Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c5eaf902-1f50-3dcb-960d-043a82c0c11f.roa
File:                     c5eaf902-1f50-3dcb-960d-043a82c0c11f.roa (raw, json)
Hash identifier:          U1wbLXt+3TL51NOpm2KbM+6psyffBUh+EhItefyEFxk=
Subject key identifier:   49:7D:88:79:CC:76:90:E1:CF:C9:96:9A:C3:78:30:4B:A0:F6:B1:19
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584DADFE88DD10F715D91820DD80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c5eaf902-1f50-3dcb-960d-043a82c0c11f.roa
Signing time:             Thu 30 Apr 2026 15:49:17 +0000
ROA not before:           Thu 30 Apr 2026 15:49:17 +0000
ROA not after:            Wed 29 Jul 2026 15:49:17 +0000
asID:                     272978
IP address blocks:        38.199.68.0/24 maxlen: 24
                          38.199.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ad:fe:88:dd:10:f7:15:d9:18:20:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Apr 30 15:49:17 2026 GMT
            Not After : Jul 29 15:49:17 2026 GMT
        Subject: CN=9415ae2e-f69e-474f-a978-1269366fb57b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:90:1b:b5:12:c4:26:d4:6a:8e:33:7f:98:f1:
                    a2:5b:a4:e6:7d:33:0b:29:e9:b1:79:a6:7d:bd:0f:
                    05:12:17:0a:95:a7:c9:d6:2c:62:9d:0e:93:94:39:
                    db:c6:f7:f3:a4:c9:39:79:04:90:41:32:14:90:32:
                    58:d6:73:6c:89:9e:e0:35:ea:f5:6d:4c:de:56:8b:
                    15:c2:d9:c5:8e:7a:bf:f3:0a:b3:d8:e1:55:23:23:
                    66:06:80:41:2f:1b:e1:02:61:d7:0f:92:8d:49:e9:
                    c8:32:d7:46:82:02:98:9d:e7:3a:95:5d:e6:02:e2:
                    d6:53:ee:87:eb:e8:dd:30:bb:44:05:0f:8f:33:f7:
                    ee:a3:82:4a:6d:b8:0f:59:02:b6:54:f5:dc:cf:71:
                    f2:ef:cc:de:09:1a:e1:4b:92:e8:08:f1:df:3f:9a:
                    96:60:c0:28:79:af:e3:a8:2e:af:c4:2b:d7:35:01:
                    6d:84:1d:aa:73:31:c1:c7:54:fa:4e:99:13:be:d6:
                    e1:60:03:21:39:e6:a3:dc:6a:ad:dd:89:87:3e:ce:
                    31:18:99:f6:db:30:4f:ba:24:cd:ee:d2:93:35:6e:
                    25:3b:cc:2b:76:50:a1:10:cf:dd:24:f8:12:55:6f:
                    56:83:71:5f:ec:28:43:aa:04:c4:e6:f4:c9:1c:20:
                    88:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:7D:88:79:CC:76:90:E1:CF:C9:96:9A:C3:78:30:4B:A0:F6:B1:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c5eaf902-1f50-3dcb-960d-043a82c0c11f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.199.68.0/24
                  38.199.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:f6:46:39:ed:2e:ad:31:86:07:de:cb:8e:d6:60:5f:9d:10:
         c2:a1:6a:98:a4:1b:66:61:04:81:c0:de:d7:1e:8b:d0:94:8e:
         f8:2d:3f:e2:d6:4e:bc:ef:41:c9:bb:e8:ee:88:68:69:ea:fd:
         c8:89:70:68:2f:8d:3e:40:b1:ca:ec:0b:83:1b:5f:ca:d2:69:
         0f:07:de:27:1e:8a:64:c5:c7:13:c0:db:ec:c0:aa:71:a9:0b:
         44:0f:af:86:39:b6:04:82:24:7a:52:b5:01:08:1d:75:28:29:
         30:a8:39:72:8a:33:c7:fc:b6:55:f0:7d:c5:32:68:68:c2:29:
         60:85:c1:95:e5:85:a8:64:fd:7c:c9:69:d5:b2:6a:ea:2a:c6:
         7e:dd:53:08:73:50:dc:03:a6:83:34:3f:67:88:0c:6c:42:86:
         d7:ae:89:48:f5:f1:e0:5a:4f:53:01:74:4d:8d:7c:f7:98:24:
         51:a1:92:6b:0e:2c:a3:de:b8:b1:bb:cb:72:93:89:63:87:f8:
         1c:fb:fe:cc:34:49:91:1a:ec:f1:5b:05:4d:28:07:07:29:2c:
         0d:04:39:78:03:5f:5d:9c:08:4d:19:00:57:63:12:18:11:34:
         30:ed:ba:7a:aa:a6:99:40:f7:d9:66:df:07:19:d5:b9:33:a5:
         b2:b7:0f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:48:33 2026 by rpki-client