Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/de059a92-e619-35c3-bb37-aaf9f56833ba.roa
File:                     de059a92-e619-35c3-bb37-aaf9f56833ba.roa (raw, json)
Hash identifier:          293nHk3xsIx7aAoOHTgb1uLAuMUhW756pWJ9nVr5cOQ=
Subject key identifier:   79:85:5F:D5:C4:F9:D9:81:C6:3C:1F:7C:EA:AA:02:83:B3:4D:BE:2B
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E4DBA26706850FAB0E5E53720
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/de059a92-e619-35c3-bb37-aaf9f56833ba.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     12722
IP address blocks:        38.180.66.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:ba:26:70:68:50:fa:b0:e5:e5:37:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=27e23f08-9203-4a55-8954-3a98122b6296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:66:25:e0:ee:a7:8e:2b:0e:3a:3e:68:98:b7:
                    f6:0b:2a:90:32:ab:5e:73:c4:50:5d:b4:76:93:23:
                    85:b8:29:96:b1:25:80:a7:84:24:b6:7c:32:20:fd:
                    45:04:d1:fc:94:8e:86:b4:2d:d6:df:6f:f4:13:d1:
                    0d:31:de:e8:00:13:4d:18:e5:dd:98:83:21:9e:a2:
                    ac:2b:21:64:6c:30:98:09:9c:15:c6:4d:c9:d0:1a:
                    95:8d:63:5f:1c:fa:63:ea:1b:6f:2e:48:21:2b:42:
                    58:54:d0:1b:aa:1a:a9:d3:d5:aa:96:fe:db:67:b4:
                    ec:d4:66:28:9f:be:99:ed:82:74:de:d0:cf:1b:f4:
                    47:13:2b:cc:13:c5:60:75:bb:00:1a:83:7d:c4:1b:
                    df:67:14:7a:2a:6f:f1:09:aa:4d:b8:46:dc:b2:4b:
                    e0:a9:23:db:28:e9:8f:37:6e:83:f5:73:ca:28:13:
                    a6:5e:76:3f:cf:cd:fc:66:88:81:a5:26:10:a3:1e:
                    b0:59:2a:e6:02:d2:ae:5d:06:e5:41:51:9c:ee:35:
                    5d:7d:37:99:c2:a8:9a:ab:8d:24:49:bd:25:86:74:
                    5e:fa:ba:62:4d:09:00:bf:b7:80:2e:66:c8:96:c5:
                    c2:6f:46:d4:7a:5b:8b:57:d9:a4:c1:fc:92:a1:f3:
                    ab:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:85:5F:D5:C4:F9:D9:81:C6:3C:1F:7C:EA:AA:02:83:B3:4D:BE:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/de059a92-e619-35c3-bb37-aaf9f56833ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.180.66.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:0f:e9:ee:c5:eb:f1:f0:60:f6:ef:7b:50:ec:8f:19:92:7e:
         47:f4:91:fa:c9:31:f7:f8:64:8e:68:d4:7c:1c:73:98:5d:2b:
         bb:11:9b:54:b5:b7:96:17:b7:9e:12:8a:f2:f7:1b:37:a5:99:
         0b:05:03:5e:d2:3f:17:9a:68:bf:ea:31:39:35:ea:26:24:fb:
         ac:18:ca:e2:ee:9f:44:38:00:22:9e:7c:f7:01:32:d0:e8:37:
         f8:ea:f7:fc:39:9e:f9:37:c5:ea:bc:44:14:db:6f:f1:e6:92:
         0b:85:70:5c:7b:d5:e3:14:bd:26:43:72:be:d0:c3:4b:cc:04:
         cd:7b:85:e4:02:53:bb:1c:a1:3b:2b:38:f5:00:a9:f0:1d:55:
         5d:41:da:bb:ca:e6:83:d0:3a:73:0d:06:bf:84:ef:f1:a1:85:
         df:49:2b:94:c1:a7:f2:dc:cb:e7:18:a2:9a:ae:a8:92:71:f1:
         13:b0:58:7e:27:29:e6:f6:e3:55:87:8c:27:2b:91:84:e5:52:
         7a:d4:af:c4:9f:93:b7:25:ea:18:ad:8d:e3:97:8c:b0:72:58:
         42:01:66:c6:95:ed:37:8c:16:56:80:d1:16:ad:11:62:f8:a4:
         b2:d3:a8:ed:40:ab:09:86:88:8b:8d:e5:7c:3f:04:40:fb:e9:
         7a:99:b5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:06:58 2026 by rpki-client