Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2f6d6eb8-a1ec-3410-ab45-d84c54ce2ebc.roa
File:                     2f6d6eb8-a1ec-3410-ab45-d84c54ce2ebc.roa (raw, json)
Hash identifier:          8iNK2AOyabMMEviBYWl1wwUn0YEHvxFM7m6F39x5bxA=
Subject key identifier:   D5:09:B3:1F:CB:02:0B:82:99:78:3F:92:9B:FC:42:E0:67:1C:63:D9
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F7E7E0598123D62B57C49B110
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2f6d6eb8-a1ec-3410-ab45-d84c54ce2ebc.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     272363
IP address blocks:        38.21.113.0/24 maxlen: 24
                          38.224.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7e:05:98:12:3d:62:b5:7c:49:b1:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=f75789fb-56db-466a-abf9-0186c9d086c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:88:8f:73:bf:3c:b1:e7:2a:b4:05:c9:38:ce:
                    58:0b:22:13:d9:e3:a2:f1:cf:d8:76:d4:bb:4c:9b:
                    85:68:f5:3f:5b:0e:4e:a6:1a:15:a7:c3:b9:46:0a:
                    3c:30:37:0e:26:70:9b:e7:48:e3:f5:ce:7b:06:81:
                    3a:03:c6:e7:55:85:58:1d:43:d0:43:6e:a8:16:49:
                    e7:3a:cb:59:8d:03:0d:64:1d:fa:46:bf:40:f4:65:
                    4e:7b:1e:d4:3e:78:e9:11:bf:9e:7f:58:15:64:76:
                    2e:1f:10:8e:9e:47:5d:52:7a:7f:95:46:0f:59:67:
                    ec:c4:49:8e:e0:fb:17:60:41:a6:f7:dd:31:c5:26:
                    d9:de:1f:b8:9d:8a:e9:93:ff:e2:00:ce:09:a7:09:
                    11:79:92:27:cd:6f:a4:b0:77:d9:82:33:d5:bd:47:
                    b9:0d:74:03:05:e2:fe:12:f3:c7:17:84:88:9c:a8:
                    f5:c9:53:89:89:66:68:e7:4c:29:5d:78:66:6a:1b:
                    e9:44:ba:7c:0c:b8:4a:86:10:59:21:83:11:f7:c6:
                    1a:53:56:a9:1e:69:9e:85:35:7c:bb:bc:0c:f7:93:
                    e9:4c:cb:dd:b6:2f:97:21:2e:37:72:7c:dd:5b:ea:
                    3a:7d:15:ca:3f:03:87:5a:b4:a8:56:7b:1d:c4:c1:
                    53:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:09:B3:1F:CB:02:0B:82:99:78:3F:92:9B:FC:42:E0:67:1C:63:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2f6d6eb8-a1ec-3410-ab45-d84c54ce2ebc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.21.113.0/24
                  38.224.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:89:09:69:e7:d0:33:4f:f8:3c:c6:e7:ec:18:95:9d:6d:40:
         66:e8:5d:fd:04:f8:a1:66:e6:95:ae:20:72:bb:be:1a:82:76:
         f4:df:2b:02:a4:2b:54:3b:38:3b:5b:8f:0e:77:d0:01:6c:a4:
         4f:0f:a7:e7:df:11:cd:7a:df:87:c7:31:9a:a9:08:31:35:5a:
         35:4e:13:ee:28:89:66:56:75:13:67:eb:2a:d4:06:de:aa:cf:
         54:44:3f:58:8f:a8:6d:89:b8:ba:e8:2b:09:a1:cc:74:2c:46:
         7b:70:87:1b:fb:7d:39:5a:8f:a4:02:b1:18:93:2c:87:b0:c4:
         a1:ca:01:6c:68:1c:96:e4:e4:bf:00:0d:96:a0:f7:a1:61:48:
         26:e6:a1:07:8a:5b:69:d3:6d:bc:27:cd:61:1e:fc:7e:9c:47:
         0a:c9:da:4e:79:46:ac:96:aa:44:53:bd:10:40:af:f5:d3:62:
         61:94:27:5c:34:cc:42:64:53:e6:a6:39:6d:c4:6e:5a:3a:62:
         1f:41:cb:a4:bb:bb:f4:05:af:4d:b7:e4:d8:b5:09:d6:7a:7c:
         c9:ca:21:99:0b:eb:24:e1:1c:7a:7b:31:54:38:58:2c:ad:3e:
         41:c8:39:37:2f:46:a7:0b:13:19:ec:33:e9:b7:5d:54:f8:7b:
         e9:0e:a1:93
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9+fgWYEj1itXxJsRAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk
Zjc1Nzg5ZmItNTZkYi00NjZhLWFiZjktMDE4NmM5ZDA4NmMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4iPc788secqtAXJOM5YCyIT2eOi8c/YdtS7
TJuFaPU/Ww5OphoVp8O5Rgo8MDcOJnCb50jj9c57BoE6A8bnVYVYHUPQQ26oFknn
OstZjQMNZB36Rr9A9GVOex7UPnjpEb+ef1gVZHYuHxCOnkddUnp/lUYPWWfsxEmO
4PsXYEGm990xxSbZ3h+4nYrpk//iAM4JpwkReZInzW+ksHfZgjPVvUe5DXQDBeL+
EvPHF4SInKj1yVOJiWZo50wpXXhmahvpRLp8DLhKhhBZIYMR98YaU1apHmmehTV8
u7wM95PpTMvdti+XIS43cnzdW+o6fRXKPwOHWrSoVnsdxMFTswIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFNUJsx/LAguCmXg/kpv8QuBnHGPZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMmY2ZDZlYjgtYTFlYy0z
NDEwLWFiNDUtZDg0YzU0Y2UyZWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJhVxAwQA
JuAbMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBACSJCWnn0DNP+DzG5+wYlZ1tQGboXf0E+KFm5pWuIHK7vhqC
dvTfKwKkK1Q7ODtbjw530AFspE8Pp+ffEc1634fHMZqpCDE1WjVOE+4oiWZWdRNn
6yrUBt6qz1REP1iPqG2JuLroKwmhzHQsRntwhxv7fTlaj6QCsRiTLIewxKHKAWxo
HJbk5L8ADZag96FhSCbmoQeKW2nTbbwnzWEe/H6cRwrJ2k55RqyWqkRTvRBAr/XT
YmGUJ1w0zEJkU+amOW3Eblo6Yh9By6S7u/QFr0235Ni1CdZ6fMnKIZkL6yThHHp7
MVQ4WCytPkHIOTcvRqcLExnsM+m3XVT4e+kOoZM=
-----END CERTIFICATE-----
Generated at Tue Oct 27 20:29:53 2026 by rpki-client