Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/48b623bd-143e-3e11-b27d-3ae42f033541.roa
File:                     48b623bd-143e-3e11-b27d-3ae42f033541.roa (raw, json)
Hash identifier:          h08aO99UDl5mHF5WggUiOuBwVBrdPgFeEfFRpPOMeN4=
Subject key identifier:   F0:A3:D5:30:AA:F9:B4:B6:4E:13:44:45:F0:23:98:3B:CD:4B:3D:F2
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E0D1FAF5DCB913818D34E2900
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/48b623bd-143e-3e11-b27d-3ae42f033541.roa
Signing time:             Wed 03 Jun 2026 17:37:52 +0000
ROA not before:           Wed 03 Jun 2026 17:37:52 +0000
ROA not after:            Tue 01 Sep 2026 17:37:52 +0000
asID:                     215595
IP address blocks:        38.75.44.0/22 maxlen: 24
                          154.61.160.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0d:1f:af:5d:cb:91:38:18:d3:4e:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jun  3 17:37:52 2026 GMT
            Not After : Sep  1 17:37:52 2026 GMT
        Subject: CN=0d953de5-dde1-4334-bdeb-be48dbf33730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:83:5d:3f:45:8a:96:1e:5e:7b:fb:05:b4:9f:
                    24:06:03:d9:0d:2d:7f:2c:13:d9:57:91:20:9d:b1:
                    df:4b:5b:d6:5a:da:ad:46:eb:a9:46:73:f3:e4:26:
                    d4:bc:25:a7:aa:db:93:db:19:55:84:d8:a6:7e:07:
                    41:3b:94:9d:27:50:87:59:14:fc:6c:2f:b0:2f:7d:
                    cd:41:a0:fe:cc:2a:56:e7:9b:23:ff:1f:b9:9b:19:
                    65:fd:9e:c9:a0:aa:77:61:18:5a:0f:af:ec:16:07:
                    00:f8:94:f1:15:d2:5d:51:d7:6a:e0:e0:71:d5:b7:
                    40:b7:93:19:13:5f:57:e3:e8:a5:14:00:c7:8a:bb:
                    e8:a1:c2:da:1a:fc:d7:0d:b5:c5:2b:18:f0:e9:fe:
                    7b:e2:bb:06:ae:03:8a:5e:0a:b4:41:41:f7:03:3c:
                    1a:68:5d:31:12:21:52:9f:31:24:f1:91:24:bd:4e:
                    01:ed:72:2c:ba:bb:ff:de:84:41:c7:11:ba:cd:9c:
                    c2:64:55:85:70:24:c6:9f:10:e8:a6:98:69:3a:05:
                    de:f5:9e:5b:84:6f:b9:10:92:b2:1e:10:fa:08:a2:
                    d7:bc:bd:66:80:41:5c:aa:af:96:93:e2:c4:be:c5:
                    0e:a2:c5:f1:53:77:b8:a0:76:1e:42:dd:64:f9:c5:
                    42:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:A3:D5:30:AA:F9:B4:B6:4E:13:44:45:F0:23:98:3B:CD:4B:3D:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/48b623bd-143e-3e11-b27d-3ae42f033541.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.75.44.0/22
                  154.61.160.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:52:30:32:b8:2e:2b:e0:c9:7b:90:70:f6:09:c6:82:9d:d9:
         02:4f:50:05:76:4c:96:3d:23:95:97:98:e5:e2:cd:21:78:4e:
         20:6e:66:a6:1f:f7:f9:e7:bf:49:aa:bd:74:d2:21:63:51:e4:
         8f:01:d1:78:74:34:e3:01:69:fc:6f:bc:61:29:0b:32:43:e4:
         2c:7e:23:aa:2d:88:59:66:5c:80:14:ad:fb:bd:9f:1b:b8:3e:
         2d:e3:5f:e5:b1:ec:5c:b1:1a:70:9c:3b:44:13:a4:59:64:95:
         39:50:e7:42:29:97:f7:50:06:53:2c:be:5b:59:ba:16:ea:8a:
         cc:2b:30:c7:2b:ed:26:9e:b1:01:f1:55:54:46:b5:07:59:1f:
         5b:55:ba:ec:e9:3f:31:37:05:4c:21:8f:ac:b7:91:fe:ba:04:
         60:21:7e:d0:36:67:2f:c2:1b:1a:46:9d:11:11:a4:f2:89:49:
         cf:e7:9d:3e:c4:37:e1:fe:95:41:43:06:b7:cb:a1:2a:85:92:
         49:6e:e5:31:ef:f9:a9:dc:24:c3:33:80:65:e8:3b:a2:1e:0a:
         37:c5:fd:be:4b:4c:09:02:bf:36:e1:1f:f7:da:cc:ed:7b:41:
         ba:b7:34:5b:ab:2c:6b:eb:c6:aa:62:33:2d:33:87:bc:1d:4a:
         b7:a0:8a:84
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE4NH69dy5E4GNNOKQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDYwMzE3Mzc1MloXDTI2MDkwMTE3Mzc1MlowLzEtMCsGA1UEAxMk
MGQ5NTNkZTUtZGRlMS00MzM0LWJkZWItYmU0OGRiZjMzNzMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApINdP0WKlh5ee/sFtJ8kBgPZDS1/LBPZV5Eg
nbHfS1vWWtqtRuupRnPz5CbUvCWnqtuT2xlVhNimfgdBO5SdJ1CHWRT8bC+wL33N
QaD+zCpW55sj/x+5mxll/Z7JoKp3YRhaD6/sFgcA+JTxFdJdUddq4OBx1bdAt5MZ
E19X4+ilFADHirvoocLaGvzXDbXFKxjw6f574rsGrgOKXgq0QUH3AzwaaF0xEiFS
nzEk8ZEkvU4B7XIsurv/3oRBxxG6zZzCZFWFcCTGnxDopphpOgXe9Z5bhG+5EJKy
HhD6CKLXvL1mgEFcqq+Wk+LEvsUOosXxU3e4oHYeQt1k+cVCgQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFPCj1TCq+bS2ThNERfAjmDvNSz3yMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNDhiNjIzYmQtMTQzZS0z
ZTExLWIyN2QtM2FlNDJmMDMzNTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCJkssAwQB
mj2gMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAMRSMDK4LivgyXuQcPYJxoKd2QJPUAV2TJY9I5WXmOXizSF4
TiBuZqYf9/nnv0mqvXTSIWNR5I8B0Xh0NOMBafxvvGEpCzJD5Cx+I6otiFlmXIAU
rfu9nxu4Pi3jX+Wx7FyxGnCcO0QTpFlklTlQ50Ipl/dQBlMsvltZuhbqiswrMMcr
7SaesQHxVVRGtQdZH1tVuuzpPzE3BUwhj6y3kf66BGAhftA2Zy/CGxpGnRERpPKJ
Sc/nnT7EN+H+lUFDBrfLoSqFkklu5THv+ancJMMzgGXoO6IeCjfF/b5LTAkCvzbh
H/fazO17Qbq3NFurLGvrxqpiMy0zh7wdSregioQ=
-----END CERTIFICATE-----
Generated at Fri Jun 12 22:33:53 2026 by rpki-client