Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/656db2ee-b0d1-3101-ac68-cf0c37398dc1.roa
File:                     656db2ee-b0d1-3101-ac68-cf0c37398dc1.roa (raw, json)
Hash identifier:          Qio+RSs+YiB1QMW8ErhpgQE/QaZu6nBvIp5756MvMuQ=
Subject key identifier:   EC:E7:7C:E4:E9:11:5B:2A:58:C3:62:6F:00:FF:6D:13:27:2D:4B:0A
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E1749871BC0DBBD9699CE0F80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/656db2ee-b0d1-3101-ac68-cf0c37398dc1.roa
Signing time:             Sun 07 Jun 2026 09:00:13 +0000
ROA not before:           Sun 07 Jun 2026 09:00:13 +0000
ROA not after:            Sat 05 Sep 2026 09:00:13 +0000
asID:                     150447
IP address blocks:        38.72.88.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:17:49:87:1b:c0:db:bd:96:99:ce:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jun  7 09:00:13 2026 GMT
            Not After : Sep  5 09:00:13 2026 GMT
        Subject: CN=c293d9bb-0a3d-41b1-add2-510cfbac1b1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b4:57:29:c0:e3:64:42:e2:1f:cd:de:84:be:
                    1b:c8:62:ff:c3:a8:05:1f:4f:9a:ba:fc:e2:89:04:
                    c2:e5:6d:88:5d:43:81:75:a5:d1:ef:09:2f:4e:92:
                    28:2b:63:7e:61:5e:62:4f:7f:b8:81:48:51:14:b1:
                    6b:d0:35:76:11:fe:15:bd:0d:e6:c8:8c:db:48:25:
                    e2:a4:48:96:6b:45:a9:3a:29:59:e6:8e:73:28:5a:
                    e0:97:34:bc:c4:9e:61:3f:90:f7:cb:61:3a:89:7a:
                    bf:78:13:17:99:55:2a:74:a3:27:b1:a2:97:f3:e0:
                    db:ae:39:69:84:fd:a4:f3:ba:69:5d:d1:ae:52:0e:
                    35:a9:db:3c:bb:fd:9c:fc:bc:a6:10:ec:40:18:8d:
                    06:9b:72:97:5c:84:a6:50:d7:e9:52:15:bb:6a:83:
                    f2:c7:47:51:1d:86:35:0c:fe:8d:32:79:c3:59:63:
                    ae:1e:bd:c5:e0:9f:33:e5:05:94:ea:97:28:79:28:
                    3a:f0:ea:ec:81:4f:ae:62:d6:5c:32:6a:f3:8f:72:
                    25:66:43:80:4b:67:84:a3:6c:7e:63:78:67:5d:85:
                    90:fc:fa:d1:4a:c9:ea:99:e0:88:99:4a:f0:1e:ae:
                    81:f8:e3:25:ae:bf:54:5d:5d:22:a8:eb:51:97:95:
                    e9:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:E7:7C:E4:E9:11:5B:2A:58:C3:62:6F:00:FF:6D:13:27:2D:4B:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/656db2ee-b0d1-3101-ac68-cf0c37398dc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.72.88.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:37:5e:4b:dc:4f:c7:53:70:2a:46:ff:52:7c:d8:59:37:12:
         d0:83:61:f0:2a:83:1e:a7:a6:f5:e2:13:d3:88:2a:e1:8e:40:
         1f:b1:65:3c:aa:b0:00:ec:59:fb:75:ee:93:f9:ff:d9:b2:7d:
         6e:4c:4b:28:cc:9d:fc:0f:ee:f4:60:56:d1:4b:78:9a:74:f1:
         bf:0f:b2:3a:92:88:57:fe:bc:56:b0:e3:bd:c5:6d:6a:cc:0e:
         67:76:6a:c4:7c:20:03:51:77:f5:f6:86:55:fc:7d:aa:ea:6a:
         9c:15:a0:01:22:d4:2e:61:c4:3a:3b:36:14:12:66:08:9c:6e:
         bc:fc:9e:e5:6d:e6:43:6c:c1:87:52:11:85:1c:c4:cf:b1:29:
         c6:08:ca:97:a6:60:65:b4:f0:74:8a:f6:ed:d4:72:4f:08:f7:
         dc:b8:c0:3e:19:7f:8c:d7:02:40:e4:13:34:a3:e2:54:fa:e7:
         14:cd:3a:14:ab:2b:bc:49:b5:b4:f1:8c:7a:15:31:c4:aa:b2:
         d9:8e:05:cd:83:6f:c5:11:c4:b4:36:57:ee:01:86:a5:c9:c3:
         42:d3:00:e9:cc:d3:2c:e6:84:93:5b:0e:dd:5e:3f:58:19:44:
         1a:05:a0:0c:dc:29:16:67:74:56:fa:03:b5:a2:ae:04:70:cf:
         c4:b8:ae:bb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4XSYcbwNu9lpnOD4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDYwNzA5MDAxM1oXDTI2MDkwNTA5MDAxM1owLzEtMCsGA1UEAxMk
YzI5M2Q5YmItMGEzZC00MWIxLWFkZDItNTEwY2ZiYWMxYjFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybRXKcDjZELiH83ehL4byGL/w6gFH0+auvzi
iQTC5W2IXUOBdaXR7wkvTpIoK2N+YV5iT3+4gUhRFLFr0DV2Ef4VvQ3myIzbSCXi
pEiWa0WpOilZ5o5zKFrglzS8xJ5hP5D3y2E6iXq/eBMXmVUqdKMnsaKX8+Dbrjlp
hP2k87ppXdGuUg41qds8u/2c/LymEOxAGI0Gm3KXXISmUNfpUhW7aoPyx0dRHYY1
DP6NMnnDWWOuHr3F4J8z5QWU6pcoeSg68OrsgU+uYtZcMmrzj3IlZkOAS2eEo2x+
Y3hnXYWQ/PrRSsnqmeCImUrwHq6B+OMlrr9UXV0iqOtRl5XpcQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOznfOTpEVsqWMNibwD/bRMnLUsKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNjU2ZGIyZWUtYjBkMS0z
MTAxLWFjNjgtY2YwYzM3Mzk4ZGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJkhYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJo3XkvcT8dTcCpG/1J82Fk3EtCDYfAqgx6npvXiE9OIKuGOQB+xZTyq
sADsWft17pP5/9myfW5MSyjMnfwP7vRgVtFLeJp08b8PsjqSiFf+vFaw473FbWrM
Dmd2asR8IANRd/X2hlX8farqapwVoAEi1C5hxDo7NhQSZgicbrz8nuVt5kNswYdS
EYUcxM+xKcYIypemYGW08HSK9u3Uck8I99y4wD4Zf4zXAkDkEzSj4lT65xTNOhSr
K7xJtbTxjHoVMcSqstmOBc2Db8URxLQ2V+4BhqXJw0LTAOnM0yzmhJNbDt1eP1gZ
RBoFoAzcKRZndFb6A7WirgRwz8S4rrs=
-----END CERTIFICATE-----
Generated at Fri Jun 12 22:37:31 2026 by rpki-client