Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d81efa9f-eab5-3cea-a519-2dcaefd41ef9.roa
File:                     d81efa9f-eab5-3cea-a519-2dcaefd41ef9.roa (raw, json)
Hash identifier:          b6g4MR+wz/2qsrY/fmWUb1Cl7ca2S2km3nZmKPIJ5FI=
Subject key identifier:   22:DE:F8:6E:7D:87:52:E9:6A:56:E1:AC:D9:A1:9E:68:A7:E1:7C:BD
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584DC425F7668E076A9E0484CDC0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d81efa9f-eab5-3cea-a519-2dcaefd41ef9.roa
Signing time:             Fri 08 May 2026 14:16:31 +0000
ROA not before:           Fri 08 May 2026 14:16:31 +0000
ROA not after:            Thu 06 Aug 2026 14:16:31 +0000
asID:                     402020
IP address blocks:        38.83.73.0/24 maxlen: 24
                          154.57.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c4:25:f7:66:8e:07:6a:9e:04:84:cd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: May  8 14:16:31 2026 GMT
            Not After : Aug  6 14:16:31 2026 GMT
        Subject: CN=18cbeb32-c7da-427e-9c7c-990a7dc3a941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:51:64:60:af:ae:56:a8:21:5c:8e:d8:58:bb:
                    70:ca:98:a8:1b:4f:b7:33:46:4d:78:87:bc:ad:03:
                    1d:21:6c:d7:07:f2:f4:c0:b5:d1:2c:9e:e0:4f:14:
                    2e:8f:54:18:12:66:84:5e:7f:6e:37:37:95:5a:59:
                    3d:73:19:b3:86:5b:df:67:bc:e9:84:b2:69:82:5f:
                    e9:3d:2c:b5:ff:a7:c5:98:cd:b9:43:97:fe:13:ab:
                    66:6d:e8:67:aa:f1:0c:d2:f3:0d:9c:24:78:b5:8f:
                    31:4a:9a:4c:15:95:1a:f7:69:77:eb:15:5d:e2:39:
                    d8:3a:5a:10:36:88:e4:de:7f:55:d1:70:8c:cb:b9:
                    26:90:a1:0f:6c:bc:53:0c:fb:9d:54:ea:c8:f1:5e:
                    cb:5e:73:25:dd:ea:a0:bf:12:f9:61:e0:e9:7d:83:
                    67:92:cf:26:71:fa:c4:cf:cb:4a:05:e4:81:91:c8:
                    a4:3f:0b:10:9d:d4:ce:70:e6:7f:e5:a3:f7:52:e2:
                    cb:94:e0:15:7a:b9:1d:88:ef:ce:92:d2:dc:bc:5c:
                    41:a7:80:ec:38:ae:e0:4a:ce:18:ec:44:56:d3:fe:
                    78:67:e8:71:15:58:9d:9e:bc:7f:34:41:de:b7:13:
                    63:e2:e4:43:02:ef:32:b1:81:d4:40:be:f8:11:3d:
                    04:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:DE:F8:6E:7D:87:52:E9:6A:56:E1:AC:D9:A1:9E:68:A7:E1:7C:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d81efa9f-eab5-3cea-a519-2dcaefd41ef9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.83.73.0/24
                  154.57.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:bf:28:a0:c3:44:18:77:da:b9:2b:6d:1d:ba:09:52:09:a4:
         43:b8:88:87:05:7a:01:22:7b:e0:e0:29:60:b2:87:6f:53:e5:
         32:ba:f5:82:94:9b:a3:a9:7a:a2:78:ad:4c:55:6b:6b:f6:d8:
         68:b0:59:9f:b5:69:00:31:41:a3:b0:24:b3:d1:4f:ae:a9:a7:
         d5:3a:f9:ce:b1:f5:d4:17:f4:e6:6c:ce:47:fb:cc:f4:5f:23:
         b7:2a:9b:2e:89:2d:00:f3:ea:c1:56:1a:d4:bb:9e:a2:b1:94:
         4b:47:9c:c5:bf:0d:4d:6e:ea:d7:24:26:39:ba:9d:c8:1d:54:
         d0:1e:ae:fa:91:38:3e:55:f6:40:83:27:2c:a8:e5:bd:de:0c:
         5f:87:99:37:c5:8a:00:ec:86:45:d6:18:4c:c7:f8:8e:14:3e:
         b9:55:b4:f5:d5:01:e8:fd:46:03:3c:be:14:ee:f1:e6:79:64:
         74:b7:86:a9:d7:ea:12:55:cb:02:a6:7c:ab:65:5e:9e:1b:de:
         7c:22:24:6e:f7:b7:7a:cd:ff:5a:40:24:99:72:ad:1c:1c:e3:
         b5:2f:d5:a8:ca:d7:fe:ab:f6:88:16:1d:a4:a0:57:91:64:5c:
         b4:49:86:50:63:a9:66:18:e5:8e:40:5b:99:b7:5f:68:fd:0a:
         65:1d:89:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:55:05 2026 by rpki-client