Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/38e1a956-d5b9-36fb-a6f7-458e18c2a641.roa
File:                     38e1a956-d5b9-36fb-a6f7-458e18c2a641.roa (raw, json)
Hash identifier:          U+Es+EX02jrq7iKUvaF1q3zgygno2vFLyzPTTYO3ScI=
Subject key identifier:   7E:43:60:E4:53:1B:E9:8B:14:14:48:AE:56:3A:4D:7F:7B:21:8F:EA
Certificate issuer:       /CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
Certificate serial:       010D0C9F4328584E48248909D4928EEF93A9FCC0
Authority key identifier: C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/38e1a956-d5b9-36fb-a6f7-458e18c2a641.roa
Signing time:             Wed 24 Jun 2026 21:00:12 +0000
ROA not before:           Wed 24 Jun 2026 21:00:12 +0000
ROA not after:            Tue 22 Sep 2026 21:00:12 +0000
asID:                     18914
IP address blocks:        107.161.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:48:24:89:09:d4:92:8e:ef:93:a9:fc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
        Validity
            Not Before: Jun 24 21:00:12 2026 GMT
            Not After : Sep 22 21:00:12 2026 GMT
        Subject: CN=d0bad1a5-d673-4ffb-9764-af2915f80b05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:13:2d:b9:5e:16:60:9d:e7:44:fb:2e:e4:95:
                    7b:81:73:56:2b:ae:51:72:d6:41:01:53:ec:a3:9b:
                    3b:b3:05:4e:34:ee:05:d3:d2:c3:e1:3c:9f:17:e2:
                    ef:76:01:8e:7c:63:d4:58:7d:b8:0a:29:8c:88:5c:
                    f9:ca:1f:44:ab:09:83:c3:a0:6f:ff:6e:fb:19:17:
                    6c:29:b6:44:ea:d0:07:ce:ea:17:fe:22:d6:38:c5:
                    17:e9:9c:2b:95:7f:55:b4:f6:1e:20:0f:57:7b:2b:
                    df:de:9c:15:1d:95:98:aa:ca:c9:0d:11:cc:a9:d6:
                    06:d4:6b:e6:2e:8b:c7:01:ce:93:a5:c5:42:1d:f8:
                    2c:9f:ac:73:0b:d2:46:8f:2b:03:2a:f5:9e:0c:b8:
                    e1:a9:44:ae:72:ca:74:67:6a:7c:d9:10:e3:74:72:
                    23:57:e6:ee:08:d7:93:6d:2d:d9:54:df:6f:10:6e:
                    f1:d3:9f:ce:74:9e:15:cb:3d:bc:58:78:eb:89:72:
                    f7:8c:90:c2:e0:29:b4:98:2b:02:83:6e:e4:90:c9:
                    ec:6d:ef:96:5d:25:cd:6a:97:2f:9f:2e:4e:85:ba:
                    4b:57:0e:8b:8b:81:79:6e:02:c4:c1:52:f3:d5:ec:
                    1d:bf:7d:df:70:3e:10:12:62:db:ad:ef:3c:4a:4e:
                    f6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:43:60:E4:53:1B:E9:8B:14:14:48:AE:56:3A:4D:7F:7B:21:8F:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/38e1a956-d5b9-36fb-a6f7-458e18c2a641.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl

            X509v3 Authority Key Identifier:
                keyid:C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.161.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:00:64:aa:25:5a:f4:56:fc:25:05:f3:fe:7f:f8:d0:42:17:
         f0:a4:7f:5c:1b:a4:a6:4e:5a:4a:a7:32:68:0f:70:f8:9d:1e:
         fa:2d:1f:4e:b1:e5:3e:1c:7d:21:cb:0e:ba:05:60:7f:80:1b:
         68:10:f7:a8:29:10:01:43:7d:0a:d9:bb:8d:cb:0e:f3:58:b7:
         62:ef:f6:ea:97:a6:f0:0f:18:ea:0a:a9:33:5e:8e:75:5e:4a:
         13:b0:9a:b3:83:a4:bf:a8:28:46:51:99:de:92:0b:ae:4e:6c:
         fc:0b:7e:8f:62:fd:e9:af:8f:11:48:ce:a6:80:71:b0:42:3a:
         dc:6b:d1:49:33:8a:d4:48:03:72:e2:36:0f:d8:89:5b:4a:f2:
         0c:e5:cf:8b:71:f2:6f:dc:1e:bb:9e:a1:d4:d2:b5:a2:3b:e9:
         a4:f5:63:e2:bd:74:d9:09:1b:93:27:67:27:a2:2c:ea:be:f3:
         2a:5e:c3:21:1d:f2:fb:4c:f8:a1:5d:b7:99:70:a1:a2:9a:0a:
         f8:9e:08:5e:03:b7:3c:64:bc:85:ac:53:5f:6f:43:5c:c7:b2:
         6a:82:1a:d0:a1:2f:23:5f:92:67:e6:dd:90:fe:de:f9:16:00:
         58:14:06:13:c4:d5:fa:b0:83:7b:c3:56:93:36:1c:f2:46:7e:
         12:6d:9d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:36:04 2026 by rpki-client