Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/523d13b8-5824-3192-b016-346c08293793.roa
File:                     523d13b8-5824-3192-b016-346c08293793.roa (raw, json)
Hash identifier:          64zt+XLXKvbxkWnhLAOuUgpw9l+0hRmmNtOaryjWTgY=
Subject key identifier:   86:47:47:FB:1C:3F:06:E1:73:64:8A:2E:9F:03:A0:1D:86:6C:56:45
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E11B42A29AC033C58E6D94800
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/523d13b8-5824-3192-b016-346c08293793.roa
Signing time:             Fri 05 Jun 2026 09:00:12 +0000
ROA not before:           Fri 05 Jun 2026 09:00:12 +0000
ROA not after:            Thu 03 Sep 2026 09:00:12 +0000
asID:                     265525
IP address blocks:        38.7.130.0/24 maxlen: 24
                          38.19.33.0/24 maxlen: 24
                          38.52.196.0/24 maxlen: 24
                          38.172.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:11:b4:2a:29:ac:03:3c:58:e6:d9:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jun  5 09:00:12 2026 GMT
            Not After : Sep  3 09:00:12 2026 GMT
        Subject: CN=7a435d00-4ae7-4f00-8903-d279e1c832b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e9:85:11:8c:52:e0:8c:e1:87:84:03:6a:6d:
                    ec:c7:cd:82:bb:3b:46:7f:53:f6:1a:f2:e9:bf:fb:
                    96:bd:25:0f:ad:61:cd:ed:72:83:b3:e4:27:e8:d8:
                    d3:b5:8b:37:24:a2:d1:9f:4b:a5:21:b0:02:14:2d:
                    49:0b:e0:88:47:a6:80:b6:b1:a8:48:25:ad:c0:d3:
                    bb:9e:70:4d:f2:57:50:f3:0f:cc:61:3e:c2:eb:2f:
                    22:89:39:b7:2b:be:24:4d:a0:d6:29:dc:a5:15:f9:
                    56:56:ce:8a:c0:6c:5c:8d:dd:e4:53:6b:c4:31:dd:
                    50:8c:98:a8:1b:74:36:e2:f5:4c:98:b2:50:2b:db:
                    72:74:5c:95:a0:f1:30:9f:5f:87:b0:65:78:0b:46:
                    53:41:d1:a9:12:6b:f9:29:80:d7:8c:0c:8a:7f:a0:
                    38:b4:09:a0:21:ca:c5:d3:44:79:fb:74:5f:9b:27:
                    7c:b6:51:a5:bc:2c:a8:c3:fe:f7:7d:75:7a:ca:a9:
                    42:40:52:88:2f:22:48:d0:0e:55:da:e6:24:69:b9:
                    15:d5:cb:c4:09:16:4f:0c:4f:c5:8c:bb:fe:ba:31:
                    27:ae:7c:a7:64:75:03:e0:94:89:be:cc:2d:d5:e4:
                    b9:b5:e7:e6:0b:2b:f9:7e:9a:9e:cc:6b:fb:48:06:
                    ec:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:47:47:FB:1C:3F:06:E1:73:64:8A:2E:9F:03:A0:1D:86:6C:56:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/523d13b8-5824-3192-b016-346c08293793.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.7.130.0/24
                  38.19.33.0/24
                  38.52.196.0/24
                  38.172.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:43:a4:63:f3:7a:51:74:02:e2:03:83:cf:4b:77:2b:96:81:
         31:97:25:72:23:77:93:3b:d8:52:50:90:27:29:7c:44:52:00:
         c0:78:14:5c:6f:78:16:2e:ad:a3:d2:9d:60:9d:8c:d5:76:ac:
         33:ed:6e:ec:a1:70:f3:4e:dd:94:34:0c:ad:b2:0c:cb:7c:da:
         2d:2b:c1:d5:f0:d4:14:23:c3:50:64:cb:87:86:ee:49:0d:db:
         50:1b:89:2a:5e:49:d3:27:fb:f9:7a:33:bf:86:8b:88:70:41:
         79:f2:45:b4:a6:a0:bb:00:ca:f6:a9:f9:a3:77:20:7c:e1:e6:
         27:f1:86:53:8f:2a:d7:23:cd:08:a0:ed:af:ee:05:a8:98:4f:
         7a:6c:4c:b0:7c:c2:aa:ed:9f:73:6a:09:eb:16:b8:fc:de:d3:
         46:5f:69:14:8f:bc:b6:5c:49:ab:fb:8e:c5:b6:18:4f:f0:f7:
         f0:bb:03:b0:03:ae:27:b4:84:ca:94:aa:55:26:fc:c4:a6:47:
         18:ef:91:2d:8f:1d:6c:f2:20:de:b6:b3:78:3f:e9:80:6e:de:
         1b:c4:d1:10:3a:3a:45:7e:8e:78:61:c1:9e:02:02:0f:33:2b:
         8c:3d:eb:13:ff:b0:29:15:48:39:db:5a:2f:08:c6:ed:f3:a0:
         90:72:1d:3c
-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWE4RtCoprAM8WObZSAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDYwNTA5MDAxMloXDTI2MDkwMzA5MDAxMlowLzEtMCsGA1UEAxMk
N2E0MzVkMDAtNGFlNy00ZjAwLTg5MDMtZDI3OWUxYzgzMmI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyumFEYxS4Izhh4QDam3sx82CuztGf1P2GvLp
v/uWvSUPrWHN7XKDs+Qn6NjTtYs3JKLRn0ulIbACFC1JC+CIR6aAtrGoSCWtwNO7
nnBN8ldQ8w/MYT7C6y8iiTm3K74kTaDWKdylFflWVs6KwGxcjd3kU2vEMd1QjJio
G3Q24vVMmLJQK9tydFyVoPEwn1+HsGV4C0ZTQdGpEmv5KYDXjAyKf6A4tAmgIcrF
00R5+3Rfmyd8tlGlvCyow/73fXV6yqlCQFKILyJI0A5V2uYkabkV1cvECRZPDE/F
jLv+ujEnrnynZHUD4JSJvswt1eS5tefmCyv5fpqezGv7SAbsHQIDAQABo4IDZzCC
A2MwHQYDVR0OBBYEFIZHR/scPwbhc2SKLp8DoB2GbFZFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNTIzZDEzYjgtNTgyNC0z
MTkyLWIwMTYtMzQ2YzA4MjkzNzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAJgeCAwQA
JhMhAwQAJjTEAwQAJqzEMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr
BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz
Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBABRDpGPzelF0AuIDg89LdyuWgTGXJXIj
d5M72FJQkCcpfERSAMB4FFxveBYuraPSnWCdjNV2rDPtbuyhcPNO3ZQ0DK2yDMt8
2i0rwdXw1BQjw1Bky4eG7kkN21AbiSpeSdMn+/l6M7+Gi4hwQXnyRbSmoLsAyvap
+aN3IHzh5ifxhlOPKtcjzQig7a/uBaiYT3psTLB8wqrtn3NqCesWuPze00ZfaRSP
vLZcSav7jsW2GE/w9/C7A7ADrie0hMqUqlUm/MSmRxjvkS2PHWzyIN62s3g/6YBu
3hvE0RA6OkV+jnhhwZ4CAg8zK4w96xP/sCkVSDnbWi8Ixu3zoJByHTw=
-----END CERTIFICATE-----
Generated at Fri Jun 12 22:41:03 2026 by rpki-client