Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2e37763d-10a3-30be-9cdf-ec5055d05fdc.roa
File:                     2e37763d-10a3-30be-9cdf-ec5055d05fdc.roa (raw, json)
Hash identifier:          rKjnA3Bijw3c4SSP1pIrw7xA0qTBK4Vv3o5WeAgTpNA=
Subject key identifier:   5E:25:4E:92:66:88:9F:07:3D:66:72:86:99:3D:A8:55:8A:D4:94:74
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584EA799C1897260F7E631F40600
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2e37763d-10a3-30be-9cdf-ec5055d05fdc.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     0
IP address blocks:        38.137.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:99:c1:89:72:60:f7:e6:31:f4:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c198dcc1-ed59-42ad-812f-1199850758aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:90:ad:06:a5:eb:1f:71:2a:d6:32:ac:91:d5:
                    75:d5:c5:7b:3d:15:30:c5:3e:52:3f:2b:a0:50:57:
                    51:db:e2:44:ba:8a:96:1d:ac:54:1d:c1:39:ce:96:
                    7d:4f:1b:b2:04:9f:e5:62:81:75:8b:c0:ad:30:4a:
                    83:4a:31:d7:de:8c:eb:b5:10:b3:5d:ed:00:2f:c9:
                    f3:ff:c9:a6:80:bb:0f:10:a8:79:f2:3a:95:e5:6c:
                    90:18:59:67:4e:71:9e:92:f9:76:e1:e6:48:4a:27:
                    c9:a2:82:02:0e:e1:16:ef:55:2f:28:21:11:d1:28:
                    1c:09:52:ae:4f:ef:e2:96:cc:c1:9e:8c:22:32:21:
                    5c:ae:e8:51:91:de:71:5d:86:ed:17:c8:35:df:b7:
                    74:2b:06:a2:13:de:27:fd:29:b1:c4:e9:01:00:1e:
                    d8:fb:e3:c9:c5:6a:b3:fd:89:30:1a:84:5e:5d:ea:
                    ec:42:b1:9c:61:a4:f6:ef:33:1c:37:b0:10:e7:99:
                    0d:64:75:bc:14:26:fc:ba:18:65:2e:88:2f:45:ab:
                    4b:35:e0:cb:b8:ba:a3:f4:98:66:78:c1:d7:6c:a8:
                    93:84:4e:94:51:f0:f9:a4:a7:33:d0:28:ca:d1:21:
                    15:13:32:69:de:40:18:54:35:bf:29:76:e6:77:11:
                    07:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:25:4E:92:66:88:9F:07:3D:66:72:86:99:3D:A8:55:8A:D4:94:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2e37763d-10a3-30be-9cdf-ec5055d05fdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.137.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:c6:4b:5d:e9:8f:3e:76:75:92:ed:18:ea:18:f3:3b:fb:0e:
         e1:17:12:8a:b8:39:3b:8f:b0:85:75:c0:68:1b:86:11:cf:65:
         65:e2:c2:a5:85:2a:fe:73:ee:ce:99:c1:ab:8e:26:00:c1:a6:
         44:26:b5:0f:70:cc:c5:d6:11:46:cc:c1:57:22:1f:b0:0b:64:
         9a:69:e0:8a:45:f3:d0:25:1e:54:09:90:9f:49:51:05:a8:26:
         e4:3b:38:05:7e:aa:aa:c9:08:f0:70:3c:32:b2:37:16:5a:52:
         47:cb:8b:54:a2:e3:2c:2a:33:85:0e:5c:49:36:0f:7c:c9:74:
         ac:65:64:92:bb:e6:52:e8:83:9a:19:a4:a0:f3:3a:e2:96:33:
         fe:40:7b:94:2f:61:ab:00:61:d0:22:de:ca:86:76:05:cc:08:
         a5:4b:09:32:b6:4b:61:0d:08:f8:0c:90:b2:b8:28:fa:01:bb:
         43:48:09:ce:e2:f9:1c:b7:01:79:d2:95:ef:a1:16:13:5a:69:
         53:39:0e:33:ee:94:89:8e:db:f3:cb:16:26:af:6b:16:2a:9e:
         70:23:e0:bb:ea:20:1c:6e:0e:35:5a:25:90:a5:64:d7:74:84:
         fe:27:76:fe:6e:a7:96:c6:28:68:0b:a6:ec:7b:b7:1a:43:86:
         96:f5:be:6f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmcGJcmD35jH0BgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
YzE5OGRjYzEtZWQ1OS00MmFkLTgxMmYtMTE5OTg1MDc1OGFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpCtBqXrH3Eq1jKskdV11cV7PRUwxT5SPyug
UFdR2+JEuoqWHaxUHcE5zpZ9TxuyBJ/lYoF1i8CtMEqDSjHX3ozrtRCzXe0AL8nz
/8mmgLsPEKh58jqV5WyQGFlnTnGekvl24eZISifJooICDuEW71UvKCER0SgcCVKu
T+/ilszBnowiMiFcruhRkd5xXYbtF8g137d0KwaiE94n/SmxxOkBAB7Y++PJxWqz
/YkwGoReXersQrGcYaT27zMcN7AQ55kNZHW8FCb8uhhlLogvRatLNeDLuLqj9Jhm
eMHXbKiThE6UUfD5pKcz0CjK0SEVEzJp3kAYVDW/KXbmdxEH0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF4lTpJmiJ8HPWZyhpk9qFWK1JR0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMmUzNzc2M2QtMTBhMy0z
MGJlLTljZGYtZWM1MDU1ZDA1ZmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJom0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIPGS13pjz52dZLtGOoY8zv7DuEXEoq4OTuPsIV1wGgbhhHPZWXiwqWF
Kv5z7s6ZwauOJgDBpkQmtQ9wzMXWEUbMwVciH7ALZJpp4IpF89AlHlQJkJ9JUQWo
JuQ7OAV+qqrJCPBwPDKyNxZaUkfLi1Si4ywqM4UOXEk2D3zJdKxlZJK75lLog5oZ
pKDzOuKWM/5Ae5QvYasAYdAi3sqGdgXMCKVLCTK2S2ENCPgMkLK4KPoBu0NICc7i
+Ry3AXnSle+hFhNaaVM5DjPulImO2/PLFiavaxYqnnAj4LvqIBxuDjVaJZClZNd0
hP4ndv5up5bGKGgLpux7txpDhpb1vm8=
-----END CERTIFICATE-----
Generated at Fri Sep 11 13:55:25 2026 by rpki-client