Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4eaa9dbf-3c62-3aae-9c59-dc7568b86606.roa
File:                     4eaa9dbf-3c62-3aae-9c59-dc7568b86606.roa (raw, json)
Hash identifier:          A02UPGKyQPnnf74FxzjPUUJeoFHnOCaBMxuGN+ksVHQ=
Subject key identifier:   E8:F2:15:11:08:B5:B6:D4:59:30:30:EC:6D:EA:58:83:62:20:50:44
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F14678AFB50550BDEC539EB80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4eaa9dbf-3c62-3aae-9c59-dc7568b86606.roa
Signing time:             Sun 06 Sep 2026 01:00:11 +0000
ROA not before:           Sun 06 Sep 2026 01:00:11 +0000
ROA not after:            Sat 05 Dec 2026 02:00:11 +0000
asID:                     146943
IP address blocks:        38.211.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:14:67:8a:fb:50:55:0b:de:c5:39:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep  6 01:00:11 2026 GMT
            Not After : Dec  5 02:00:11 2026 GMT
        Subject: CN=a5476c13-f969-42d3-b9d4-d7ef897bf8cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a3:0c:8e:7c:23:17:be:72:fa:64:6b:b0:35:
                    b9:39:ce:9a:24:95:6b:5c:5c:07:f8:8e:7e:4d:9f:
                    fb:f1:59:44:53:1f:5c:4f:82:aa:0c:cf:fa:93:06:
                    80:e2:f6:33:a0:ee:c6:b4:10:90:6f:c9:3e:89:b9:
                    45:1b:03:0a:7b:fb:b3:51:8b:b5:d7:a7:34:37:a0:
                    3c:ac:18:0e:e2:86:04:0f:d3:8b:e5:a4:d1:cc:78:
                    ad:0b:b8:a7:20:4d:fe:49:4a:78:2f:2a:6a:5e:b3:
                    bf:79:16:ec:43:55:0a:75:c4:79:9f:bf:46:ea:c3:
                    55:43:b5:e6:8a:eb:86:fd:04:b4:e4:35:67:04:2e:
                    fa:50:f2:6d:71:fc:03:cc:75:a8:c0:dc:83:d7:18:
                    fa:16:17:97:e9:c7:48:c0:3b:96:f7:d9:9f:19:ae:
                    9c:2b:c4:20:46:45:2b:25:a8:49:bf:a0:bf:cd:ae:
                    54:3e:6c:33:a5:a2:13:d3:2d:fb:3a:85:1c:33:55:
                    17:4a:94:30:7e:81:e5:23:32:80:26:e7:23:fe:71:
                    fe:2c:ec:92:cf:c7:e7:4e:2b:e1:3c:eb:14:54:b8:
                    4a:05:f8:50:ee:67:c7:57:28:45:a3:b4:23:8f:a4:
                    98:47:45:ec:e8:b0:f9:3f:9e:3d:3b:96:e4:a3:71:
                    0f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F2:15:11:08:B5:B6:D4:59:30:30:EC:6D:EA:58:83:62:20:50:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4eaa9dbf-3c62-3aae-9c59-dc7568b86606.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.211.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:3c:1a:b5:f6:3d:c5:46:a6:fb:4f:93:c0:ce:ce:c5:3c:e0:
         33:4d:38:35:92:02:08:29:8b:32:ec:37:df:58:f4:c8:df:d1:
         d4:bd:5f:0c:e0:36:11:09:35:2d:39:02:9e:d7:82:9a:27:9a:
         dd:03:77:15:58:f7:6b:bf:f5:cd:81:b6:69:fb:0e:f8:ba:9f:
         19:67:99:0b:d0:11:8c:83:af:fb:f8:55:d6:13:6f:b3:9c:a0:
         03:a5:be:f2:31:5a:14:d4:58:aa:a9:1c:49:84:01:ea:ec:00:
         b9:5a:cd:05:9e:b8:5d:1f:85:f0:62:93:ba:2c:97:db:8e:cf:
         ba:88:29:62:aa:77:4b:27:5c:30:99:61:8b:a6:a8:5a:1f:81:
         96:c6:93:56:06:c2:2f:74:42:35:eb:4e:e1:aa:ab:fb:02:c5:
         49:35:dd:86:fb:71:84:cd:bc:69:f9:e1:a9:c4:dc:14:9a:42:
         7f:a7:d4:d7:21:f6:4e:03:7d:94:d4:46:c5:de:00:26:f4:8e:
         cb:1d:53:58:e9:b6:11:18:b8:a7:d7:aa:c2:01:bd:7e:5a:ff:
         df:7e:d2:e0:a7:03:8f:ed:e4:17:fc:03:8e:14:5c:b6:d2:43:
         6f:49:44:3b:74:2b:d8:22:2c:4b:58:29:cf:6a:ed:60:6f:e7:
         e7:d6:fb:26
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UZ4r7UFUL3sU564AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk
YTU0NzZjMTMtZjk2OS00MmQzLWI5ZDQtZDdlZjg5N2JmOGNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KMMjnwjF75y+mRrsDW5Oc6aJJVrXFwH+I5+
TZ/78VlEUx9cT4KqDM/6kwaA4vYzoO7GtBCQb8k+iblFGwMKe/uzUYu116c0N6A8
rBgO4oYED9OL5aTRzHitC7inIE3+SUp4LypqXrO/eRbsQ1UKdcR5n79G6sNVQ7Xm
iuuG/QS05DVnBC76UPJtcfwDzHWowNyD1xj6FheX6cdIwDuW99mfGa6cK8QgRkUr
JahJv6C/za5UPmwzpaIT0y37OoUcM1UXSpQwfoHlIzKAJucj/nH+LOySz8fnTivh
POsUVLhKBfhQ7mfHVyhFo7Qjj6SYR0Xs6LD5P549O5bko3EPQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOjyFREItbbUWTAw7G3qWINiIFBEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNGVhYTlkYmYtM2M2Mi0z
YWFlLTljNTktZGM3NTY4Yjg2NjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJtMiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJY8GrX2PcVGpvtPk8DOzsU84DNNODWSAggpizLsN99Y9Mjf0dS9Xwzg
NhEJNS05Ap7Xgponmt0DdxVY92u/9c2Btmn7Dvi6nxlnmQvQEYyDr/v4VdYTb7Oc
oAOlvvIxWhTUWKqpHEmEAersALlazQWeuF0fhfBik7osl9uOz7qIKWKqd0snXDCZ
YYumqFofgZbGk1YGwi90QjXrTuGqq/sCxUk13Yb7cYTNvGn54anE3BSaQn+n1Nch
9k4DfZTURsXeACb0jssdU1jpthEYuKfXqsIBvX5a/99+0uCnA4/t5Bf8A44UXLbS
Q29JRDt0K9giLEtYKc9q7WBv5+fW+yY=
-----END CERTIFICATE-----
Generated at Thu Sep 10 10:40:22 2026 by rpki-client