Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c1c214ae-cd88-3f67-8b82-9cd30ce1a297.roa
File:                     c1c214ae-cd88-3f67-8b82-9cd30ce1a297.roa (raw, json)
Hash identifier:          6mm/xWJ58VsJmbtR3vh6HixCvXB7x7dxjdgE/PrK05g=
Subject key identifier:   1C:3C:D2:52:02:83:60:AA:CB:7B:B6:F4:FE:5B:44:C8:3D:58:7E:BB
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584B82D37DA2DD1D0856AB635198
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c1c214ae-cd88-3f67-8b82-9cd30ce1a297.roa
Signing time:             Mon 13 Oct 2025 19:08:55 +0000
ROA not before:           Mon 13 Oct 2025 19:08:55 +0000
ROA not after:            Sun 11 Jan 2026 20:08:55 +0000
asID:                     16581
IP address blocks:        38.246.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:d3:7d:a2:dd:1d:08:56:ab:63:51:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct 13 19:08:55 2025 GMT
            Not After : Jan 11 20:08:55 2026 GMT
        Subject: CN=bc368ea5-57b8-4782-9e65-0dc3a264e933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:68:37:d1:34:f8:c0:56:47:35:c4:8a:5a:cd:
                    43:7d:d4:ec:d9:54:e3:d5:c4:45:3e:f4:3d:1b:98:
                    00:c5:1b:b2:79:ab:df:2a:4f:bb:9c:74:ee:20:b7:
                    e2:68:bd:73:30:1e:e8:50:64:32:a2:b4:e0:67:d5:
                    a1:5c:c7:df:dc:56:87:17:8e:ec:11:c8:88:7d:08:
                    46:fc:25:db:24:ce:14:34:17:47:55:a2:01:48:93:
                    af:0a:60:11:15:06:c4:87:e5:c1:df:a8:3f:f2:64:
                    59:22:f5:99:3f:71:01:92:ce:08:f3:7e:1e:dc:a4:
                    7b:1a:77:75:5a:49:f3:2d:f9:64:5f:dc:c4:64:4f:
                    4f:5f:5c:9c:a4:a7:ba:5a:e4:37:18:d8:af:4f:ec:
                    75:85:24:8c:3d:8f:97:a6:ac:e5:2a:9b:f8:82:f8:
                    e5:d2:fe:5c:42:da:b2:a4:8b:2c:29:17:33:49:4c:
                    72:f8:db:06:66:c5:35:43:13:19:98:6b:f3:47:43:
                    1e:58:99:bd:5d:96:10:c2:57:3d:e4:4b:d8:9a:9c:
                    60:f9:5b:a8:fd:cb:0a:55:eb:15:46:1a:97:ce:e8:
                    e9:8a:b5:6b:00:23:47:55:4c:44:d7:40:2b:1b:2e:
                    bb:0f:7c:fb:6e:7a:c2:9c:da:9d:ec:8f:7e:ed:4f:
                    d8:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:3C:D2:52:02:83:60:AA:CB:7B:B6:F4:FE:5B:44:C8:3D:58:7E:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c1c214ae-cd88-3f67-8b82-9cd30ce1a297.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.246.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:82:64:2f:c7:49:18:f8:5c:74:df:bd:d5:b6:fb:18:09:2b:
         91:5a:25:6d:ad:7e:21:c6:77:9d:dd:1b:64:92:fe:6d:51:24:
         62:9b:1b:51:fb:ad:ab:30:3b:ac:48:eb:99:cb:73:0c:9e:68:
         59:b6:67:b8:cb:97:f5:47:2a:3a:e7:4c:43:e5:d3:86:47:cb:
         49:6d:83:05:e2:73:11:12:50:63:2a:47:c5:9c:08:47:57:47:
         87:49:94:0c:46:35:e7:a1:f7:be:85:31:67:65:ff:1c:cd:24:
         74:7c:e9:99:74:be:d4:e4:eb:86:a7:57:a4:cb:9a:8d:8b:90:
         89:65:f0:78:2f:d9:a3:9e:f0:41:1f:0e:3f:0f:60:55:5b:89:
         ed:13:07:7d:61:24:f1:c0:58:cd:18:29:99:dd:03:29:af:12:
         93:23:e7:84:b4:6a:74:fc:c7:5d:6d:96:c8:66:d4:6c:1b:23:
         54:8f:82:d9:ce:47:dd:43:34:98:99:8e:57:67:cd:59:4d:5e:
         9a:8b:20:b2:b7:55:af:42:56:0d:a4:72:41:66:e6:dd:24:81:
         4b:3a:06:a5:90:67:68:de:7c:0c:38:8a:cb:2c:73:9e:68:00:
         a9:39:65:72:cd:6d:6e:df:5b:9d:81:5c:b8:47:c2:64:97:19:
         85:b2:ae:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:50:41 2025 by rpki-client