Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/db1a0fea-1357-3f45-a4f7-2de8888f289a.roa
File:                     db1a0fea-1357-3f45-a4f7-2de8888f289a.roa (raw, json)
Hash identifier:          mCSIsWCF2DDXSF/m+jHzeRMxbGjmCEIYlLxmPdULQ/Q=
Subject key identifier:   57:09:61:0D:28:07:92:29:3B:E2:DC:C7:6E:45:62:98:4F:F5:01:A7
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E3FC46F327005725479062900
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/db1a0fea-1357-3f45-a4f7-2de8888f289a.roa
Signing time:             Sun 21 Jun 2026 21:00:12 +0000
ROA not before:           Sun 21 Jun 2026 21:00:12 +0000
ROA not after:            Sat 19 Sep 2026 21:00:12 +0000
asID:                     49020
IP address blocks:        38.51.51.0/24 maxlen: 24
                          206.62.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3f:c4:6f:32:70:05:72:54:79:06:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jun 21 21:00:12 2026 GMT
            Not After : Sep 19 21:00:12 2026 GMT
        Subject: CN=815855e8-f546-47f0-b47f-5ca7becb38da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:45:b4:ef:2f:b2:94:28:2f:2a:c1:b3:51:d6:
                    59:fa:97:76:0e:0a:24:31:0f:17:f8:ca:82:8d:0b:
                    17:93:45:6e:c6:0d:16:88:ba:67:9b:de:1c:04:dc:
                    ee:14:02:59:e7:08:b5:f6:ff:0e:82:e4:27:4e:81:
                    88:be:34:0f:ed:44:cb:1f:6c:70:f0:cf:8b:8f:63:
                    c4:6e:5c:92:6e:39:e4:5c:b5:95:f0:38:e4:71:8c:
                    79:a5:78:9e:e5:d9:58:85:98:a9:fd:5f:41:79:3d:
                    c4:30:ec:eb:ea:73:1d:dd:b4:df:a1:1c:f5:28:3c:
                    3b:34:7b:6e:40:fd:91:72:7d:9d:d5:2b:89:0d:b8:
                    97:59:10:cc:36:2a:3d:45:13:81:26:7c:f3:3f:73:
                    ac:19:74:41:54:cc:17:ac:10:ae:ca:73:42:97:3f:
                    33:65:4f:05:9d:09:0d:93:9d:ae:b1:14:81:32:76:
                    25:a6:ee:1f:99:27:63:7d:2e:08:ef:b7:8a:05:f6:
                    6a:b0:70:b5:aa:e7:a8:1f:7c:6f:41:43:ba:e0:89:
                    a0:c4:47:dc:bf:32:ee:91:f7:2c:2c:ec:f5:19:3d:
                    86:b9:d7:f2:8c:64:48:fd:fb:f2:42:24:8e:62:35:
                    a1:07:67:d5:4e:c6:11:84:40:97:6a:7e:a0:a4:fb:
                    f5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:09:61:0D:28:07:92:29:3B:E2:DC:C7:6E:45:62:98:4F:F5:01:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/db1a0fea-1357-3f45-a4f7-2de8888f289a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.51.51.0/24
                  206.62.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:39:68:f7:e0:96:11:61:bb:cd:94:c0:3f:92:af:9d:30:bf:
         17:e7:11:7c:40:6c:9a:e7:ee:32:a9:b9:19:fe:a6:1b:32:04:
         5f:30:76:9a:33:7d:94:0d:d5:24:63:45:9f:dc:50:90:d8:b0:
         1a:98:a8:11:1a:3b:89:c1:2c:5f:11:00:6e:e3:7f:ae:4e:3b:
         32:08:64:43:33:88:d6:d7:8d:50:05:f5:93:07:24:7d:9a:2a:
         bf:f0:ca:17:c5:05:bd:7b:bd:3f:ff:92:6c:58:ab:b5:8a:da:
         cb:13:1e:67:a6:01:2d:a1:08:e2:f5:79:dd:81:c4:70:9b:78:
         05:34:4f:4f:47:37:40:97:02:71:a8:f5:6c:e6:42:8d:9a:12:
         ee:45:59:79:32:d2:ad:d6:b2:35:24:cc:16:48:b5:aa:97:b4:
         cb:3c:ce:0b:93:92:55:2d:6e:03:f9:4d:2b:90:13:a8:3f:8d:
         eb:83:d9:9b:51:f8:dc:3b:a6:98:7f:88:3f:4a:08:55:60:4b:
         2f:9b:d6:2b:31:20:ee:9f:c5:94:d1:6a:0a:74:58:7d:75:bf:
         e8:11:bc:23:d4:93:63:e7:a9:20:12:e1:ba:16:13:f0:e0:d8:
         ef:87:87:58:c1:55:72:d2:b1:a6:fa:db:5f:10:01:68:5b:9d:
         e6:f3:ef:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:22:04 2026 by rpki-client