Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/cd9b00f0-92c7-3825-8bfe-27924d5c71b8.roa
File:                     cd9b00f0-92c7-3825-8bfe-27924d5c71b8.roa (raw, json)
Hash identifier:          11GMm3Bkoiq7+tGiokOHOYwjCcbUsLu3hkn15hk5X/8=
Subject key identifier:   B6:3C:DB:AB:9D:F6:22:69:C5:A1:A0:E5:64:C2:82:68:33:DE:2E:F2
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E74CF6CEFC84D64E8EB138780
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/cd9b00f0-92c7-3825-8bfe-27924d5c71b8.roa
Signing time:             Fri 10 Jul 2026 21:00:12 +0000
ROA not before:           Fri 10 Jul 2026 21:00:12 +0000
ROA not after:            Thu 08 Oct 2026 21:00:12 +0000
asID:                     272676
IP address blocks:        38.226.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:74:cf:6c:ef:c8:4d:64:e8:eb:13:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jul 10 21:00:12 2026 GMT
            Not After : Oct  8 21:00:12 2026 GMT
        Subject: CN=14ed159c-e321-407e-b637-3e1937988757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a4:44:a7:63:60:1e:32:68:dd:bf:d9:44:4b:
                    c1:41:ce:b8:17:3a:39:84:10:97:68:5f:73:f9:12:
                    06:35:82:2d:db:8e:f3:dc:e3:45:31:41:2a:8f:81:
                    b0:86:77:a0:3c:ab:8f:1d:ca:1d:31:5a:a9:2f:db:
                    16:12:61:84:4e:08:a8:00:b1:f7:1b:87:7f:24:7b:
                    95:33:48:ca:3e:10:0a:98:fb:66:18:80:af:47:1f:
                    02:e7:5e:99:a8:24:1b:10:2e:85:63:ab:67:d4:ed:
                    34:a2:d7:5f:9e:4b:46:a9:10:87:2e:96:d7:24:ca:
                    f5:7e:c9:3c:7d:a4:01:77:52:a6:9a:cf:82:1a:db:
                    99:67:0b:d7:1c:d1:fc:a8:f7:62:21:75:15:d9:19:
                    81:31:58:ac:91:aa:91:ca:91:58:b4:c5:f5:55:91:
                    fc:13:f5:02:78:40:73:0f:ea:de:0d:df:d5:d5:0f:
                    7d:e5:25:19:31:19:3f:9f:87:f5:e4:ec:a0:33:ea:
                    62:4e:14:5d:4f:65:35:78:07:a4:e9:06:f7:6f:81:
                    91:aa:73:d6:bc:a1:3b:aa:33:af:7d:1a:b8:07:20:
                    87:3d:61:47:99:4a:2c:61:6b:f5:10:77:cb:0b:a5:
                    47:b7:df:96:ca:25:90:78:13:35:67:b7:27:5d:e2:
                    96:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:3C:DB:AB:9D:F6:22:69:C5:A1:A0:E5:64:C2:82:68:33:DE:2E:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/cd9b00f0-92c7-3825-8bfe-27924d5c71b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.226.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:0c:3b:6a:36:ea:85:7f:e7:e2:8e:83:b1:95:52:cd:f2:71:
         fc:b7:df:1b:23:0e:20:20:a2:f1:64:a2:cf:f4:8e:43:c8:ea:
         d3:a9:38:8e:7a:38:b5:1c:76:2c:fe:21:35:58:07:50:b0:fe:
         cc:7f:a6:88:aa:8b:78:a8:c4:b6:2f:36:c0:6d:78:83:bf:ea:
         c8:bd:6f:1c:ed:4b:19:83:ce:f5:99:a5:b7:fb:27:b2:7d:a1:
         33:3a:89:c6:94:ca:5f:66:0d:55:ec:95:ba:53:d4:5e:98:62:
         e4:9e:79:31:e3:b6:e1:c3:f1:39:68:43:d0:94:76:d9:ff:88:
         08:ab:6d:8e:d8:57:14:ac:82:f8:63:ed:64:84:53:ff:5d:13:
         a2:c3:4c:73:38:5f:c7:34:d8:90:38:cc:ef:99:68:9a:d5:3d:
         3f:98:bc:1b:dd:9f:d5:f0:23:a8:8d:92:4a:19:ea:0a:86:42:
         e4:63:7d:c2:de:f1:18:1b:16:d8:1d:7c:8f:c5:85:a4:5b:62:
         ab:de:ac:6e:c9:4f:ad:f6:24:d9:1f:b7:d2:68:49:c2:1b:39:
         4c:da:67:b3:63:e1:83:6a:fe:50:94:40:80:56:9b:c7:ee:bd:
         3e:13:37:bb:6c:e7:3c:f6:57:28:3c:e1:c0:76:88:e6:31:51:
         0d:f7:1e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:17:51 2026 by rpki-client