Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e/38f83ce5-2988-37ed-a3dd-524801d41b91.roa
File:                     38f83ce5-2988-37ed-a3dd-524801d41b91.roa (raw, json)
Hash identifier:          c/tcCWzqD5vX2XY5kGqj9WnKzFHlaTynoPSdz8AC/WE=
Subject key identifier:   2E:24:A9:AD:AC:A3:57:88:DD:68:93:AA:63:92:52:4A:75:13:BB:17
Certificate issuer:       /CN=d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e
Certificate serial:       010D0C9F4328584FAB289B44497B27B875D2F900
Authority key identifier: 7C:91:C6:7F:1B:47:BE:6C:FB:32:32:50:EF:07:52:69:F4:55:AE:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e/38f83ce5-2988-37ed-a3dd-524801d41b91.roa
Signing time:             Fri 30 Oct 2026 01:00:13 +0000
ROA not before:           Fri 30 Oct 2026 01:00:13 +0000
ROA not after:            Thu 28 Jan 2027 02:00:13 +0000
asID:                     393444
IP address blocks:        72.46.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:ab:28:9b:44:49:7b:27:b8:75:d2:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e
        Validity
            Not Before: Oct 30 01:00:13 2026 GMT
            Not After : Jan 28 02:00:13 2027 GMT
        Subject: CN=5c2f3ed8-ed85-4449-b9cf-433263fd1450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c7:aa:7d:be:ee:d4:2e:1a:dc:3b:21:64:74:
                    29:8e:59:c6:a8:c4:3c:5f:1b:67:d7:71:42:8f:ba:
                    f6:fc:15:74:3f:df:f3:54:06:39:13:a8:7d:9d:49:
                    1f:9b:1a:03:37:9e:4a:5a:44:35:2f:a4:6a:4e:76:
                    cd:74:30:8e:13:a6:14:36:47:fc:73:db:d9:6c:fa:
                    2e:71:27:75:63:ad:68:0e:b1:1e:bf:7d:09:2f:14:
                    9d:25:0d:3e:5d:b5:cc:44:ab:91:7f:bd:e5:89:e5:
                    b3:4e:8a:10:86:11:88:ed:19:80:af:b8:07:97:16:
                    8a:76:97:c5:f3:f3:4e:29:03:d7:5d:66:80:b0:24:
                    da:11:1c:ac:b1:04:47:f6:a3:7a:85:38:27:45:25:
                    f4:03:3e:e9:66:8f:d5:80:29:11:bd:de:85:af:86:
                    fa:52:1d:52:25:37:87:89:b2:45:c7:9d:3b:50:f6:
                    ec:bb:11:16:1c:ee:d3:a4:1f:48:00:70:e3:24:1d:
                    49:ca:80:1a:93:b8:48:44:0a:e1:b1:c0:22:46:d1:
                    57:f9:6e:2a:48:1c:28:23:17:0c:6c:9c:cd:3c:d5:
                    87:93:dd:39:88:df:68:bb:72:15:7f:76:9c:0f:7e:
                    b4:6c:8e:f6:b6:df:e9:12:0b:01:f6:dc:4c:85:10:
                    77:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:24:A9:AD:AC:A3:57:88:DD:68:93:AA:63:92:52:4A:75:13:BB:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e/38f83ce5-2988-37ed-a3dd-524801d41b91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e.crl

            X509v3 Authority Key Identifier:
