:9a:99:cc:e5:
         39:fd:88:13:c8:15:91:41:49:47:e6:1d:eb:ae:97:83:69:bf:
         c3:9d:18:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:19:58 2026 by rpki-client