Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/97cfa1a4-9b53-3389-a4e4-0dcbf07583b3.roa
File:                     97cfa1a4-9b53-3389-a4e4-0dcbf07583b3.roa (raw, json)
Hash identifier:          w65RfcsEovXNKxhJQz1Hxi+dJDymKINoLDk29xSM9oM=
Subject key identifier:   25:FE:84:40:67:C7:A9:B8:4C:A6:ED:9F:E8:F9:10:7E:CF:80:80:9E
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D33266A02E60ABA4DF1C3CF50
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/97cfa1a4-9b53-3389-a4e4-0dcbf07583b3.roa
Signing time:             Tue 17 Mar 2026 15:45:12 +0000
ROA not before:           Tue 17 Mar 2026 15:45:12 +0000
ROA not after:            Mon 15 Jun 2026 15:45:12 +0000
asID:                     263759
IP address blocks:        38.250.10.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:33:26:6a:02:e6:0a:ba:4d:f1:c3:cf:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Mar 17 15:45:12 2026 GMT
            Not After : Jun 15 15:45:12 2026 GMT
        Subject: CN=454c275a-baa6-4120-8c44-8b6c0c947199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:63:30:d1:1f:64:4d:dc:25:c7:71:7b:13:eb:
                    26:98:05:77:f9:96:d0:ba:87:ee:b5:33:22:2b:46:
                    59:ac:52:62:cb:4b:11:3a:03:1e:41:ec:f1:ea:04:
                    4f:83:2f:94:01:a9:76:16:4a:92:f7:f0:b2:b5:b5:
                    b6:1b:85:55:f9:2a:f9:c9:6b:24:f7:75:d2:6c:f5:
                    42:e6:7a:ea:b8:0f:34:7e:79:aa:b6:2a:ae:05:47:
                    bb:34:ed:1e:99:d6:68:d1:51:31:61:62:c4:db:fb:
                    40:36:14:fc:ef:12:7d:03:38:f8:d8:d5:ce:ed:2d:
                    2e:5b:37:67:b0:42:ba:68:dd:21:a5:7c:9d:9d:3a:
                    5c:30:bf:6c:94:b9:55:ce:a3:75:c2:07:92:86:b0:
                    0a:5d:a4:04:09:90:49:e4:93:7b:3d:7a:d1:bb:f1:
                    25:aa:1a:1c:20:5b:60:84:af:30:32:dc:a7:e4:9a:
                    ea:d0:21:b8:d4:de:e2:e5:e5:cd:5f:f3:71:dd:e0:
                    eb:f8:0e:51:ab:c0:06:8a:e1:f0:e5:e5:59:67:ab:
                    ef:7b:35:4f:f3:0f:34:de:c6:b6:84:08:fd:6f:34:
                    bb:ec:64:56:bd:8c:02:fa:30:8d:e4:f6:71:72:78:
                    2a:12:f0:a9:80:d2:dd:2f:d9:5f:d3:6d:ec:98:c6:
                    72:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:FE:84:40:67:C7:A9:B8:4C:A6:ED:9F:E8:F9:10:7E:CF:80:80:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/97cfa1a4-9b53-3389-a4e4-0dcbf07583b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.250.10.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:dc:a8:db:df:af:a1:af:f4:7f:52:b6:31:ab:44:d2:bf:ea:
         73:ab:8d:6a:bd:ec:3e:d1:aa:29:78:2d:63:01:7f:9c:d7:f5:
         8c:e4:e9:3d:63:50:af:7b:f7:71:c6:73:b8:d6:45:26:0a:61:
         18:81:19:e2:9a:a1:d6:3d:f6:26:0e:70:32:10:b2:a3:ca:ee:
         c9:90:76:15:62:fd:20:6d:6f:9a:52:dd:4d:e7:30:56:fd:3d:
         5e:92:e6:44:93:82:23:50:cf:aa:16:02:4e:80:ec:d1:c3:b2:
         1a:c9:c8:79:9e:9d:fa:82:1a:77:c5:f4:b9:98:f3:50:71:38:
         46:94:c4:8c:ab:cd:d2:04:67:1c:0f:f3:22:ac:4b:32:91:c0:
         11:6c:d2:99:43:6d:6c:e8:09:2d:bb:23:55:c0:62:ba:7f:68:
         f9:01:f0:d4:78:00:19:df:15:63:79:e4:60:04:26:11:d4:5a:
         b7:a1:de:6c:e1:b4:75:20:fc:f9:c9:44:46:e0:e1:f3:e5:c3:
         c6:8f:04:d9:64:ea:53:ab:ed:9f:5b:1e:ab:9f:d3:1f:e8:b5:
         8f:a9:43:f6:4c:d3:93:e5:00:38:e8:7d:7d:e1:d6:a9:ef:23:
         e8:bb:95:c8:90:58:47:27:3e:9d:ed:26:b1:e1:61:06:ca:a8:
         8d:06:39:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:22:33 2026 by rpki-client