Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/85184faf-8ca0-3be2-bcd8-76cd19831717.roa
File:                     85184faf-8ca0-3be2-bcd8-76cd19831717.roa (raw, json)
Hash identifier:          UNwlm4dsqaBhrf7L2Fi0nTZOtiwD3SChhMLJZE4qvls=
Subject key identifier:   47:85:F5:DB:93:3F:01:BE:B8:17:3B:5C:14:F6:52:E4:95:2F:12:7B
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E8B2513CFFFAACA4202C4DFC0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/85184faf-8ca0-3be2-bcd8-76cd19831717.roa
Signing time:             Sat 18 Jul 2026 21:00:11 +0000
ROA not before:           Sat 18 Jul 2026 21:00:11 +0000
ROA not after:            Fri 16 Oct 2026 21:00:11 +0000
asID:                     270143
IP address blocks:        38.199.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8b:25:13:cf:ff:aa:ca:42:02:c4:df:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jul 18 21:00:11 2026 GMT
            Not After : Oct 16 21:00:11 2026 GMT
        Subject: CN=6de82bfe-5dee-404c-aa00-47d5c0d302e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:46:71:f4:36:95:f8:2c:0e:21:17:be:40:7d:
                    9a:57:9c:08:c7:78:29:91:86:f9:34:60:41:b9:58:
                    db:57:f0:6f:86:25:61:33:af:6b:64:1a:31:2d:85:
                    ba:97:05:c0:d8:e2:22:70:4c:eb:e5:b8:5f:f9:82:
                    bf:19:e9:f2:46:ce:7d:0f:3e:c2:e0:80:62:34:0a:
                    8c:54:20:88:44:db:dc:ff:07:54:31:ed:30:55:50:
                    bf:cd:74:6a:37:34:84:df:30:33:cd:b9:09:de:d1:
                    1b:9f:2d:97:9a:5c:81:3a:b2:cd:92:3b:e6:d9:56:
                    cf:fa:39:7d:79:4b:4f:1c:d6:7f:70:6f:2b:a4:c0:
                    60:01:98:0a:fa:49:91:a3:72:1b:30:03:86:3e:2e:
                    82:5f:bd:1e:04:d9:87:c2:68:ce:5a:42:87:7c:45:
                    f6:79:5e:00:18:41:dc:6f:8c:b1:93:53:9c:9c:d5:
                    f6:05:5d:12:7e:a6:f6:06:5b:d2:e9:50:9f:9f:47:
                    9c:8d:a5:96:a1:2c:dd:00:1e:55:7a:3c:f1:ee:86:
                    85:e0:c9:b0:83:46:ab:2a:ea:b1:e3:ba:56:2d:d8:
                    f1:2c:2b:e5:ae:1b:36:1e:84:9c:96:20:d4:0d:87:
                    cb:28:ee:b1:67:14:1e:55:21:e8:fc:b4:fd:e2:55:
                    8c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:85:F5:DB:93:3F:01:BE:B8:17:3B:5C:14:F6:52:E4:95:2F:12:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/85184faf-8ca0-3be2-bcd8-76cd19831717.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.199.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:e5:e3:2e:51:0a:4f:9f:2f:7b:84:d2:57:23:25:dc:10:2e:
         c1:c5:d5:28:d4:8d:d2:5c:43:e5:1c:6b:ed:78:4c:fd:34:c0:
         46:01:5d:c6:e4:31:f7:8b:34:44:04:4a:16:7e:60:15:bc:9d:
         f5:a7:bc:1b:1b:28:f8:6b:4f:9f:4e:f6:1a:c4:3a:b4:50:1b:
         a8:65:a0:0a:b1:c5:d1:3e:a2:b7:4a:e0:2c:48:21:6f:01:4c:
         8f:d6:e9:49:05:26:6d:df:95:c2:25:62:8d:ac:c3:8e:5d:ce:
         76:07:e2:0c:79:cf:4d:f3:c4:bd:ba:6c:6f:a5:e8:49:7e:d0:
         cd:5f:cb:74:a0:88:5c:3b:87:5f:5d:c7:41:fa:de:8b:d1:2e:
         6a:c8:f0:29:e5:ba:26:5b:53:a3:d1:b7:09:e7:c3:35:08:9a:
         2e:c1:e4:f9:bf:7c:b4:f4:07:d0:66:38:08:5d:33:01:d3:ac:
         01:6c:14:4e:4a:ff:e3:e1:92:54:ce:fd:14:98:f4:11:76:43:
         57:04:62:49:47:7c:f6:3d:96:3f:01:12:cc:1a:85:ee:52:1b:
         99:5f:95:20:82:18:96:b5:e1:ef:2f:18:e6:fc:15:17:4c:af:
         2f:d6:ed:87:d6:8d:f8:0f:4a:8e:bf:85:a5:6e:e9:90:36:62:
         41:6f:ca:2e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6LJRPP/6rKQgLE38AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDcxODIxMDAxMVoXDTI2MTAxNjIxMDAxMVowLzEtMCsGA1UEAxMk
NmRlODJiZmUtNWRlZS00MDRjLWFhMDAtNDdkNWMwZDMwMmUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUZx9DaV+CwOIRe+QH2aV5wIx3gpkYb5NGBB
uVjbV/BvhiVhM69rZBoxLYW6lwXA2OIicEzr5bhf+YK/GenyRs59Dz7C4IBiNAqM
VCCIRNvc/wdUMe0wVVC/zXRqNzSE3zAzzbkJ3tEbny2XmlyBOrLNkjvm2VbP+jl9
eUtPHNZ/cG8rpMBgAZgK+kmRo3IbMAOGPi6CX70eBNmHwmjOWkKHfEX2eV4AGEHc
b4yxk1OcnNX2BV0Sfqb2BlvS6VCfn0ecjaWWoSzdAB5Vejzx7oaF4Mmwg0arKuqx
47pWLdjxLCvlrhs2HoScliDUDYfLKO6xZxQeVSHo/LT94lWMRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEeF9duTPwG+uBc7XBT2UuSVLxJ7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvODUxODRmYWYtOGNhMC0z
YmUyLWJjZDgtNzZjZDE5ODMxNzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJsf4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABfl4y5RCk+fL3uE0lcjJdwQLsHF1SjUjdJcQ+Uca+14TP00wEYBXcbk
MfeLNEQEShZ+YBW8nfWnvBsbKPhrT59O9hrEOrRQG6hloAqxxdE+ordK4CxIIW8B
TI/W6UkFJm3flcIlYo2sw45dznYH4gx5z03zxL26bG+l6El+0M1fy3SgiFw7h19d
x0H63ovRLmrI8CnluiZbU6PRtwnnwzUImi7B5Pm/fLT0B9BmOAhdMwHTrAFsFE5K
/+PhklTO/RSY9BF2Q1cEYklHfPY9lj8BEswahe5SG5lflSCCGJa14e8vGOb8FRdM
ry/W7YfWjfgPSo6/haVu6ZA2YkFvyi4=
-----END CERTIFICATE-----
Generated at Tue Jul 21 05:07:03 2026 by rpki-client