Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/60b6a2bc-ec3b-320b-95c8-b9fc35333b1b.roa
File:                     60b6a2bc-ec3b-320b-95c8-b9fc35333b1b.roa (raw, json)
Hash identifier:          PbGAWKWrZCseAWH9BhGQN6et6WRpX2xRKjiyVf5wJEk=
Subject key identifier:   CA:55:AF:F9:7B:AF:28:8A:A4:2B:9D:DE:C3:63:9D:BA:87:4C:0A:CF
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584DA3E56BF508196DFBB83C8A40
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/60b6a2bc-ec3b-320b-95c8-b9fc35333b1b.roa
Signing time:             Mon 27 Apr 2026 01:00:24 +0000
ROA not before:           Mon 27 Apr 2026 01:00:24 +0000
ROA not after:            Sun 26 Jul 2026 01:00:24 +0000
asID:                     274105
IP address blocks:        38.76.152.0/21 maxlen: 24
                          38.76.250.0/23 maxlen: 24
                          38.80.72.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a3:e5:6b:f5:08:19:6d:fb:b8:3c:8a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Apr 27 01:00:24 2026 GMT
            Not After : Jul 26 01:00:24 2026 GMT
        Subject: CN=1d56ad36-959d-4f42-ac78-6aebb8fde965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:99:b4:36:c9:a0:de:6d:d6:2e:75:99:61:a0:
                    30:b6:a9:f5:48:e3:a8:e6:01:63:2d:6b:ab:c5:ce:
                    c7:d3:1c:fb:c4:3e:bb:f9:3a:d1:09:86:ba:8f:53:
                    1a:20:45:af:f3:64:a8:ee:95:ad:b3:65:6c:6d:2a:
                    99:91:11:49:ab:78:ea:52:e9:0f:85:36:e9:4f:31:
                    11:95:25:70:4e:90:84:22:46:9e:18:dd:a7:49:9f:
                    f7:a4:40:b2:21:7a:3c:35:2d:02:ea:11:56:61:03:
                    ed:33:ea:eb:f6:38:5d:83:a9:d2:80:cd:dd:15:ff:
                    19:15:9d:63:34:20:26:bd:45:70:b6:06:37:3e:57:
                    ae:72:17:07:ba:47:56:73:73:2d:d6:00:2b:3d:a7:
                    81:1d:6c:b1:32:09:17:30:8a:7b:1c:b5:23:3f:d6:
                    9e:f9:76:33:8e:51:d9:da:af:47:a2:fd:1c:a1:93:
                    aa:5e:1d:06:73:97:76:64:ce:e3:48:d7:fc:f8:be:
                    d0:3d:b3:c1:f6:e1:2d:60:db:4e:ad:3b:2b:f5:57:
                    57:7b:2b:98:6b:9e:2b:f0:9a:77:76:45:30:6b:1d:
                    b0:67:90:14:7b:83:39:d7:af:ad:85:54:da:8a:8e:
                    ba:ae:0d:58:d1:f7:3f:41:2a:e1:cd:a7:b7:9a:6e:
                    7f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:55:AF:F9:7B:AF:28:8A:A4:2B:9D:DE:C3:63:9D:BA:87:4C:0A:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/60b6a2bc-ec3b-320b-95c8-b9fc35333b1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.76.152.0/21
                  38.76.250.0/23
                  38.80.72.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:b5:e6:0a:48:de:a5:63:1e:76:db:1e:83:03:fb:b7:4c:64:
         03:f9:76:89:df:25:fa:ba:09:66:50:b1:4a:da:0d:d8:57:49:
         8f:3c:f2:b6:43:18:6d:f4:f5:be:f2:ff:34:94:de:8a:74:85:
         c6:e6:e6:8b:f8:f9:4a:1e:d2:c0:8f:ed:c6:55:f2:df:ff:fb:
         1a:2f:d9:46:f8:96:6e:90:4b:c3:ed:81:9b:e4:07:3a:d8:77:
         d8:cc:97:ba:47:43:26:67:d0:e1:4b:38:69:64:1b:d0:63:58:
         9d:cf:d0:66:e1:8c:ac:97:be:d1:2b:60:ad:20:98:76:f8:f2:
         df:78:28:db:64:81:1c:47:0a:41:80:1a:39:fa:8b:40:ef:82:
         21:19:fa:7f:b7:54:07:1e:9e:71:82:28:88:6b:9d:6f:3f:e1:
         a6:1c:7f:41:b3:5a:be:1c:20:7d:8f:4f:70:b2:86:25:32:43:
         cd:fc:6a:39:0c:97:81:4c:49:3f:05:9c:21:99:60:b6:e0:d2:
         04:d0:79:92:7e:f1:82:b6:8e:99:7c:4b:b4:50:46:37:8e:28:
         6e:d5:ab:55:6c:2b:0d:18:fd:45:47:b1:6a:f6:2d:59:b4:9e:
         2b:a2:46:07:83:d1:47:a6:55:bb:ec:6f:f1:b2:5d:59:3f:04:
         8d:72:1e:ad
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE2j5Wv1CBlt+7g8ikAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDQyNzAxMDAyNFoXDTI2MDcyNjAxMDAyNFowLzEtMCsGA1UEAxMk
MWQ1NmFkMzYtOTU5ZC00ZjQyLWFjNzgtNmFlYmI4ZmRlOTY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZm0Nsmg3m3WLnWZYaAwtqn1SOOo5gFjLWur
xc7H0xz7xD67+TrRCYa6j1MaIEWv82So7pWts2VsbSqZkRFJq3jqUukPhTbpTzER
lSVwTpCEIkaeGN2nSZ/3pECyIXo8NS0C6hFWYQPtM+rr9jhdg6nSgM3dFf8ZFZ1j
NCAmvUVwtgY3PleuchcHukdWc3Mt1gArPaeBHWyxMgkXMIp7HLUjP9ae+XYzjlHZ
2q9Hov0coZOqXh0Gc5d2ZM7jSNf8+L7QPbPB9uEtYNtOrTsr9VdXeyuYa54r8Jp3
dkUwax2wZ5AUe4M516+thVTaio66rg1Y0fc/QSrhzae3mm5/dwIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFMpVr/l7ryiKpCud3sNjnbqHTArPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNjBiNmEyYmMtZWMzYi0z
MjBiLTk1YzgtYjlmYzM1MzMzYjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDJkyYAwQB
Jkz6AwQBJlBIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAL215gpI3qVjHnbbHoMD+7dMZAP5donfJfq6CWZQ
sUraDdhXSY888rZDGG309b7y/zSU3op0hcbm5ov4+Uoe0sCP7cZV8t//+xov2Ub4
lm6QS8PtgZvkBzrYd9jMl7pHQyZn0OFLOGlkG9BjWJ3P0GbhjKyXvtErYK0gmHb4
8t94KNtkgRxHCkGAGjn6i0DvgiEZ+n+3VAcennGCKIhrnW8/4aYcf0GzWr4cIH2P
T3CyhiUyQ838ajkMl4FMST8FnCGZYLbg0gTQeZJ+8YK2jpl8S7RQRjeOKG7Vq1Vs
Kw0Y/UVHsWr2LVm0niuiRgeD0UemVbvsb/GyXVk/BI1yHq0=
-----END CERTIFICATE-----
Generated at Tue Apr 28 21:13:29 2026 by rpki-client