Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/eb4ae3ba-3883-3f37-a314-91d9d63274ce.roa
File:                     eb4ae3ba-3883-3f37-a314-91d9d63274ce.roa (raw, json)
Hash identifier:          eytBBWrRDsWNy0+7FJPJeRMPOr8UGBqhajrxDyJQ+WY=
Subject key identifier:   76:0C:24:FD:18:05:B7:E0:6A:35:D8:12:7F:FE:AF:0B:7A:7F:2F:ED
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D15A252B65D9A9B546E07BB80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/eb4ae3ba-3883-3f37-a314-91d9d63274ce.roa
Signing time:             Sat 07 Mar 2026 02:00:32 +0000
ROA not before:           Sat 07 Mar 2026 02:00:32 +0000
ROA not after:            Fri 05 Jun 2026 01:00:32 +0000
asID:                     274240
IP address blocks:        38.108.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:15:a2:52:b6:5d:9a:9b:54:6e:07:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Mar  7 02:00:32 2026 GMT
            Not After : Jun  5 01:00:32 2026 GMT
        Subject: CN=8ec28ba4-be9d-4c97-ac94-01e8010a04ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:20:b4:47:f9:db:0d:27:4b:0b:f2:12:3b:51:
                    3a:a5:2d:13:77:d3:da:7d:34:20:7c:5a:b8:e5:62:
                    b1:b3:7b:63:a5:9d:b0:92:36:3d:ed:58:47:40:e5:
                    fa:26:96:67:ee:72:a0:8a:89:ec:2d:35:9a:bb:ed:
                    17:71:b3:c2:f8:58:c8:2c:97:7d:59:3d:6d:db:9e:
                    72:d0:11:33:26:62:80:2b:69:77:72:fd:f0:fa:97:
                    f3:74:07:ca:f2:03:ce:1d:d2:55:37:99:0b:0c:75:
                    f5:37:46:83:25:68:f5:18:f2:df:61:62:b5:17:8c:
                    05:ae:37:8a:21:68:6a:5c:6b:fe:5d:3c:8a:f3:a6:
                    e3:1c:44:a0:69:9a:53:22:5b:a8:e9:f8:bf:ba:e4:
                    42:ee:69:be:09:f6:a9:40:cb:f1:1c:a5:83:47:7c:
                    2d:d5:97:78:7a:c6:bc:0a:8d:d9:d3:7c:73:f1:10:
                    4f:1f:17:b7:c7:82:b5:1b:2d:f9:af:70:0e:e2:f3:
                    fb:2c:a2:90:d8:d8:b7:1c:e2:99:16:c7:01:ee:5b:
                    0d:32:3b:6f:ca:ab:5f:ea:7a:b2:2a:e4:c9:9a:ed:
                    98:b2:56:a2:6e:0e:80:56:e6:ba:d9:0a:6d:98:81:
                    d9:7b:b3:81:8b:31:05:d7:13:40:af:6e:67:fe:98:
                    b9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:0C:24:FD:18:05:B7:E0:6A:35:D8:12:7F:FE:AF:0B:7A:7F:2F:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/eb4ae3ba-3883-3f37-a314-91d9d63274ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.108.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:13:fb:e6:e8:3c:ab:64:3c:8e:71:8e:ec:25:60:af:10:c2:
         29:21:72:fb:ae:3c:c0:2e:0c:47:4e:29:26:ec:c7:26:ac:2f:
         55:b4:67:dc:49:0c:5a:01:02:c9:e5:59:dd:a4:0e:be:d5:0c:
         73:e4:5f:f1:84:35:67:21:9f:7c:5d:ff:f2:4d:e4:4c:68:4a:
         d0:35:15:36:38:bf:94:89:8a:34:5b:5c:a0:a7:78:ee:1a:25:
         ea:9e:b8:75:40:82:17:24:8d:95:b7:83:b7:0c:98:57:dc:6c:
         4a:2f:1b:71:2e:7e:ee:b5:48:25:62:5d:3d:92:89:33:59:db:
         5c:69:66:fc:4c:63:87:7e:fc:bc:43:2a:53:4b:a1:5e:00:c8:
         ee:2d:96:b5:ff:6d:4c:23:02:fa:b5:1d:ed:9e:c3:db:20:89:
         ee:d7:5a:9b:53:c8:5e:26:0b:c1:ec:05:fb:62:c5:80:8e:51:
         cd:5e:dc:50:9b:52:95:67:0f:30:cd:a0:88:ce:1e:31:f9:c2:
         57:80:0e:b7:af:b4:66:ae:8b:31:c2:fb:9c:9b:54:cb:3e:78:
         8b:3d:de:cc:4b:26:94:1b:be:fd:42:50:eb:09:bf:73:23:5d:
         3e:33:21:61:ee:9c:9a:8b:b7:a0:87:1a:5e:1e:56:e7:cb:50:
         80:fa:25:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:27 2026 by rpki-client