Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9416ca99-add2-3921-813d-a1f5fb6bfcd9.roa
File:                     9416ca99-add2-3921-813d-a1f5fb6bfcd9.roa (raw, json)
Hash identifier:          6gQpaNQ2p0om0LyHI0kWa09TPr1AmPI3W5QKKPXGvjg=
Subject key identifier:   38:9C:8F:D6:92:63:83:B0:AF:33:6C:09:CA:3D:19:E1:A7:EB:3A:12
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E5619F2DC14103765E89E6680
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9416ca99-add2-3921-813d-a1f5fb6bfcd9.roa
Signing time:             Mon 29 Jun 2026 21:00:12 +0000
ROA not before:           Mon 29 Jun 2026 21:00:12 +0000
ROA not after:            Sun 27 Sep 2026 21:00:12 +0000
asID:                     400786
IP address blocks:        38.87.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:56:19:f2:dc:14:10:37:65:e8:9e:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jun 29 21:00:12 2026 GMT
            Not After : Sep 27 21:00:12 2026 GMT
        Subject: CN=d5ab5cbf-26bd-441e-b891-9c7cbd54c64d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:88:eb:d0:d6:01:59:86:45:19:c7:26:32:c7:
                    c9:a0:84:2d:3e:b9:00:80:27:4d:68:a3:a5:72:a1:
                    b9:77:6f:10:f9:61:4b:f1:20:24:2d:42:26:40:c3:
                    a3:57:44:62:17:40:9b:44:13:22:64:52:54:87:65:
                    32:4e:3d:63:91:fa:2b:d8:e3:23:5a:85:62:79:4b:
                    26:f3:02:7a:b1:a8:da:57:ce:59:a7:75:59:3c:48:
                    ac:1f:ef:b7:87:64:32:07:8e:ac:3d:46:65:18:67:
                    03:ba:ef:9a:7c:8e:23:41:4c:0e:d1:f0:1d:a2:15:
                    65:1e:a4:18:66:63:8f:d5:77:65:46:e6:c3:76:dd:
                    d1:3a:ec:d1:99:ee:a0:88:7e:22:98:f0:e8:c1:ef:
                    e9:6c:4a:d8:15:d3:43:76:4b:7a:2f:21:18:0a:1f:
                    56:be:fa:90:e9:3d:d6:6f:d4:ed:71:92:e4:3f:8a:
                    db:a5:6b:29:e8:c1:c8:d5:0c:44:3c:55:0e:51:5d:
                    3f:a3:18:22:17:ec:40:c0:22:79:7e:63:32:d5:a6:
                    c7:c0:28:48:43:fc:e5:cc:84:cc:c5:6c:32:0b:43:
                    ad:d7:b2:70:c0:23:70:c4:3e:dc:ed:2c:50:b5:d7:
                    2a:c8:be:c7:e7:62:84:81:1a:87:3c:78:4f:03:2d:
                    16:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:9C:8F:D6:92:63:83:B0:AF:33:6C:09:CA:3D:19:E1:A7:EB:3A:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9416ca99-add2-3921-813d-a1f5fb6bfcd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.87.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:99:35:3f:99:7c:d9:ce:f6:e2:d3:87:d3:bf:2d:0a:8e:28:
         49:51:38:56:c6:9d:dd:c9:92:61:44:82:b6:8c:15:db:0e:c8:
         31:ff:ad:46:a8:9a:4e:fc:00:eb:e8:f1:ad:c7:af:93:5a:da:
         49:28:f4:38:29:e2:80:ff:a8:c3:95:19:23:55:cf:82:84:78:
         8c:b0:f3:38:71:fb:a1:07:ef:ca:a8:33:da:6e:84:da:91:0b:
         73:3d:cf:a0:02:ff:40:24:41:54:e3:bf:67:ac:7a:7d:0e:65:
         fe:fe:8c:48:cb:cf:8a:f4:a8:a1:00:19:83:72:77:92:1c:73:
         9f:fb:53:12:b6:95:23:75:64:06:ed:e3:1f:8c:45:e6:2d:15:
         b5:85:06:d2:ec:40:f6:dc:d2:98:4b:76:75:25:c8:a1:c8:ad:
         9d:8a:49:b1:ec:73:1a:69:51:30:7e:15:24:4d:f6:ac:f2:73:
         f4:0d:be:07:3a:d8:bd:9b:88:07:10:1e:20:d1:40:0d:8e:af:
         9f:57:e1:12:4d:73:5c:43:1c:b9:2c:93:62:66:89:04:92:b2:
         bb:50:14:da:7a:03:e5:4d:d2:39:2f:df:5a:35:c9:25:78:0c:
         06:18:82:d2:cc:26:80:5a:94:d8:b2:57:d2:a7:e7:eb:05:03:
         7d:f2:bf:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:49:23 2026 by rpki-client