Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/63227ec1-adfb-3357-bb3c-74b47ef707c0.roa
File:                     63227ec1-adfb-3357-bb3c-74b47ef707c0.roa (raw, json)
Hash identifier:          M5DqJQPwjTdPqLmxpEwbIkx/rU5jTKlZoPvCSUloTcM=
Subject key identifier:   FB:9A:65:84:26:B7:B1:68:F9:10:8A:17:F5:34:E3:CF:99:0E:41:39
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F00DCC28F9B79E8F6D7B00F00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/63227ec1-adfb-3357-bb3c-74b47ef707c0.roa
Signing time:             Sun 30 Aug 2026 01:00:12 +0000
ROA not before:           Sun 30 Aug 2026 01:00:12 +0000
ROA not after:            Sat 28 Nov 2026 02:00:12 +0000
asID:                     150654
IP address blocks:        38.123.104.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:00:dc:c2:8f:9b:79:e8:f6:d7:b0:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Aug 30 01:00:12 2026 GMT
            Not After : Nov 28 02:00:12 2026 GMT
        Subject: CN=3bdefcc8-bc7d-4848-96ad-2ac80ac3be63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:67:4e:f2:8e:8c:de:e2:7c:94:71:58:b6:5f:
                    2d:fe:d5:d1:06:57:aa:a5:09:1c:55:5d:e6:4d:aa:
                    5f:60:27:d5:67:50:79:25:4c:6e:5b:0d:20:26:bd:
                    f2:a3:1b:20:a3:f3:75:14:a6:5c:f6:e0:74:9f:32:
                    d4:c5:f0:20:03:85:8e:c8:a8:78:7f:07:3a:03:2f:
                    99:f8:25:bc:6c:a8:a7:44:aa:20:22:51:bc:8b:95:
                    44:16:7c:5c:41:c1:e5:e7:13:3d:36:bb:e7:ea:40:
                    c1:99:e5:86:0c:0b:93:a9:9b:69:e8:b5:6c:f6:c5:
                    af:41:7a:74:e2:3a:1c:dd:ad:88:88:bd:33:81:ec:
                    bd:a0:7b:35:7c:d4:50:94:57:94:b7:6e:64:81:d4:
                    68:9d:0a:2e:a4:1c:21:f5:6c:42:ea:90:c7:b5:15:
                    25:53:4e:69:5e:6e:ad:a8:9f:5e:7c:d1:9a:8a:c3:
                    39:36:c2:12:f0:45:60:96:1d:c0:1b:0a:4e:08:5b:
                    90:6f:7a:00:b2:3d:12:1c:b3:e6:55:39:34:f3:82:
                    43:25:1e:55:d3:c9:4c:bb:a4:0c:c6:5d:79:3b:3e:
                    2c:1b:43:5a:6f:c0:9a:c5:a4:f0:9b:68:04:e9:39:
                    e3:76:ed:87:37:9a:38:33:ae:ae:d1:da:fa:91:5c:
                    b4:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:9A:65:84:26:B7:B1:68:F9:10:8A:17:F5:34:E3:CF:99:0E:41:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/63227ec1-adfb-3357-bb3c-74b47ef707c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.123.104.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:c9:ea:e2:25:e5:97:56:7f:88:a7:f1:d6:17:ce:35:5c:2d:
         d2:74:69:e9:45:1f:6b:5a:cc:82:70:7c:5e:41:60:36:0e:97:
         ee:7d:cf:b5:69:be:6d:f7:16:b5:15:51:fe:41:29:73:cd:15:
         f1:fc:cd:69:ec:9b:86:69:51:03:26:45:28:79:2b:03:cf:fa:
         a9:0f:41:0b:1e:0a:6b:db:24:c7:0f:4b:87:f5:61:be:0e:a3:
         f7:70:0c:24:71:5f:d2:ed:59:09:0e:8c:a1:a3:78:00:a8:1f:
         7f:24:c7:74:1a:24:df:ae:96:4e:e3:34:bb:a5:91:f9:e1:ce:
         d7:16:69:ca:a5:85:d3:48:b7:6d:0c:9d:a3:5d:0f:ea:f3:f1:
         39:67:c1:0b:a2:97:24:aa:4e:79:28:8e:b8:50:92:ac:c8:77:
         34:b1:2f:43:09:24:85:72:72:f4:aa:b8:0a:cc:58:08:7f:b4:
         a1:dd:8b:cc:3c:82:d9:91:9b:40:da:de:95:8b:18:f6:ea:0e:
         58:73:f9:9c:f0:4d:7b:26:5d:ef:da:d7:c5:48:48:c5:d1:5d:
         91:ec:af:cc:49:20:ed:34:a2:19:65:a6:4e:cc:cb:b4:bc:52:
         81:69:0d:b4:0f:fc:6f:54:3b:67:a9:ea:b9:8c:80:78:68:bd:
         6e:34:b5:cd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8A3MKPm3no9tewDwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDgzMDAxMDAxMloXDTI2MTEyODAyMDAxMlowLzEtMCsGA1UEAxMk
M2JkZWZjYzgtYmM3ZC00ODQ4LTk2YWQtMmFjODBhYzNiZTYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GdO8o6M3uJ8lHFYtl8t/tXRBleqpQkcVV3m
TapfYCfVZ1B5JUxuWw0gJr3yoxsgo/N1FKZc9uB0nzLUxfAgA4WOyKh4fwc6Ay+Z
+CW8bKinRKogIlG8i5VEFnxcQcHl5xM9Nrvn6kDBmeWGDAuTqZtp6LVs9sWvQXp0
4joc3a2IiL0zgey9oHs1fNRQlFeUt25kgdRonQoupBwh9WxC6pDHtRUlU05pXm6t
qJ9efNGaisM5NsIS8EVglh3AGwpOCFuQb3oAsj0SHLPmVTk084JDJR5V08lMu6QM
xl15Oz4sG0Nab8CaxaTwm2gE6Tnjdu2HN5o4M66u0dr6kVy0VQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPuaZYQmt7Fo+RCKF/U048+ZDkE5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNjMyMjdlYzEtYWRmYi0z
MzU3LWJiM2MtNzRiNDdlZjcwN2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJntoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAL3J6uIl5ZdWf4in8dYXzjVcLdJ0aelFH2tazIJwfF5BYDYOl+59z7Vp
vm33FrUVUf5BKXPNFfH8zWnsm4ZpUQMmRSh5KwPP+qkPQQseCmvbJMcPS4f1Yb4O
o/dwDCRxX9LtWQkOjKGjeACoH38kx3QaJN+ulk7jNLulkfnhztcWacqlhdNIt20M
naNdD+rz8TlnwQuilySqTnkojrhQkqzIdzSxL0MJJIVycvSquArMWAh/tKHdi8w8
gtmRm0Da3pWLGPbqDlhz+ZzwTXsmXe/a18VISMXRXZHsr8xJIO00ohllpk7My7S8
UoFpDbQP/G9UO2ep6rmMgHhovW40tc0=
-----END CERTIFICATE-----
Generated at Fri Sep 11 14:30:34 2026 by rpki-client