Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/88c3b85d-80cb-3648-8429-3a6687384ef5.roa
File:                     88c3b85d-80cb-3648-8429-3a6687384ef5.roa (raw, json)
Hash identifier:          +lUIf9tFk0OQ1DlLfRjBY7tMn8b4IuOFOyvzHCGRxAQ=
Subject key identifier:   9C:DA:5D:CD:A6:D8:7C:A2:4E:9B:1C:0D:77:6F:5D:35:39:7B:F5:A5
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584EA799F35D9F7E9D051D5F6D00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/88c3b85d-80cb-3648-8429-3a6687384ef5.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     213971
IP address blocks:        38.67.22.0/24 maxlen: 24
                          38.68.44.0/24 maxlen: 24
                          38.68.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:99:f3:5d:9f:7e:9d:05:1d:5f:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=9c261e62-311d-4545-87ba-e70fbbd86644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:02:ae:76:eb:e9:82:78:f0:be:97:6e:a5:87:
                    91:86:af:9e:96:d6:a0:3c:9b:a5:72:24:fb:1c:29:
                    20:81:d5:33:03:24:a2:a0:4e:2d:cc:ad:9c:e6:26:
                    5d:77:d9:c3:55:2b:72:cc:5c:02:9b:4f:28:c8:90:
                    97:15:79:c2:ee:3c:24:88:d9:9e:87:cf:3f:e9:ef:
                    cb:d4:c1:2c:32:c6:8c:4e:9e:56:a8:44:77:ff:a0:
                    91:19:70:69:7c:77:96:54:bf:c7:c2:e5:93:fa:9f:
                    a3:90:b1:28:b6:f3:49:a4:8e:3c:e8:68:5c:e2:26:
                    e5:7e:34:ea:02:a3:30:f3:15:06:02:31:6c:8a:37:
                    28:ea:7d:f9:32:7a:2b:09:81:15:0f:90:66:9f:ea:
                    1d:43:69:69:b6:9f:06:a3:72:15:22:e2:0a:35:1a:
                    7c:77:ba:36:b8:ff:ca:cb:05:41:1f:ea:0e:56:ff:
                    f2:24:3c:36:c0:ee:fd:51:7b:8b:d7:a2:2e:2c:36:
                    a2:e5:90:3f:e5:57:92:17:f2:8c:be:d7:2a:15:e9:
                    41:bd:80:80:37:af:1b:6e:7f:14:9a:59:72:94:4a:
                    c2:a2:3a:16:2d:b9:12:08:9d:22:e6:01:54:ca:61:
                    23:f5:b4:25:98:71:7f:dd:6d:45:e8:33:e2:b4:7b:
                    83:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:DA:5D:CD:A6:D8:7C:A2:4E:9B:1C:0D:77:6F:5D:35:39:7B:F5:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/88c3b85d-80cb-3648-8429-3a6687384ef5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.67.22.0/24
                  38.68.44.0/24
                  38.68.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:24:1e:de:d4:3c:2e:2c:88:54:7a:ee:e5:06:14:fd:48:b1:
         d7:7b:91:3f:10:69:a1:a4:67:84:cf:29:b3:a5:1f:fc:0e:4a:
         7f:fb:32:72:4e:47:1d:69:41:38:f5:3f:2a:60:70:a6:91:67:
         b8:b3:ec:2e:04:18:d3:60:01:fa:22:28:86:2c:65:b1:da:59:
         7a:62:ca:8a:10:19:64:0c:54:dc:c3:64:cb:19:74:18:6b:65:
         e4:c8:4e:43:aa:21:68:dc:f4:03:4b:2b:42:60:0c:b2:c8:52:
         60:b4:79:da:f7:b6:db:43:97:f1:05:58:a5:bb:87:bb:62:55:
         ec:7a:12:b7:a3:10:85:15:bf:9b:0c:4c:ac:40:55:c4:5e:1f:
         5a:73:5c:83:ec:dc:1f:c1:87:20:42:8d:6c:e1:24:03:62:3f:
         46:1d:79:bb:30:77:82:3c:50:a5:63:57:c8:00:30:1d:41:48:
         6f:d1:f8:c0:e9:c4:0a:4c:69:5c:e4:d1:f7:e8:cd:66:14:73:
         9c:59:39:b0:67:25:b0:cf:c0:08:9f:88:db:67:9c:3d:04:c3:
         56:5f:72:45:60:a5:3b:a6:fa:4a:c8:c2:ab:37:02:4b:d5:35:
         1c:b9:85:68:17:29:f5:2f:00:da:2f:68:91:b0:b6:88:47:63:
         66:e0:0e:49
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE6nmfNdn36dBR1fbQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
OWMyNjFlNjItMzExZC00NTQ1LTg3YmEtZTcwZmJiZDg2NjQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowKuduvpgnjwvpdupYeRhq+eltagPJulciT7
HCkggdUzAySioE4tzK2c5iZdd9nDVStyzFwCm08oyJCXFXnC7jwkiNmeh88/6e/L
1MEsMsaMTp5WqER3/6CRGXBpfHeWVL/HwuWT+p+jkLEotvNJpI486Ghc4iblfjTq
AqMw8xUGAjFsijco6n35MnorCYEVD5Bmn+odQ2lptp8Go3IVIuIKNRp8d7o2uP/K
ywVBH+oOVv/yJDw2wO79UXuL16IuLDai5ZA/5VeSF/KMvtcqFelBvYCAN68bbn8U
mllylErCojoWLbkSCJ0i5gFUymEj9bQlmHF/3W1F6DPitHuD8wIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFJzaXc2m2HyiTpscDXdvXTU5e/WlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvODhjM2I4NWQtODBjYi0z
NjQ4LTg0MjktM2E2Njg3Mzg0ZWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAJkMWAwQA
JkQsAwQAJkQ4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAIMkHt7UPC4siFR67uUGFP1Isdd7kT8QaaGkZ4TP
KbOlH/wOSn/7MnJORx1pQTj1PypgcKaRZ7iz7C4EGNNgAfoiKIYsZbHaWXpiyooQ
GWQMVNzDZMsZdBhrZeTITkOqIWjc9ANLK0JgDLLIUmC0edr3tttDl/EFWKW7h7ti
Vex6ErejEIUVv5sMTKxAVcReH1pzXIPs3B/BhyBCjWzhJANiP0Ydebswd4I8UKVj
V8gAMB1BSG/R+MDpxApMaVzk0ffozWYUc5xZObBnJbDPwAifiNtnnD0Ew1ZfckVg
pTum+krIwqs3AkvVNRy5hWgXKfUvANovaJGwtohHY2bgDkk=
-----END CERTIFICATE-----
Generated at Wed Sep 9 10:30:04 2026 by rpki-client