Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/7a80fd4c-5d92-3d54-a6fc-d80a3b11cf92.roa
File:                     7a80fd4c-5d92-3d54-a6fc-d80a3b11cf92.roa (raw, json)
Hash identifier:          XQUIRQFKHJ+BaSWFXAeA7gHlQ/B259JIKNW75uYOkU0=
Subject key identifier:   58:A2:83:50:78:D8:13:B8:7D:F5:7C:68:C2:42:F7:B9:7F:1F:0E:8E
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F49736DCD277C70280C919200
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/7a80fd4c-5d92-3d54-a6fc-d80a3b11cf92.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     0
IP address blocks:        38.236.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:6d:cd:27:7c:70:28:0c:91:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=3b447ab8-d887-446d-9e1f-8269c3e26d8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:4b:f0:75:c4:3c:77:8a:0a:ed:86:ae:05:05:
                    10:5c:16:df:88:a9:3d:11:42:66:8c:23:91:c0:e2:
                    5a:83:e3:b6:60:8e:0d:69:6a:d4:83:d8:cf:7f:2d:
                    10:ba:37:b6:4e:9f:ad:c6:55:17:6b:92:2e:7f:42:
                    1b:dd:0a:c6:bb:e9:08:a3:c3:94:82:f4:3c:4c:26:
                    09:c8:2f:16:72:8a:57:ec:d5:36:cf:72:3d:fb:13:
                    68:e5:8f:27:6e:93:29:da:0b:f0:76:22:69:a6:7e:
                    2a:c1:fe:11:a3:13:bd:32:c2:fc:c2:23:78:e9:cd:
                    29:9e:7c:d6:03:56:00:fe:ab:63:34:b8:9e:39:16:
                    b2:f6:28:f0:b6:b7:8d:72:9a:f3:89:4b:ba:f5:9e:
                    61:62:01:69:ba:f4:00:53:5f:66:0a:3c:7e:a2:a8:
                    06:d5:94:8d:cb:56:e7:02:2e:10:98:ad:31:6e:0a:
                    4f:5f:9b:af:14:24:e3:d7:23:51:e0:5f:59:44:90:
                    4b:68:1f:aa:21:3b:da:60:2e:9d:ee:26:de:ee:a7:
                    7d:f0:67:0d:42:a7:a1:9e:39:b5:bb:93:80:46:f8:
                    19:8f:3a:e7:ff:1a:1a:b5:fe:5c:93:aa:cf:f0:75:
                    28:fe:e6:6b:70:7d:84:e7:8a:69:ae:a4:60:6a:91:
                    b4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:A2:83:50:78:D8:13:B8:7D:F5:7C:68:C2:42:F7:B9:7F:1F:0E:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/7a80fd4c-5d92-3d54-a6fc-d80a3b11cf92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.236.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:1c:4b:49:8d:ce:d8:a1:c6:f9:b9:c3:49:f2:c3:0b:cc:9a:
         3d:7e:ed:97:bc:a8:e2:69:39:fd:02:d6:1a:25:ca:3e:d8:ff:
         50:06:9f:cc:97:f0:4b:d7:c0:9b:34:2e:2c:04:0a:14:16:c7:
         99:de:bc:f9:ff:ed:8f:86:14:ed:d7:a3:48:40:aa:00:af:6b:
         32:fa:01:a5:36:22:6e:29:35:93:ce:06:d4:ac:02:be:ff:db:
         00:2d:45:8a:a6:4d:29:fb:a7:16:87:fd:34:80:c5:71:a1:c0:
         bb:c0:0e:93:b7:91:58:70:1f:76:4d:52:04:8f:b8:5f:0b:ce:
         59:21:91:e9:42:eb:00:ac:eb:35:ea:db:3c:7e:47:8b:97:1c:
         f5:47:f8:08:7d:22:84:e0:51:06:c8:be:9a:6e:0e:18:9e:0f:
         b6:ce:69:7b:47:60:a8:33:38:ef:13:34:08:00:17:05:e0:60:
         92:01:0c:c1:fb:6b:4d:95:52:7d:71:c6:7c:12:5c:e9:fc:1e:
         6e:eb:fa:0d:7b:9d:e1:c1:8b:4a:10:28:45:8d:5c:c5:c8:6b:
         59:27:a6:5a:e0:8f:bf:14:21:55:ae:64:fe:82:79:e6:fc:9b:
         55:66:1a:dd:50:00:9a:b7:08:05:10:c2:ac:cf:72:0d:2e:d6:
         c8:3e:56:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc23NJ3xwKAyRkgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
M2I0NDdhYjgtZDg4Ny00NDZkLTllMWYtODI2OWMzZTI2ZDhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0vwdcQ8d4oK7YauBQUQXBbfiKk9EUJmjCOR
wOJag+O2YI4NaWrUg9jPfy0Quje2Tp+txlUXa5Iuf0Ib3QrGu+kIo8OUgvQ8TCYJ
yC8WcopX7NU2z3I9+xNo5Y8nbpMp2gvwdiJppn4qwf4RoxO9MsL8wiN46c0pnnzW
A1YA/qtjNLieORay9ijwtreNcprziUu69Z5hYgFpuvQAU19mCjx+oqgG1ZSNy1bn
Ai4QmK0xbgpPX5uvFCTj1yNR4F9ZRJBLaB+qITvaYC6d7ibe7qd98GcNQqehnjm1
u5OARvgZjzrn/xoatf5ck6rP8HUo/uZrcH2E54pprqRgapG0HwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFiig1B42BO4ffV8aMJC97l/Hw6OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvN2E4MGZkNGMtNWQ5Mi0z
ZDU0LWE2ZmMtZDgwYTNiMTFjZjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJux0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIAcS0mNztihxvm5w0nywwvMmj1+7Ze8qOJpOf0C1holyj7Y/1AGn8yX
8EvXwJs0LiwEChQWx5nevPn/7Y+GFO3Xo0hAqgCvazL6AaU2Im4pNZPOBtSsAr7/
2wAtRYqmTSn7pxaH/TSAxXGhwLvADpO3kVhwH3ZNUgSPuF8LzlkhkelC6wCs6zXq
2zx+R4uXHPVH+Ah9IoTgUQbIvppuDhieD7bOaXtHYKgzOO8TNAgAFwXgYJIBDMH7
a02VUn1xxnwSXOn8Hm7r+g17neHBi0oQKEWNXMXIa1knplrgj78UIVWuZP6Ceeb8
m1VmGt1QAJq3CAUQwqzPcg0u1sg+Vmg=
-----END CERTIFICATE-----
Generated at Tue Oct 6 11:34:19 2026 by rpki-client