Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/39e40b26-d005-3298-a66b-d37daa6aacda.roa
File:                     39e40b26-d005-3298-a66b-d37daa6aacda.roa (raw, json)
Hash identifier:          LGi1UltoUXJBOHxeslrbGFslsNd6HmSXgn/u1Yv3S04=
Subject key identifier:   13:13:80:C9:41:3D:0B:82:A2:39:99:80:6C:4F:C1:D0:D6:6C:88:48
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F02421858C72D73352DA90B40
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/39e40b26-d005-3298-a66b-d37daa6aacda.roa
Signing time:             Sun 30 Aug 2026 13:00:11 +0000
ROA not before:           Sun 30 Aug 2026 13:00:11 +0000
ROA not after:            Sat 28 Nov 2026 14:00:11 +0000
asID:                     210732
IP address blocks:        38.133.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:02:42:18:58:c7:2d:73:35:2d:a9:0b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Aug 30 13:00:11 2026 GMT
            Not After : Nov 28 14:00:11 2026 GMT
        Subject: CN=adc43655-8420-4055-aa9c-882de8714204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e8:3c:f3:5b:0a:0c:ed:bd:c8:f5:66:41:84:
                    cd:7b:ba:b0:c4:3a:62:64:e3:e3:cd:e7:c7:92:f8:
                    eb:67:0c:95:89:ec:f3:d4:5b:dc:56:78:63:15:da:
                    a8:41:2b:2e:cc:da:5b:ad:8d:ae:36:14:ae:6c:27:
                    1c:ec:9f:19:e4:3e:e4:d7:0c:f4:20:02:8d:f3:c9:
                    66:18:3a:3b:9e:6f:64:b6:45:8d:9b:2e:de:82:c3:
                    3d:5a:ff:0e:08:00:9f:a4:b9:7c:74:cc:68:a8:5c:
                    6a:83:8d:b6:9e:91:f6:e5:15:cc:fc:9a:8c:d7:60:
                    88:40:a7:a1:b9:54:a6:f1:eb:65:39:eb:ba:e4:c7:
                    1a:68:94:32:8f:fd:a1:f9:5b:d2:7c:07:d1:3c:d4:
                    ec:3c:c9:3f:f9:2c:a0:84:52:ea:e3:44:d5:ed:4d:
                    82:e3:9d:27:b8:ae:a6:13:48:37:bc:65:b0:64:51:
                    26:0f:31:f4:5e:ba:ce:0e:6e:a8:f3:e6:77:63:a2:
                    1f:86:2b:a4:1f:76:52:db:c2:4b:8d:a7:b1:c7:8f:
                    97:ca:f2:1e:02:e9:48:87:bf:fa:a1:d6:db:db:a2:
                    15:c8:6f:ff:9f:cf:31:9d:1a:89:12:02:0d:ee:10:
                    31:7e:eb:28:96:7d:e5:dc:12:b9:bb:b4:8a:0a:63:
                    24:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:13:80:C9:41:3D:0B:82:A2:39:99:80:6C:4F:C1:D0:D6:6C:88:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/39e40b26-d005-3298-a66b-d37daa6aacda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.133.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:19:33:d3:8f:cc:21:8b:3d:82:b7:e3:39:c7:0d:81:4a:c8:
         ba:1f:f3:14:bd:95:c3:30:54:65:2d:d1:ce:dc:87:1c:83:34:
         8e:29:d6:0c:b3:ad:f7:44:2c:c0:8e:3e:3b:4f:9d:d1:83:c8:
         eb:11:3f:03:0d:d9:7b:f8:2a:e7:41:96:2e:86:79:63:d8:c6:
         66:d2:f6:3d:aa:8c:92:62:80:50:8a:29:be:97:63:13:70:76:
         20:5e:88:3d:ef:64:57:96:03:06:49:15:33:cf:90:2e:33:32:
         67:8e:1c:61:93:51:00:ee:d7:de:b3:c2:6d:9a:c3:40:40:12:
         32:69:3d:01:30:81:48:c6:5c:ac:f6:92:77:19:ad:0b:f4:44:
         3f:22:6e:89:5f:c2:b5:b1:2f:fb:16:5d:01:3f:ed:7f:f4:c1:
         72:8d:bd:93:da:1b:71:5d:fd:0a:56:74:02:0e:e2:38:a1:ef:
         85:88:31:8c:83:fb:7c:fa:0c:72:93:e1:11:58:91:79:b6:50:
         d0:0b:5b:42:7c:13:02:e1:c1:ad:5f:67:b2:92:8d:09:b4:a5:
         2e:56:2d:5f:66:38:da:59:18:50:2b:3c:fb:ee:d5:5b:da:72:
         be:c9:bc:ed:18:8c:cf:61:b7:b0:68:83:ee:84:67:58:99:76:
         9c:b9:c2:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQhhYxy1zNS2pC0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk
YWRjNDM2NTUtODQyMC00MDU1LWFhOWMtODgyZGU4NzE0MjA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOg881sKDO29yPVmQYTNe7qwxDpiZOPjzefH
kvjrZwyViezz1FvcVnhjFdqoQSsuzNpbrY2uNhSubCcc7J8Z5D7k1wz0IAKN88lm
GDo7nm9ktkWNmy7egsM9Wv8OCACfpLl8dMxoqFxqg422npH25RXM/JqM12CIQKeh
uVSm8etlOeu65McaaJQyj/2h+VvSfAfRPNTsPMk/+SyghFLq40TV7U2C450nuK6m
E0g3vGWwZFEmDzH0XrrODm6o8+Z3Y6IfhiukH3ZS28JLjaexx4+XyvIeAulIh7/6
odbb26IVyG//n88xnRqJEgIN7hAxfusoln3l3BK5u7SKCmMkSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBMTgMlBPQuCojmZgGxPwdDWbIhIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMzllNDBiMjYtZDAwNS0z
Mjk4LWE2NmItZDM3ZGFhNmFhY2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJoXTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHMZM9OPzCGLPYK34znHDYFKyLof8xS9lcMwVGUt0c7chxyDNI4p1gyz
rfdELMCOPjtPndGDyOsRPwMN2Xv4KudBli6GeWPYxmbS9j2qjJJigFCKKb6XYxNw
diBeiD3vZFeWAwZJFTPPkC4zMmeOHGGTUQDu196zwm2aw0BAEjJpPQEwgUjGXKz2
kncZrQv0RD8ibolfwrWxL/sWXQE/7X/0wXKNvZPaG3Fd/QpWdAIO4jih74WIMYyD
+3z6DHKT4RFYkXm2UNALW0J8EwLhwa1fZ7KSjQm0pS5WLV9mONpZGFArPPvu1Vva
cr7JvO0YjM9ht7Bog+6EZ1iZdpy5wrg=
-----END CERTIFICATE-----
Generated at Fri Sep 11 13:49:55 2026 by rpki-client