Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/7eb84d28-b8b9-34a6-a487-5835f8cc7758.roa
File:                     7eb84d28-b8b9-34a6-a487-5835f8cc7758.roa (raw, json)
Hash identifier:          FbVKvluqSyHncQJaQNA27al0RNy5LAiyy56lPGrdD0A=
Subject key identifier:   14:53:3E:A4:EF:1F:D6:F1:4E:C7:90:4F:2C:B4:BA:0F:1B:9F:4B:25
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D1F4A17982FA73736B5CCD900
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/7eb84d28-b8b9-34a6-a487-5835f8cc7758.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     0
IP address blocks:        38.110.96.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:17:98:2f:a7:37:36:b5:cc:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=6c271ab0-0485-4b47-ad8c-671ffd1f524a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7e:7c:38:da:93:d8:b7:3d:f4:5a:05:24:af:
                    ed:33:a7:16:22:23:2a:ae:96:9e:ee:ec:f2:e6:d8:
                    9f:18:d2:98:4c:18:69:d1:80:fb:58:27:95:18:63:
                    1d:d1:19:45:9d:17:25:59:19:c4:2e:0d:d8:6d:8d:
                    02:68:ed:44:20:3d:2d:ac:8f:8e:c8:af:49:59:30:
                    8f:4c:c8:96:b3:8d:76:f3:de:06:df:52:87:e8:86:
                    1f:96:03:6f:00:01:8a:8c:5a:35:14:b9:f5:d4:f1:
                    11:06:e5:a7:4d:fa:fe:55:31:3c:a0:4c:56:1e:3f:
                    c2:af:fd:0a:46:dd:aa:ac:86:03:0c:c7:4e:f6:8f:
                    40:db:fd:34:c7:53:d5:73:ad:2a:ba:ef:36:c5:fd:
                    8c:52:6c:00:28:30:6b:8b:bd:e6:52:c3:f2:40:09:
                    05:75:87:57:9f:66:c6:19:a7:0d:f0:0c:15:cf:cd:
                    dc:f9:af:f4:64:78:1a:52:73:02:7f:2f:f8:c4:84:
                    07:26:1f:c5:2e:11:93:a2:f9:ba:a9:39:9d:f9:8f:
                    a2:a4:f3:cf:1f:5b:84:16:b1:69:e8:ed:2c:ab:e8:
                    69:16:3b:17:c2:ba:4f:b2:c0:8d:e5:04:80:16:37:
                    e2:8c:54:da:5f:4b:4d:47:80:52:7f:70:2d:93:78:
                    84:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:53:3E:A4:EF:1F:D6:F1:4E:C7:90:4F:2C:B4:BA:0F:1B:9F:4B:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/7eb84d28-b8b9-34a6-a487-5835f8cc7758.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.110.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:66:84:e0:06:dd:96:14:76:d0:d7:df:bb:bf:81:ec:38:77:
         e7:42:4f:13:4c:1a:3c:c4:ce:e3:2a:a2:ca:e7:f6:6c:3e:8f:
         28:5b:f4:47:e9:24:ac:46:af:ec:fa:c9:af:34:ea:51:3e:cc:
         5e:0f:e4:78:7c:e9:8d:ed:ab:dd:e9:48:1d:b7:c2:db:a3:95:
         e4:89:90:a5:8b:e6:6d:8b:0a:19:4d:6e:e3:a8:26:72:7f:fe:
         35:ff:ee:63:da:b4:f3:02:17:1e:f5:88:5c:25:7f:3d:15:b1:
         73:87:35:43:63:60:d4:bb:06:c9:77:b3:01:5a:08:9c:0a:d6:
         fc:cc:e1:c0:ec:85:08:2b:b2:b6:65:e5:71:18:fc:63:f6:d6:
         8b:66:74:93:25:a1:f1:50:70:1f:9a:1f:10:b0:e5:81:5d:77:
         e4:25:f3:9c:a2:40:e0:eb:a0:4e:30:9f:b6:ac:d9:32:2d:c3:
         05:c2:95:e9:33:a1:34:56:52:6c:88:81:b6:71:24:f1:9f:1f:
         0d:0d:f2:db:d5:0c:ca:ef:ff:57:31:68:58:96:f8:2c:37:17:
         32:54:b1:c5:8f:3e:ac:4e:e9:26:e5:6e:99:b7:27:15:4b:f2:
         2f:52:c2:00:35:e3:1c:c3:a4:f1:7e:1e:f9:a6:73:d0:1b:69:
         cc:89:e2:55
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSheYL6c3NrXM2QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk
NmMyNzFhYjAtMDQ4NS00YjQ3LWFkOGMtNjcxZmZkMWY1MjRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwn58ONqT2Lc99FoFJK/tM6cWIiMqrpae7uzy
5tifGNKYTBhp0YD7WCeVGGMd0RlFnRclWRnELg3YbY0CaO1EID0trI+OyK9JWTCP
TMiWs412894G31KH6IYflgNvAAGKjFo1FLn11PERBuWnTfr+VTE8oExWHj/Cr/0K
Rt2qrIYDDMdO9o9A2/00x1PVc60quu82xf2MUmwAKDBri73mUsPyQAkFdYdXn2bG
GacN8AwVz83c+a/0ZHgaUnMCfy/4xIQHJh/FLhGTovm6qTmd+Y+ipPPPH1uEFrFp
6O0sq+hpFjsXwrpPssCN5QSAFjfijFTaX0tNR4BSf3Atk3iEpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBRTPqTvH9bxTseQTyy0ug8bn0slMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvN2ViODRkMjgtYjhiOS0z
NGE2LWE0ODctNTgzNWY4Y2M3NzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJm5gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADFmhOAG3ZYUdtDX37u/gew4d+dCTxNMGjzEzuMqosrn9mw+jyhb9Efp
JKxGr+z6ya806lE+zF4P5Hh86Y3tq93pSB23wtujleSJkKWL5m2LChlNbuOoJnJ/
/jX/7mPatPMCFx71iFwlfz0VsXOHNUNjYNS7Bsl3swFaCJwK1vzM4cDshQgrsrZl
5XEY/GP21otmdJMlofFQcB+aHxCw5YFdd+Ql85yiQODroE4wn7as2TItwwXClekz
oTRWUmyIgbZxJPGfHw0N8tvVDMrv/1cxaFiW+Cw3FzJUscWPPqxO6Sblbpm3JxVL
8i9SwgA14xzDpPF+Hvmmc9AbacyJ4lU=
-----END CERTIFICATE-----
Generated at Sat Mar 14 18:22:55 2026 by rpki-client