Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/4b0843ab-fef2-3122-99d7-15049fb493c3.roa
File:                     4b0843ab-fef2-3122-99d7-15049fb493c3.roa (raw, json)
Hash identifier:          OMB0RpkaFI4l9ERgOxQqgRamGhe9AmsTq2QWmxOTMzw=
Subject key identifier:   FE:90:B3:EF:66:9B:8E:5F:BC:BF:A9:74:E9:45:17:03:D4:18:8B:31
Certificate issuer:       /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4
Certificate serial:       010D0C9F4328584D492A616521D33DC13B509560
Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/4b0843ab-fef2-3122-99d7-15049fb493c3.roa
Signing time:             Wed 25 Mar 2026 13:00:41 +0000
ROA not before:           Wed 25 Mar 2026 13:00:41 +0000
ROA not after:            Tue 23 Jun 2026 13:00:41 +0000
asID:                     22742
IP address blocks:        64.251.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:2a:61:65:21:d3:3d:c1:3b:50:95:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4
        Validity
            Not Before: Mar 25 13:00:41 2026 GMT
            Not After : Jun 23 13:00:41 2026 GMT
        Subject: CN=af0850fd-a2d8-4a54-a8a8-87caf88ba58b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:98:dd:83:b8:82:29:9a:8f:ca:13:3b:bd:0c:
                    6d:1c:c6:8d:98:89:29:38:91:9a:d0:58:82:a8:6d:
                    15:87:30:2b:8e:e2:ee:7a:b1:dd:27:3d:b7:bc:92:
                    91:ed:42:73:77:d4:01:c0:98:83:d7:53:eb:16:1f:
                    aa:a6:9c:16:49:98:ee:e8:5a:28:46:e8:c0:48:d5:
                    92:a7:cd:40:9a:01:b5:e9:70:1f:9f:6a:f3:be:03:
                    1d:81:e9:47:91:60:40:33:5b:3e:c6:4b:67:e9:aa:
                    73:6d:5b:d6:ca:15:02:a2:4c:ab:36:0d:93:be:af:
                    af:50:6b:71:ee:6f:44:58:8d:cf:d3:37:af:96:bd:
                    2b:ad:38:2f:dc:6e:3f:19:65:fb:cb:e9:f6:f2:02:
                    46:7b:f3:b2:6e:77:fd:f4:67:1d:ce:5c:8f:c4:f8:
                    67:a2:9a:94:68:76:23:fa:bb:32:7b:71:20:1b:3c:
                    ff:e8:07:ec:7e:0a:1f:80:a0:72:24:bc:d5:b8:ff:
                    51:b1:4f:f1:14:84:50:20:16:d5:a0:9a:f0:1f:05:
                    39:9c:20:8a:b7:67:e5:50:71:eb:24:33:15:18:b4:
                    71:64:e7:08:df:82:53:4f:6c:77:9b:09:63:ff:98:
                    d2:16:f4:06:3a:5a:ee:1d:73:fa:53:99:51:b1:3a:
                    92:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:90:B3:EF:66:9B:8E:5F:BC:BF:A9:74:E9:45:17:03:D4:18:8B:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/4b0843ab-fef2-3122-99d7-15049fb493c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl

            X509v3 Authority Key Identifier:
                keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.251.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:23:36:eb:e6:03:83:0f:e3:bc:90:c0:5a:d7:5b:1c:e5:bf:
         82:3f:ce:98:a0:42:8a:cb:d4:a7:5c:e2:5e:50:df:56:4b:52:
         6f:2e:63:5c:6a:2d:47:81:1d:4c:e3:cc:ba:a0:21:12:e6:1f:
         84:8c:aa:ca:f9:0c:b7:d7:28:ea:94:6f:61:8c:ad:25:51:dd:
         00:33:17:e3:7c:02:cf:3e:ef:8b:e3:de:aa:87:c2:69:43:1d:
         b0:1a:c8:42:d5:fe:4e:41:ab:3e:24:aa:78:b5:2d:42:27:3a:
         d3:9c:80:86:3e:ed:df:e3:88:09:4d:0f:ce:a3:57:cb:f4:ed:
         01:4d:96:d2:1f:52:c6:0d:a0:37:57:71:14:e9:3b:fc:33:33:
         4c:a0:3e:d9:a9:67:0c:c3:8c:90:03:1c:41:05:81:c1:fa:1c:
         04:47:b9:c4:1f:f9:96:a6:b9:a1:bb:d8:ea:48:d7:ef:e5:87:
         c8:bc:60:b7:0b:3f:f4:ba:d5:3d:15:8d:7b:d1:6d:18:c7:4e:
         91:80:aa:31:cf:8c:ea:af:21:dd:9d:a0:5d:f4:9b:a8:8c:0a:
         46:17:4d:10:98:98:eb:3c:69:f8:f1:20:15:b8:20:1f:07:26:
         72:3e:91:cf:0e:c2:67:d5:cc:6d:99:e1:88:b2:b2:b9:8f:d6:
         de:87:00:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:05:51 2026 by rpki-client