                keyid:7C:91:C6:7F:1B:47:BE:6C:FB:32:32:50:EF:07:52:69:F4:55:AE:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.46.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:96:da:ce:a9:94:ac:04:28:17:12:b1:fe:bb:59:a2:72:28:
         23:a7:77:79:30:c6:61:59:64:73:b8:97:38:4c:1d:78:d9:98:
         35:4a:73:1f:4e:3b:b1:83:ab:77:8e:d8:59:b3:02:10:ad:eb:
         42:92:c3:12:eb:81:e4:6e:7d:0f:62:f8:a4:ad:5c:5a:25:4a:
         03:b5:3d:33:39:73:0c:1e:f8:59:d4:08:a4:ce:f4:81:70:94:
         31:87:d6:5b:81:d5:e1:5c:3c:d5:01:5d:0e:0f:f6:f5:3e:53:
         d3:2d:68:b3:77:e5:06:57:c3:84:0f:40:bf:73:d0:0a:61:c9:
         cb:8a:bf:f6:c3:14:7e:4c:0a:4c:33:ea:de:d6:4f:a6:21:ba:
         11:25:00:4f:c4:30:4e:e6:99:e5:8b:d1:4d:69:39:0d:7a:7f:
         2b:1c:34:e5:92:f8:81:f7:93:55:23:2c:4a:03:c8:08:32:d2:
         b7:5f:55:a0:b7:f9:30:2f:27:29:f4:f1:c6:5c:4e:73:1d:96:
         82:03:c3:7b:4e:3b:2b:37:1b:9a:e3:3b:51:f1:6c:ee:43:b2:
         6f:36:b7:e9:79:34:15:b7:9c:46:e0:f8:38:7e:bc:ac:19:9e:
         5c:4c:a6:f5:e2:81:4b:ec:ad:76:79:2d:52:3d:3c:19:ef:82:
         e7:b5:67:d5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+rKJtESXsnuHXS+QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDNiNzA3YWItYjRhNi00MmRlLWE3YmMtNjExNWNhNGIz
YjNlMB4XDTI2MTAzMDAxMDAxM1oXDTI3MDEyODAyMDAxM1owLzEtMCsGA1UEAxMk
NWMyZjNlZDgtZWQ4NS00NDQ5LWI5Y2YtNDMzMjYzZmQxNDUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiseqfb7u1C4a3DshZHQpjlnGqMQ8Xxtn13FC
j7r2/BV0P9/zVAY5E6h9nUkfmxoDN55KWkQ1L6RqTnbNdDCOE6YUNkf8c9vZbPou
cSd1Y61oDrEev30JLxSdJQ0+XbXMRKuRf73lieWzTooQhhGI7RmAr7gHlxaKdpfF
8/NOKQPXXWaAsCTaERyssQRH9qN6hTgnRSX0Az7pZo/VgCkRvd6Fr4b6Uh1SJTeH
ibJFx507UPbsuxEWHO7TpB9IAHDjJB1JyoAak7hIRArhscAiRtFX+W4qSBwoIxcM
bJzNPNWHk905iN9ou3IVf3acD360bI72tt/pEgsB9txMhRB3bQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC4kqa2so1eI3WiTqmOSUkp1E7sXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kM2I3
MDdhYi1iNGE2LTQyZGUtYTdiYy02MTE1Y2E0YjNiM2UvMzhmODNjZTUtMjk4OC0z
N2VkLWEzZGQtNTI0ODAxZDQxYjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDNiNzA3YWItYjRhNi00MmRlLWE3
YmMtNjExNWNhNGIzYjNlL2QzYjcwN2FiLWI0YTYtNDJkZS1hN2JjLTYxMTVjYTRi
M2IzZS5jcmwwHwYDVR0jBBgwFoAUfJHGfxtHvmz7MjJQ7wdSafRVrsAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kM2I3MDdhYi1iNGE2LTQyZGUtYTdiYy02MTE1
Y2E0YjNiM2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESC5wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFKW2s6plKwEKBcSsf67WaJyKCOnd3kwxmFZZHO4lzhMHXjZmDVKcx9O
O7GDq3eO2FmzAhCt60KSwxLrgeRufQ9i+KStXFolSgO1PTM5cwwe+FnUCKTO9IFw
lDGH1luB1eFcPNUBXQ4P9vU+U9MtaLN35QZXw4QPQL9z0AphycuKv/bDFH5MCkwz
6t7WT6YhuhElAE/EME7mmeWL0U1pOQ16fyscNOWS+IH3k1UjLEoDyAgy0rdfVaC3
+TAvJyn08cZcTnMdloIDw3tOOys3G5rjO1HxbO5Dsm82t+l5NBW3nEbg+Dh+vKwZ
nlxMpvXigUvsrXZ5LVI9PBnvgue1Z9U=
-----END CERTIFICATE-----
Generated at Wed Nov 4 04:38:43 2026 by rpki-client