Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e04cb9a9-2005-3f35-850b-afa4b59bb9f3.roa
File:                     e04cb9a9-2005-3f35-850b-afa4b59bb9f3.roa (raw, json)
Hash identifier:          fbNBovP9QRjHWSaTfL1tj0OAwYLbTZJVmrJes3yWo0Y=
Subject key identifier:   BC:EB:B8:2D:3B:94:2D:5E:CC:51:CE:BB:F7:F9:83:EB:27:B6:67:59
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D47C506229BAFBECB36AB6D10
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e04cb9a9-2005-3f35-850b-afa4b59bb9f3.roa
Signing time:             Wed 25 Mar 2026 01:00:32 +0000
ROA not before:           Wed 25 Mar 2026 01:00:32 +0000
ROA not after:            Tue 23 Jun 2026 01:00:32 +0000
asID:                     399728
IP address blocks:        38.146.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:47:c5:06:22:9b:af:be:cb:36:ab:6d:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Mar 25 01:00:32 2026 GMT
            Not After : Jun 23 01:00:32 2026 GMT
        Subject: CN=8d969d3a-b97e-4c1b-82c5-6af1f383bbd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6b:ba:a8:08:72:5c:a4:fd:49:91:cc:f5:af:
                    e1:c5:25:a7:8c:f4:fc:b9:e4:db:26:71:48:ff:04:
                    78:3e:f0:4e:f5:9e:9d:42:88:69:57:21:26:60:06:
                    4d:d9:7b:72:0a:c2:75:ca:7b:11:1b:35:e3:21:93:
                    ab:57:6a:c9:f5:91:6e:28:0f:d2:f9:ff:ea:7a:46:
                    61:69:db:21:d9:5a:17:80:71:4c:d5:d1:29:65:36:
                    92:08:8e:98:16:ad:4c:22:68:74:8d:6f:e0:b0:9f:
                    43:13:56:df:44:72:57:82:a5:78:ea:3e:06:06:18:
                    58:be:60:b1:85:6e:52:ce:b1:4b:e2:a7:0a:e1:01:
                    06:47:07:37:a6:03:cf:ee:67:e4:ba:ac:8f:34:58:
                    76:ca:d3:12:37:d4:98:e3:6c:e0:9c:89:5e:be:fc:
                    0b:57:9b:96:07:73:39:e6:46:ba:fc:db:30:3f:18:
                    09:11:06:c2:79:a6:36:0c:41:9b:97:2e:3a:4a:b4:
                    e8:a7:45:ed:e5:2f:0d:0c:03:0f:6a:f7:b7:a3:00:
                    3d:60:d7:56:19:51:f5:ae:c4:cd:22:88:3c:9f:82:
                    cb:05:48:0e:1b:d7:f3:98:13:1d:6e:d2:f9:e6:97:
                    3c:35:0c:77:2e:e5:2f:c0:0a:c7:48:4c:b6:d7:57:
                    86:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:EB:B8:2D:3B:94:2D:5E:CC:51:CE:BB:F7:F9:83:EB:27:B6:67:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e04cb9a9-2005-3f35-850b-afa4b59bb9f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.146.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:39:e0:a6:45:63:7d:df:b0:00:38:62:81:e9:e9:70:ab:3c:
         d2:45:d7:25:7a:dc:35:aa:5f:e9:7d:46:3e:01:6b:34:88:25:
         4e:f9:a0:50:44:bd:06:1f:62:67:2e:5e:72:74:f0:15:62:de:
         fd:79:64:e0:75:1f:d0:38:a7:86:be:73:49:5a:97:a7:e6:8e:
         71:a5:90:aa:8a:c3:68:07:51:3f:f1:29:c7:a5:01:5f:0f:db:
         01:5f:a6:2a:4f:e0:1f:19:3a:dc:d8:9e:28:8e:e9:06:5f:25:
         5b:d7:13:d6:bd:2e:06:f7:0c:c4:3c:c7:6d:7d:96:9d:27:7a:
         26:a3:97:79:13:b6:1b:a3:99:c8:47:e5:3b:0d:4f:ac:62:9d:
         53:26:a2:96:72:d2:5f:c9:d3:28:65:f8:56:2b:4c:85:75:df:
         c8:34:dc:29:9a:c3:cd:44:6e:f5:df:b1:5b:f4:81:34:cf:e6:
         ba:da:80:52:86:e3:92:83:de:9c:de:ad:e5:8d:be:28:35:ff:
         96:c6:f2:54:50:01:dd:06:35:98:59:94:27:bc:fe:37:13:83:
         0d:9d:81:ac:10:93:1b:74:02:d5:c6:7a:bc:38:ae:40:06:23:
         a1:a5:81:1a:bd:74:7e:bd:31:95:22:ca:df:7f:50:73:90:71:
         8d:09:33:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:31:43 2026 by rpki-client