Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/31cac401-c3d8-36e0-81af-4af175035cf2.roa
File:                     31cac401-c3d8-36e0-81af-4af175035cf2.roa (raw, json)
Hash identifier:          M+OEI1AWVH37maaPoMM9MEWBB5P3uZIcKz0KdrCOzvk=
Subject key identifier:   36:35:71:CB:F1:69:E5:92:55:60:CE:69:C2:6A:EE:AD:2F:FB:DB:D7
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F9BCE0030174AC2FED122DAC0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/31cac401-c3d8-36e0-81af-4af175035cf2.roa
Signing time:             Sat 24 Oct 2026 13:00:12 +0000
ROA not before:           Sat 24 Oct 2026 13:00:12 +0000
ROA not after:            Fri 22 Jan 2027 14:00:12 +0000
asID:                     273307
IP address blocks:        38.236.82.0/24 maxlen: 24
                          206.62.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9b:ce:00:30:17:4a:c2:fe:d1:22:da:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct 24 13:00:12 2026 GMT
            Not After : Jan 22 14:00:12 2027 GMT
        Subject: CN=e4c250ba-773c-4952-9524-6707065cbf90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:43:29:78:95:cd:6c:c4:8b:70:0a:56:1b:64:
                    4a:92:3d:cb:7a:88:d1:8d:b1:6a:f5:9b:0c:de:39:
                    97:cf:d7:d7:19:22:75:d8:7f:9a:6c:89:5c:7a:eb:
                    e9:1c:f7:ea:7b:13:21:35:57:3c:85:bb:49:f7:b8:
                    90:69:5d:e5:a0:88:dc:bc:ad:6c:ac:8f:8c:5e:5e:
                    cd:e4:b0:75:7b:55:67:31:ea:34:9d:68:e8:ba:d8:
                    c6:d8:f8:ab:b2:42:f3:52:0d:bc:6c:a0:8b:2c:02:
                    a6:6b:e0:e8:c3:38:97:b1:57:74:37:f7:f4:a2:93:
                    b8:e0:27:81:ed:b2:9c:4a:df:2c:7f:80:41:66:5a:
                    53:c6:04:f7:95:e3:6c:a3:14:cc:aa:4d:cf:cd:ee:
                    57:b5:01:7a:7a:c5:97:22:01:d1:ce:41:93:cc:8d:
                    18:fd:21:1b:85:bc:c3:cd:90:77:51:f1:6c:ef:a4:
                    54:4a:75:cb:1b:9a:94:7f:b5:6d:91:c1:77:18:b7:
                    5c:21:e9:13:89:71:36:b9:f3:e4:e4:d5:c8:8b:ff:
                    09:0f:a5:80:67:b1:fc:e1:f9:a6:9b:f0:0d:4d:8a:
                    e7:91:b8:b2:b4:f6:e7:13:f5:a4:2a:ae:72:2e:e2:
                    a9:28:22:f2:41:1e:80:26:42:15:e3:2f:e3:0f:b9:
                    ba:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:35:71:CB:F1:69:E5:92:55:60:CE:69:C2:6A:EE:AD:2F:FB:DB:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/31cac401-c3d8-36e0-81af-4af175035cf2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.236.82.0/24
                  206.62.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:97:76:f1:bd:80:29:a6:35:a7:8c:8a:84:25:5b:8f:c3:6b:
         a8:7d:83:f3:9e:cd:e5:84:c5:02:b4:7d:c4:d2:6e:ed:f3:46:
         04:75:e4:05:fc:f7:0a:e2:52:a5:25:a2:fd:3e:e7:bb:14:08:
         8b:53:b6:44:e8:d8:69:af:ef:09:2d:79:82:55:9e:da:e5:bb:
         a4:27:fc:51:f0:2b:e9:3a:92:4b:7c:91:8c:58:31:fc:a6:92:
         24:5a:90:ad:8f:2d:cb:41:4a:97:8f:67:91:84:7c:76:db:cf:
         01:53:df:ef:13:8e:fc:3d:46:ff:41:e6:55:5c:f3:43:67:ad:
         f0:6b:06:8a:6a:02:15:2c:db:26:e6:07:0d:9c:1a:08:e6:10:
         32:5b:bf:6d:c8:12:6e:59:6e:67:84:fb:66:65:8e:70:24:a9:
         ce:c7:4f:cd:35:bd:cb:78:90:76:65:7f:71:73:ed:45:a1:21:
         45:84:4a:a5:b3:68:7d:26:12:24:4c:8d:34:26:d6:b0:c6:b2:
         97:6d:91:0a:51:2f:f3:31:c5:27:2a:c4:5d:d3:55:d8:e0:b6:
         53:60:50:ad:5e:c4:f2:fe:5f:b4:ba:59:6a:b5:65:f0:b8:27:
         87:16:96:5c:4b:35:6d:31:6b:e5:cc:8b:b3:c4:cd:29:ad:18:
         2c:3a:85:a4
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE+bzgAwF0rC/tEi2sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk
ZTRjMjUwYmEtNzczYy00OTUyLTk1MjQtNjcwNzA2NWNiZjkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0MpeJXNbMSLcApWG2RKkj3LeojRjbFq9ZsM
3jmXz9fXGSJ12H+abIlceuvpHPfqexMhNVc8hbtJ97iQaV3loIjcvK1srI+MXl7N
5LB1e1VnMeo0nWjoutjG2PirskLzUg28bKCLLAKma+DowziXsVd0N/f0opO44CeB
7bKcSt8sf4BBZlpTxgT3leNsoxTMqk3Pze5XtQF6esWXIgHRzkGTzI0Y/SEbhbzD
zZB3UfFs76RUSnXLG5qUf7VtkcF3GLdcIekTiXE2ufPk5NXIi/8JD6WAZ7H84fmm
m/ANTYrnkbiytPbnE/WkKq5yLuKpKCLyQR6AJkIV4y/jD7m6xwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFDY1ccvxaeWSVWDOacJq7q0v+9vXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMzFjYWM0MDEtYzNkOC0z
NmUwLTgxYWYtNGFmMTc1MDM1Y2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJuxSAwQA
zj5rMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAJ6XdvG9gCmmNaeMioQlW4/Da6h9g/OezeWExQK0fcTSbu3z
RgR15AX89wriUqUlov0+57sUCItTtkTo2Gmv7wkteYJVntrlu6Qn/FHwK+k6kkt8
kYxYMfymkiRakK2PLctBSpePZ5GEfHbbzwFT3+8Tjvw9Rv9B5lVc80NnrfBrBopq
AhUs2ybmBw2cGgjmEDJbv23IEm5ZbmeE+2ZljnAkqc7HT801vct4kHZlf3Fz7UWh
IUWESqWzaH0mEiRMjTQm1rDGspdtkQpRL/MxxScqxF3TVdjgtlNgUK1exPL+X7S6
WWq1ZfC4J4cWllxLNW0xa+XMi7PEzSmtGCw6haQ=
-----END CERTIFICATE-----
Generated at Tue Oct 27 15:15:35 2026 by rpki-client