Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b73810df-24e0-30f6-9f78-45978355a663.roa
File:                     b73810df-24e0-30f6-9f78-45978355a663.roa (raw, json)
Hash identifier:          OIeckHSFC2J522pVQap6JWdHiZlwLcwXyquQI5R1Uo8=
Subject key identifier:   3C:D7:1C:26:B6:80:48:C9:64:5D:19:1D:52:D9:6C:EF:03:3B:14:D7
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F30528C67759657C4D65ACF80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b73810df-24e0-30f6-9f78-45978355a663.roa
Signing time:             Wed 16 Sep 2026 01:00:12 +0000
ROA not before:           Wed 16 Sep 2026 01:00:12 +0000
ROA not after:            Tue 15 Dec 2026 02:00:12 +0000
asID:                     267834
IP address blocks:        38.252.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:30:52:8c:67:75:96:57:c4:d6:5a:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep 16 01:00:12 2026 GMT
            Not After : Dec 15 02:00:12 2026 GMT
        Subject: CN=765761ed-6f6a-4a88-9481-a0b61230f8ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:9c:d1:df:65:e0:17:4c:c4:e4:1b:6a:75:a4:
                    66:5b:b0:67:c6:60:5e:63:41:04:ee:c2:d0:84:bb:
                    68:e1:69:9d:f1:bd:c7:e5:31:e5:f5:49:21:5e:17:
                    1b:16:bc:f7:64:3f:d8:09:7f:43:1b:85:13:9c:a7:
                    d8:59:48:8a:a9:a7:f7:a3:ba:ea:ce:f8:cf:3f:4a:
                    9a:39:6f:0b:77:83:f4:4b:3c:b6:85:83:0e:c4:68:
                    50:9e:2f:bf:ef:df:1c:f8:b9:e4:e1:21:64:5f:ec:
                    5d:a0:b3:8c:ab:15:11:72:ad:ac:ad:2e:2d:a0:60:
                    5c:c9:1e:c9:1a:91:8e:95:17:da:92:62:49:ab:0d:
                    33:73:ae:64:03:3d:61:90:44:af:ed:17:81:13:1a:
                    e6:4f:31:c6:54:16:eb:82:e1:bf:be:59:7e:cc:7e:
                    44:f5:43:1c:c6:75:ad:aa:55:a8:24:02:f6:59:b9:
                    e5:37:15:27:1e:41:fc:0a:98:5a:55:26:46:55:e5:
                    c9:84:7c:35:ee:ac:64:8b:a7:15:f1:c6:b5:c5:86:
                    29:18:fb:d9:67:de:8a:f7:d5:7d:51:9e:07:f5:ed:
                    88:7b:22:18:55:a1:52:c9:e9:c8:2d:83:42:67:0b:
                    de:3b:f2:2b:60:88:8a:8b:a8:ba:e9:e9:a8:7b:0b:
                    3f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:D7:1C:26:B6:80:48:C9:64:5D:19:1D:52:D9:6C:EF:03:3B:14:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b73810df-24e0-30f6-9f78-45978355a663.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.252.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:2b:fb:32:18:cd:34:cb:3d:67:6e:6b:ee:1d:85:ca:50:83:
         60:f3:57:aa:82:66:9a:2a:7a:1b:9e:3b:e1:5d:31:fe:5d:83:
         d5:f9:54:f5:99:ba:95:40:60:9d:53:b8:f8:ab:01:cd:1c:6a:
         8f:78:15:0f:75:76:a4:eb:29:b9:24:80:e5:a9:38:6a:d5:6f:
         a3:5f:15:b6:db:87:5a:c5:49:a7:07:72:a8:d2:1b:de:47:14:
         11:b6:3a:56:e2:86:26:f5:9c:1c:23:6a:fc:5e:2c:4b:6a:3f:
         5e:de:da:bf:56:52:a1:c6:9b:d4:f9:e1:c5:4e:b7:bc:59:3b:
         77:4d:20:42:ba:88:46:c1:48:30:5c:1c:5e:1c:35:86:e9:5e:
         00:44:6f:dc:a1:49:da:64:20:25:09:aa:91:1a:e6:1a:66:a0:
         7b:77:69:9f:c0:ce:37:d7:b3:a1:8c:92:18:5a:c3:e5:7c:8d:
         eb:96:8c:6c:55:3e:2c:ef:30:28:e1:f3:33:25:10:52:1a:64:
         e8:6b:1a:a4:78:63:11:12:0a:83:96:b8:91:be:5e:6e:bc:4d:
         02:5d:1a:3e:93:98:b1:11:6f:e0:d9:8e:32:37:60:1e:31:22:
         40:98:53:72:7a:fb:0e:e8:bf:94:40:34:1f:3f:5b:c6:f9:08:
         d0:03:f5:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:04:45 2026 by rpki-client