Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/63772934-17e5-40fe-9a28-6fe830808dc3/dfc7fe2f-6147-35da-ab92-755fdd1f9757.roa
File:                     dfc7fe2f-6147-35da-ab92-755fdd1f9757.roa (raw, json)
Hash identifier:          V99HUERu3pXNmYdR3ssumnfjQjoG3qu+rlWiQunpzN8=
Subject key identifier:   45:A8:85:A5:F3:8C:B3:7A:97:F8:65:B2:F1:11:EC:01:3A:A0:69:7E
Certificate issuer:       /CN=63772934-17e5-40fe-9a28-6fe830808dc3
Certificate serial:       010D0C9F4328584F4C3D7903D7DB6036B490F980
Authority key identifier: 51:4A:90:E0:DD:A7:03:EA:3B:D9:C4:E2:08:CE:A5:09:8D:F6:10:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/63772934-17e5-40fe-9a28-6fe830808dc3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/63772934-17e5-40fe-9a28-6fe830808dc3/dfc7fe2f-6147-35da-ab92-755fdd1f9757.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     396982
IP address blocks:        161.38.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/63772934-17e5-40fe-9a28-6fe830808dc3/63772934-17e5-40fe-9a28-6fe830808dc3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/63772934-17e5-40fe-9a28-6fe830808dc3/63772934-17e5-40fe-9a28-6fe830808dc3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/63772934-17e5-40fe-9a28-6fe830808dc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:79:03:d7:db:60:36:b4:90:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63772934-17e5-40fe-9a28-6fe830808dc3
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=32bae153-3bf5-4646-b6e3-af115ad8698c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:45:cc:58:9b:a1:a7:93:31:ca:48:8f:c8:71:
                    ab:1f:49:d0:a5:43:1a:30:1d:5e:6e:c6:a3:77:16:
                    e9:8e:d7:b1:dd:12:cb:9c:8a:48:a9:ee:cc:bc:94:
                    ac:21:b3:08:36:15:94:3d:06:d5:5b:de:17:00:29:
                    cb:08:e2:ba:8b:7f:4b:7b:f6:67:3f:82:96:be:27:
                    31:9b:2c:72:19:71:05:1e:ac:97:54:8b:8f:34:ef:
                    b8:25:00:0c:e6:69:c5:9e:69:ac:66:57:7c:ce:6b:
                    c6:fe:d0:93:80:12:3d:0c:74:c7:bf:01:48:89:c0:
                    f0:fd:02:f1:94:54:20:e8:6d:17:a7:37:e4:9a:af:
                    b0:2a:49:05:e3:0d:08:ed:bb:ac:74:9f:dd:39:d9:
                    e5:62:70:3b:9c:ad:71:1b:58:16:73:42:9d:c6:0e:
                    82:f2:a9:fb:ee:03:d5:02:9c:14:74:f7:0b:54:6a:
                    0c:74:47:b3:36:a9:f1:19:1e:52:11:32:f7:93:1c:
                    05:c0:ef:1b:d4:db:96:64:06:cb:02:b4:9a:ba:cc:
                    df:ad:c5:0e:bd:5a:4e:86:f7:8e:6b:15:07:24:7d:
                    a5:eb:ec:6d:f5:0b:84:aa:47:3f:76:e4:43:b9:48:
                    00:b4:74:98:46:55:71:85:10:d2:3f:71:62:e6:b9:
                    9f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A8:85:A5:F3:8C:B3:7A:97:F8:65:B2:F1:11:EC:01:3A:A0:69:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/63772934-17e5-40fe-9a28-6fe830808dc3/dfc7fe2f-6147-35da-ab92-755fdd1f9757.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/63772934-17e5-40fe-9a28-6fe830808dc3/63772934-17e5-40fe-9a28-6fe830808dc3.crl

            X509v3 Authority Key Identifier:
                keyid:51:4A:90:E0:DD:A7:03:EA:3B:D9:C4:E2:08:CE:A5:09:8D:F6:10:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/63772934-17e5-40fe-9a28-6fe830808dc3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.38.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:89:f8:32:40:69:ea:cf:0e:f2:cf:a2:30:7b:3f:bb:5c:78:
         d5:4f:28:1c:76:7c:02:be:2e:c3:53:f4:e7:97:c7:9d:18:3e:
         5c:b7:ca:03:98:2a:15:3c:14:25:fa:65:c8:e5:58:91:95:95:
         03:fc:f3:cc:f5:31:af:8b:8d:8c:eb:a5:27:e1:65:b3:e8:76:
         83:4b:de:f2:f8:f4:82:97:38:f2:de:82:a3:81:6d:ca:e0:3e:
         44:79:cd:a9:15:4a:ae:83:98:83:ab:9f:75:c4:5c:7f:6b:61:
         b4:11:1b:67:21:f5:3d:13:15:6f:31:67:3b:47:a1:95:96:d0:
         71:1a:38:10:6b:8b:d4:51:14:54:3c:b0:e0:33:58:8b:65:72:
         f6:2f:60:ff:63:66:02:f6:ef:37:c1:14:f6:0a:0c:54:68:f7:
         1d:58:64:dc:f7:7a:c5:83:c3:b6:f5:8d:a6:77:e9:4e:62:1a:
         21:26:8c:0c:bc:93:3d:54:34:22:c2:75:c6:fe:95:93:26:80:
         9d:df:90:78:3a:79:e0:d6:49:76:fc:a0:dd:ae:8a:1d:80:72:
         c9:8b:cd:be:3a:c1:c2:35:9c:b5:c5:bf:48:9b:e6:7c:99:1c:
         15:5d:09:aa:3b:2b:8f:be:b5:5e:11:3c:c5:6d:c9:2a:15:22:
         5b:a9:6e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 10:53:59 2026 by rpki-client