Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/450a09f3-526f-35c5-b149-dc62465ddda4.roa
File:                     450a09f3-526f-35c5-b149-dc62465ddda4.roa (raw, json)
Hash identifier:          +5O62bXGvdDFVj4yEZVxTz9dhZt2/u3Ea2i0baRuE7M=
Subject key identifier:   1F:D4:C2:7E:6B:A1:1C:E8:B3:58:48:D9:78:C0:1C:DB:D1:00:FB:F5
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D91BFFB534F1EF3FC1C627A80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/450a09f3-526f-35c5-b149-dc62465ddda4.roa
Signing time:             Mon 20 Apr 2026 13:00:33 +0000
ROA not before:           Mon 20 Apr 2026 13:00:33 +0000
ROA not after:            Sun 19 Jul 2026 13:00:33 +0000
asID:                     273173
IP address blocks:        38.188.232.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:91:bf:fb:53:4f:1e:f3:fc:1c:62:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Apr 20 13:00:33 2026 GMT
            Not After : Jul 19 13:00:33 2026 GMT
        Subject: CN=67589adf-2a1e-4fac-803a-3e3288ac0b7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:06:d8:02:a1:0c:cd:00:b4:51:5d:99:05:af:
                    c3:03:27:1d:78:05:3d:ae:0f:03:ad:7a:6a:76:e5:
                    ff:ef:4a:8e:78:a7:2c:fc:d2:75:b0:1a:27:f5:c2:
                    38:db:e0:94:cb:bf:ed:ef:dd:16:05:33:61:18:f7:
                    ab:9c:82:a9:44:b5:17:a1:9a:98:d9:af:65:38:b2:
                    0d:d4:b2:71:07:aa:4b:67:d5:7b:ff:50:d1:c7:38:
                    6a:81:02:6b:0e:5a:ff:28:41:23:15:44:cf:70:45:
                    55:c0:47:33:72:4a:29:b5:47:50:ae:5f:7d:8f:5f:
                    6a:20:4a:ca:fe:17:52:63:d2:38:4e:82:b7:ec:1e:
                    03:c3:03:24:56:16:04:be:19:54:a0:c7:cb:01:99:
                    05:51:74:f8:fb:d5:1b:51:4a:4c:1c:68:24:62:26:
                    1c:75:76:c7:9e:d9:0b:c1:71:12:47:35:3c:f4:99:
                    26:66:85:f6:9b:4b:a1:f0:59:32:d4:89:a0:4b:68:
                    d5:71:ba:cc:81:11:a8:c5:02:74:a2:82:e5:50:7c:
                    ae:99:00:92:af:e2:99:d1:af:29:d1:2b:ae:a9:b8:
                    e0:03:1f:55:0d:cd:30:1e:35:82:5d:6f:fa:d9:3f:
                    be:35:1a:58:25:2a:f5:00:cb:fc:92:b3:f6:be:af:
                    dc:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:D4:C2:7E:6B:A1:1C:E8:B3:58:48:D9:78:C0:1C:DB:D1:00:FB:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/450a09f3-526f-35c5-b149-dc62465ddda4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.188.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:3a:c5:bb:e2:a2:60:2a:90:e0:e9:b1:43:f1:60:4c:f5:3f:
         81:4c:f4:db:85:1d:3f:b0:85:d8:5b:26:0d:5e:3f:c1:36:db:
         d7:86:7b:61:cb:4b:4f:2c:e3:8c:f3:60:c7:ad:1d:dc:1e:55:
         45:ba:b2:33:bc:b5:d0:80:c8:e1:a7:e2:f0:ea:5b:68:74:34:
         50:6b:15:9f:c1:6f:a2:67:11:3c:85:cd:18:a6:c5:ea:d5:4a:
         51:ee:fc:05:2f:7f:7d:77:95:43:85:1c:7f:36:4d:6b:e7:c6:
         ad:91:94:a2:37:c9:26:51:bd:57:37:8d:f0:1a:ce:d8:1b:2e:
         97:4e:81:33:f1:2b:93:ff:55:d2:43:23:66:f1:22:7b:3b:fe:
         13:8d:52:9d:34:e0:e0:0a:fc:5d:38:4b:0f:d5:21:61:36:90:
         6a:37:b7:32:8e:79:3c:b2:95:50:45:a8:4c:15:85:f4:af:eb:
         8e:6e:12:64:ed:c7:d8:75:ef:22:9f:a8:92:9d:30:d1:89:74:
         60:aa:02:b4:27:dd:6f:ba:b0:fa:c4:da:c0:e0:cb:ac:e3:b6:
         77:3b:ac:ce:51:29:eb:dc:de:11:c6:54:96:6c:8e:c7:28:ef:
         49:f7:6b:be:63:03:39:c2:56:d8:4b:f7:d2:d7:ff:bf:35:26:
         ad:3d:16:4e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Rv/tTTx7z/BxieoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk
Njc1ODlhZGYtMmExZS00ZmFjLTgwM2EtM2UzMjg4YWMwYjdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQbYAqEMzQC0UV2ZBa/DAycdeAU9rg8DrXpq
duX/70qOeKcs/NJ1sBon9cI42+CUy7/t790WBTNhGPernIKpRLUXoZqY2a9lOLIN
1LJxB6pLZ9V7/1DRxzhqgQJrDlr/KEEjFUTPcEVVwEczckoptUdQrl99j19qIErK
/hdSY9I4ToK37B4DwwMkVhYEvhlUoMfLAZkFUXT4+9UbUUpMHGgkYiYcdXbHntkL
wXESRzU89JkmZoX2m0uh8Fky1ImgS2jVcbrMgRGoxQJ0ooLlUHyumQCSr+KZ0a8p
0SuuqbjgAx9VDc0wHjWCXW/62T++NRpYJSr1AMv8krP2vq/cbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB/Uwn5roRzos1hI2XjAHNvRAPv1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNDUwYTA5ZjMtNTI2Zi0z
NWM1LWIxNDktZGM2MjQ2NWRkZGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJrzoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEM6xbviomAqkODpsUPxYEz1P4FM9NuFHT+whdhbJg1eP8E229eGe2HL
S08s44zzYMetHdweVUW6sjO8tdCAyOGn4vDqW2h0NFBrFZ/Bb6JnETyFzRimxerV
SlHu/AUvf313lUOFHH82TWvnxq2RlKI3ySZRvVc3jfAaztgbLpdOgTPxK5P/VdJD
I2bxIns7/hONUp004OAK/F04Sw/VIWE2kGo3tzKOeTyylVBFqEwVhfSv645uEmTt
x9h17yKfqJKdMNGJdGCqArQn3W+6sPrE2sDgy6zjtnc7rM5RKevc3hHGVJZsjsco
70n3a75jAznCVthL99LX/781Jq09Fk4=
-----END CERTIFICATE-----
Generated at Tue Apr 28 21:13:32 2026 by rpki-client