Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bcf491c0-463d-37f0-8e7f-e59b5d08ed26.roa
File:                     bcf491c0-463d-37f0-8e7f-e59b5d08ed26.roa (raw, json)
Hash identifier:          nY4oQonQJcWg0T0N6q2jZGDS6VVtI1MxKTi2QyO+6PE=
Subject key identifier:   CE:74:52:08:4E:4E:E0:88:4C:CC:31:E2:8C:64:15:E0:9B:8A:5D:4B
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E73F54A5C3FD0629A9BB42950
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bcf491c0-463d-37f0-8e7f-e59b5d08ed26.roa
Signing time:             Fri 10 Jul 2026 13:40:42 +0000
ROA not before:           Fri 10 Jul 2026 13:40:42 +0000
ROA not after:            Thu 08 Oct 2026 13:40:42 +0000
asID:                     273844
IP address blocks:        38.57.232.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:73:f5:4a:5c:3f:d0:62:9a:9b:b4:29:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jul 10 13:40:42 2026 GMT
            Not After : Oct  8 13:40:42 2026 GMT
        Subject: CN=be511de9-7983-4f84-9633-8c47fb666503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:36:52:2c:00:d4:91:03:82:e0:c9:54:c7:af:
                    13:09:ea:8a:7d:12:b6:d0:17:11:b0:48:92:5f:4b:
                    80:f0:42:49:0f:ae:c6:d8:3d:7e:73:68:1a:bb:2e:
                    62:fd:0a:bd:c1:9c:86:fb:3b:1a:a9:fc:88:e0:b7:
                    1d:7b:1b:21:7d:75:96:2f:47:5f:4b:44:7d:12:65:
                    a7:cd:a5:ad:91:f3:20:26:b1:33:e7:7e:db:ad:5e:
                    2b:5f:51:5f:46:16:d0:3e:73:10:de:a5:2c:9a:53:
                    e4:1a:48:0f:66:53:3c:34:67:f5:8e:f0:d9:f3:f5:
                    03:79:40:7b:49:30:dd:d6:70:6c:d0:b7:ee:c3:e3:
                    a6:d1:39:8d:0a:66:eb:17:55:d5:3b:3c:2e:c8:97:
                    4a:88:76:f4:6e:7f:d3:cc:58:e6:91:31:cc:6a:24:
                    87:4a:7e:2e:03:34:8a:10:6a:14:3d:82:13:f1:14:
                    fb:60:27:c5:bc:dd:a8:b1:75:c5:8f:b5:c6:e3:6c:
                    91:d6:7f:90:d1:e4:35:1a:46:87:29:aa:64:e8:24:
                    f5:4b:7e:2c:fd:86:9e:a6:84:09:58:21:6a:b9:7c:
                    c1:79:1a:05:c9:df:9f:fb:78:a5:dd:89:5e:ad:c6:
                    26:da:d7:1e:01:7f:e8:ca:7c:a9:5b:18:9b:3f:fc:
                    bf:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:74:52:08:4E:4E:E0:88:4C:CC:31:E2:8C:64:15:E0:9B:8A:5D:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bcf491c0-463d-37f0-8e7f-e59b5d08ed26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.57.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:b0:be:4b:aa:78:0d:c6:d9:fb:e6:04:ef:71:0d:c7:e2:7f:
         2e:45:c2:42:57:96:ff:15:2e:cf:fc:28:89:a6:c1:45:e1:f5:
         f4:c4:e9:45:b5:c1:1e:4d:92:fb:51:1b:5c:16:fa:49:49:ad:
         90:94:8b:17:af:7b:c6:a5:47:68:08:45:6c:4f:4d:14:3b:cc:
         f4:8b:09:0a:ad:9b:ff:fc:ea:e6:84:a2:27:ba:1a:33:e0:5b:
         6f:14:81:c8:c5:02:8e:1f:73:09:14:1b:b0:25:c3:23:d2:24:
         37:fa:cb:e5:91:21:71:d5:ca:bf:ba:08:b0:9a:6e:45:1c:5e:
         58:f5:0a:32:63:af:f0:d2:66:1c:ec:a4:ce:fe:ce:14:f9:95:
         51:2a:74:2b:60:65:50:99:35:f1:33:2c:dc:e6:8c:92:c0:32:
         f1:52:8e:0f:f6:a3:5f:e1:d6:fc:27:77:29:d5:95:46:57:f6:
         cb:d9:d3:c2:67:3a:db:b5:45:08:cf:3a:3f:16:d8:3b:22:1c:
         5c:d3:99:ff:c1:5f:cf:ed:b9:81:e1:de:1f:0d:04:88:32:89:
         03:6f:4e:54:74:4b:7e:d0:db:aa:59:82:fb:82:c3:df:86:8d:
         68:06:31:37:3e:b2:2d:74:b5:41:7d:b6:27:12:72:21:ef:44:
         a3:c1:24:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:20:05 2026 by rpki-client