Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d9dc3d00-73e2-3c05-af47-690791d8e6ce.roa
File:                     d9dc3d00-73e2-3c05-af47-690791d8e6ce.roa (raw, json)
Hash identifier:          T8mylxdZf4btO3j+zLvkePPmyeEGPS32XmFKw0YEc9w=
Subject key identifier:   63:AB:9D:2B:5B:BE:6C:ED:A1:6F:6F:A9:F8:76:DE:68:1F:C6:5D:E6
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F49874049ED66CF7BEA3BCA00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d9dc3d00-73e2-3c05-af47-690791d8e6ce.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     273937
IP address blocks:        38.127.196.0/24 maxlen: 24
                          38.129.92.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:40:49:ed:66:cf:7b:ea:3b:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a1bdb003-04cd-452b-bdee-1125881fcf06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:55:c5:49:e0:69:c6:62:8c:31:4d:3c:f8:36:
                    cd:75:4f:21:ef:35:fa:34:c6:9a:1e:f0:9a:fc:f0:
                    c3:21:dc:1b:19:87:02:5a:0e:df:e1:42:41:cf:76:
                    5a:34:06:4a:57:f5:10:65:d3:99:3c:a3:97:33:ed:
                    76:b6:3e:9d:9b:09:90:b5:7e:7e:7f:d5:0e:84:86:
                    39:2f:2c:89:0a:a9:2d:f5:87:91:fc:92:de:44:32:
                    42:eb:27:a0:b9:bd:c7:1d:d4:13:d6:00:a4:c2:b3:
                    c6:53:29:0b:5e:e5:58:59:d6:3b:88:0f:2d:43:6c:
                    d0:df:10:38:8c:81:4a:86:95:e1:83:7d:97:83:16:
                    78:27:83:c5:ff:1f:a3:7b:66:f9:6b:a0:ee:ea:27:
                    e2:10:ef:fc:20:f4:58:2e:4b:cc:83:27:fc:4d:04:
                    c9:2b:99:ad:6a:94:04:92:88:da:b1:33:2b:f1:2b:
                    20:f9:1d:44:9d:5c:14:fc:71:03:a2:06:e1:aa:92:
                    ad:c0:f9:00:95:f0:a0:66:e7:0e:de:bb:0d:71:dc:
                    09:92:57:f5:84:c0:57:2a:eb:e9:ee:31:39:31:9f:
                    0c:e9:ac:6f:73:1c:8c:0e:f6:9a:eb:f6:1e:2b:c5:
                    9e:81:d1:e7:31:2b:5b:d2:3b:08:51:b9:41:f5:d7:
                    c7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:AB:9D:2B:5B:BE:6C:ED:A1:6F:6F:A9:F8:76:DE:68:1F:C6:5D:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d9dc3d00-73e2-3c05-af47-690791d8e6ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.127.196.0/24
                  38.129.92.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:ef:84:21:3d:b7:2a:1e:f4:6c:e0:36:7f:85:c1:62:50:59:
         67:8d:9a:05:2e:ff:9b:55:0f:a3:6c:08:85:8a:a7:33:b9:a0:
         11:38:34:d8:ec:7a:12:d7:6f:86:ef:86:46:76:8b:41:c1:9d:
         d2:e4:e3:6a:e6:68:c7:a9:17:27:18:6f:ad:dc:84:20:af:ec:
         15:d9:7d:ce:e2:5b:94:15:3c:b0:57:07:94:63:a6:24:37:56:
         ab:b0:d3:c3:71:15:a5:cb:31:df:db:93:78:85:b5:f7:9c:91:
         1d:00:90:87:cb:98:76:f3:5e:6c:21:16:f9:9f:da:cb:f8:25:
         82:73:26:d0:07:11:3e:31:8f:49:63:e8:a7:d9:78:54:b4:d6:
         20:2a:70:1d:36:1a:3e:55:56:b9:8b:6c:28:ea:b6:26:96:ab:
         4b:ae:9c:e6:a3:7c:ca:dd:f2:06:5f:99:fa:e3:1e:52:a8:86:
         de:62:b8:ea:bd:66:c9:d3:61:cc:7d:24:3e:25:0d:3b:c7:d3:
         ac:de:75:ce:b5:1c:0e:cb:46:a4:87:ea:1b:de:7b:8c:bf:fd:
         3d:1b:46:e0:ee:20:21:c2:65:a1:e9:26:e9:6b:6e:3d:80:e1:
         c2:04:3b:9a:d9:1b:a7:f4:b4:26:d9:2c:50:d4:a8:ec:87:84:
         fb:7d:0e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:20:44 2026 by rpki-client