Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6384533d-e3a3-35d8-90aa-7ee0fcc4403d.roa
File:                     6384533d-e3a3-35d8-90aa-7ee0fcc4403d.roa (raw, json)
Hash identifier:          thEGO2Uh1aAK4aVfQ4hqbOs19v0IsRj3LubnJp8+WIo=
Subject key identifier:   02:0C:A6:E7:5C:A5:67:ED:0B:45:9B:07:1D:84:25:6F:A1:D2:43:63
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584EF87CE175CD7868047F6DE580
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6384533d-e3a3-35d8-90aa-7ee0fcc4403d.roa
Signing time:             Thu 27 Aug 2026 01:00:12 +0000
ROA not before:           Thu 27 Aug 2026 01:00:12 +0000
ROA not after:            Wed 25 Nov 2026 02:00:12 +0000
asID:                     6079
IP address blocks:        38.110.113.0/24 maxlen: 24
                          38.110.136.0/24 maxlen: 24
                          38.110.196.0/24 maxlen: 24
                          38.110.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f8:7c:e1:75:cd:78:68:04:7f:6d:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Aug 27 01:00:12 2026 GMT
            Not After : Nov 25 02:00:12 2026 GMT
        Subject: CN=20837382-9a4c-49e5-9cf1-9a63078a8bc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:40:25:10:54:c8:1d:e6:32:60:90:a3:f9:07:
                    5b:73:89:9b:7d:3d:90:be:cb:4f:5f:55:0a:c3:ed:
                    1f:61:0b:80:5e:a7:f3:fc:97:90:e4:75:b0:79:ac:
                    24:62:ee:eb:96:e5:72:7b:70:f0:02:5d:45:c6:14:
                    0f:c9:c9:7f:63:8e:c7:1a:9e:b4:63:c3:36:df:28:
                    8b:98:45:60:61:c5:05:e0:ad:47:9e:87:ce:12:63:
                    c1:dd:85:e5:27:84:22:5e:9a:68:57:93:5a:7b:24:
                    ad:b3:00:63:cf:1d:02:8d:76:4f:b4:9a:0f:50:a6:
                    a6:95:6f:67:2e:1f:e0:d7:38:3c:d1:27:6b:95:21:
                    db:a7:b1:b7:8b:aa:55:41:ad:3b:3e:cb:dd:63:d8:
                    e9:86:f3:e4:7b:a0:15:23:1a:7f:fc:84:8e:38:66:
                    5b:bd:90:7a:c6:73:e3:28:93:84:aa:47:24:8d:21:
                    fc:29:ce:6f:c3:c1:24:74:26:7d:b5:55:66:91:ee:
                    e7:cf:c1:9f:b8:8e:7a:68:96:07:78:4e:64:91:c5:
                    b9:94:1e:8b:82:9d:ee:25:0c:96:b7:4e:6c:f3:f8:
                    09:f9:4d:40:43:6c:8a:23:cd:57:cb:39:e8:20:c7:
                    e1:f7:9f:11:55:ba:b4:72:a5:4a:13:4f:76:15:eb:
                    c1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:0C:A6:E7:5C:A5:67:ED:0B:45:9B:07:1D:84:25:6F:A1:D2:43:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6384533d-e3a3-35d8-90aa-7ee0fcc4403d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.110.113.0/24
                  38.110.136.0/24
                  38.110.196.0/24
                  38.110.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:bc:26:32:af:d9:8d:60:91:a1:6b:9d:ad:e8:9f:89:01:63:
         4b:ab:bf:d4:88:63:43:23:c1:be:69:07:f7:09:83:c5:d4:d8:
         f1:f1:0e:1c:7c:55:3d:93:35:4a:9c:e1:b6:85:d4:ff:c8:61:
         26:7e:1c:30:15:88:bc:01:ba:4c:f6:6f:f0:5c:4f:a8:9a:29:
         a4:49:1e:cb:8b:09:ba:b9:76:61:0b:25:2c:e3:2f:02:5e:1c:
         5d:de:67:2b:bc:f5:a5:13:0d:a5:33:92:4b:f4:8c:1b:3f:fa:
         bc:70:5e:25:23:77:a3:26:48:a9:1f:4a:5e:92:f1:17:72:5a:
         cf:4f:35:2b:bc:30:9f:fe:10:64:0c:2e:15:13:b0:f0:4b:40:
         8a:33:bd:8f:dd:19:8a:14:88:c3:f5:b4:0e:57:c9:d7:2f:7c:
         0e:32:a8:40:8a:a0:ae:8b:29:5f:f2:c4:92:01:64:f5:6d:9f:
         52:97:fa:18:11:4d:cc:5f:0e:cb:68:ec:86:a4:e6:c8:ce:08:
         61:5d:3c:c6:bf:3b:f2:c5:d6:99:5b:03:c7:f7:67:33:27:f4:
         c9:d0:96:cf:14:c9:d9:6e:89:d2:cb:0f:d4:34:d3:fd:59:66:
         85:2c:bd:8a:5e:ef:71:f6:c3:d7:46:16:22:83:19:85:5a:07:
         dd:bb:f7:e4
-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWE74fOF1zXhoBH9t5YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk
MjA4MzczODItOWE0Yy00OWU1LTljZjEtOWE2MzA3OGE4YmMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEAlEFTIHeYyYJCj+Qdbc4mbfT2QvstPX1UK
w+0fYQuAXqfz/JeQ5HWweawkYu7rluVye3DwAl1FxhQPycl/Y47HGp60Y8M23yiL
mEVgYcUF4K1HnofOEmPB3YXlJ4QiXppoV5NaeyStswBjzx0CjXZPtJoPUKamlW9n
Lh/g1zg80SdrlSHbp7G3i6pVQa07PsvdY9jphvPke6AVIxp//ISOOGZbvZB6xnPj
KJOEqkckjSH8Kc5vw8EkdCZ9tVVmke7nz8GfuI56aJYHeE5kkcW5lB6Lgp3uJQyW
t05s8/gJ+U1AQ2yKI81XyznoIMfh958RVbq0cqVKE092FevBsQIDAQABo4IDZzCC
A2MwHQYDVR0OBBYEFAIMpudcpWftC0WbBx2EJW+h0kNjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNjM4NDUzM2QtZTNhMy0z
NWQ4LTkwYWEtN2VlMGZjYzQ0MDNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAJm5xAwQA
Jm6IAwQAJm7EAwQAJm7MMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr
BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz
Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBACe8JjKv2Y1gkaFrna3on4kBY0urv9SI
Y0Mjwb5pB/cJg8XU2PHxDhx8VT2TNUqc4baF1P/IYSZ+HDAViLwBukz2b/BcT6ia
KaRJHsuLCbq5dmELJSzjLwJeHF3eZyu89aUTDaUzkkv0jBs/+rxwXiUjd6MmSKkf
Sl6S8RdyWs9PNSu8MJ/+EGQMLhUTsPBLQIozvY/dGYoUiMP1tA5XydcvfA4yqECK
oK6LKV/yxJIBZPVtn1KX+hgRTcxfDsto7Iak5sjOCGFdPMa/O/LF1plbA8f3ZzMn
9MnQls8UydluidLLD9Q00/1ZZoUsvYpe73H2w9dGFiKDGYVaB9279+Q=
-----END CERTIFICATE-----
Generated at Fri Sep 11 13:49:27 2026 by rpki-client