Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e670dbd8-ee7d-3736-baf0-55a1dda0cc50.roa
File:                     e670dbd8-ee7d-3736-baf0-55a1dda0cc50.roa (raw, json)
Hash identifier:          XDg3Bh7Rvh3v5htDITtz909oOWw93P8CGg/EOcF1XX0=
Subject key identifier:   D7:A6:3B:A9:3B:CF:5C:BE:91:AB:93:96:C9:0F:9E:EF:77:D9:8D:1F
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584DB8D58B1B2997B73CC16F35C0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e670dbd8-ee7d-3736-baf0-55a1dda0cc50.roa
Signing time:             Mon 04 May 2026 13:00:30 +0000
ROA not before:           Mon 04 May 2026 13:00:30 +0000
ROA not after:            Sun 02 Aug 2026 13:00:30 +0000
asID:                     273300
IP address blocks:        38.19.111.0/24 maxlen: 24
                          38.236.168.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b8:d5:8b:1b:29:97:b7:3c:c1:6f:35:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: May  4 13:00:30 2026 GMT
            Not After : Aug  2 13:00:30 2026 GMT
        Subject: CN=6c96b6b8-b082-4258-a551-d1b219b7008c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:79:d3:0f:6d:73:58:c4:3b:ab:1d:d4:ca:50:
                    5e:b4:34:4d:9f:89:b9:ae:0a:ee:04:ea:0f:46:92:
                    c4:cf:53:f5:95:ee:71:f1:2f:65:6a:f7:89:bb:cb:
                    ed:4c:ed:5c:f8:64:66:05:bd:e3:84:13:04:43:61:
                    9f:70:0b:ca:e0:3f:f7:fe:a0:59:57:21:05:e9:61:
                    1c:4c:52:8b:ad:cf:bf:f5:99:b6:cd:e9:7b:28:fa:
                    57:c2:27:90:97:2d:05:84:c9:62:28:c5:30:01:67:
                    64:f5:ed:d8:d7:7e:72:93:6a:38:86:85:f9:8e:6e:
                    31:a5:6d:24:ea:e8:3b:e3:71:3c:bb:a0:1f:b6:47:
                    b8:cc:d0:07:20:18:31:40:80:49:18:9d:bd:3f:65:
                    de:be:5b:9c:f7:79:82:9f:a2:a3:ac:94:f0:ed:96:
                    c4:8e:9c:3b:45:30:3a:a8:30:f6:1a:75:8c:50:af:
                    17:24:2a:1e:05:1b:77:93:5a:32:6c:3e:06:25:b3:
                    2b:ad:d5:27:eb:93:04:c6:bb:91:1f:70:cc:08:04:
                    ad:90:d5:a5:6b:69:d4:9c:f7:fe:f3:12:b7:6b:8e:
                    fd:65:cf:e8:dc:3d:e3:7d:53:75:a9:30:e0:3b:ff:
                    06:5a:e4:06:9b:a5:14:82:62:e2:76:b8:54:3e:b4:
                    91:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A6:3B:A9:3B:CF:5C:BE:91:AB:93:96:C9:0F:9E:EF:77:D9:8D:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e670dbd8-ee7d-3736-baf0-55a1dda0cc50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.19.111.0/24
                  38.236.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:63:40:b2:9b:75:a6:fa:24:33:33:59:2f:08:61:bc:43:6e:
         90:55:ff:1e:5a:d2:e9:7c:88:21:46:2d:7a:d8:9d:bc:ac:77:
         81:75:cd:eb:f1:a7:c6:c0:f6:ae:d0:24:ea:ec:16:af:83:00:
         b4:12:d3:06:02:ce:30:63:0f:c2:7b:3a:96:fc:10:33:bf:c8:
         e1:26:f2:7c:16:6b:a1:e0:cb:b9:b1:fe:1d:57:b3:8f:d5:dd:
         d6:62:d6:ad:b3:01:9a:9a:57:1e:0e:aa:97:a1:6f:ea:33:23:
         30:36:72:ee:82:2f:c8:b2:4f:1f:47:96:59:0c:c4:f5:ae:c5:
         e7:80:ef:2e:b7:c4:31:5f:a5:ee:c7:6b:92:16:53:fc:24:7a:
         fa:3e:8c:a9:b4:21:43:9c:44:79:f5:0c:8e:25:60:11:31:de:
         88:55:72:36:0f:cc:80:ff:05:cb:cc:49:16:c4:32:de:f2:95:
         34:78:ba:73:9d:e1:7b:06:1e:2e:4a:d9:5a:3b:53:e2:1d:87:
         d6:78:ba:74:57:1c:3d:25:ff:ba:7f:12:35:5f:aa:78:f1:b4:
         ab:76:76:5b:59:ec:b9:91:fb:3e:e2:9a:58:93:a6:d7:d2:7a:
         21:cf:17:7e:56:77:d2:84:b0:65:36:e7:b1:de:c0:f4:58:85:
         02:1d:2a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:32:29 2026 by rpki-client