Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8d3facee-f645-3925-aa8a-5998571c6d34.roa
File:                     8d3facee-f645-3925-aa8a-5998571c6d34.roa (raw, json)
Hash identifier:          5I5fCzuwMsnjMiJ0MGUEVHy+MILSMB79ML5NrUnOgIs=
Subject key identifier:   1C:2E:1D:00:36:CA:E3:E6:DA:93:09:88:C6:76:D4:C7:47:36:5C:77
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584DE0A810F6BE63EA05DD37ED00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8d3facee-f645-3925-aa8a-5998571c6d34.roa
Signing time:             Mon 18 May 2026 19:21:17 +0000
ROA not before:           Mon 18 May 2026 19:21:17 +0000
ROA not after:            Sun 16 Aug 2026 19:21:17 +0000
asID:                     274414
IP address blocks:        38.252.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e0:a8:10:f6:be:63:ea:05:dd:37:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: May 18 19:21:17 2026 GMT
            Not After : Aug 16 19:21:17 2026 GMT
        Subject: CN=8162d600-df1d-4131-8890-38aec2c03200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cd:38:29:51:75:27:c8:a4:b3:52:04:7d:dc:
                    78:f0:53:b1:9e:9a:0e:63:99:3e:fb:8e:53:22:0d:
                    eb:19:31:93:fe:c9:f2:2d:1e:ab:49:8d:60:d7:92:
                    a9:70:d6:6e:89:59:9b:c1:9c:0e:d6:e0:ac:63:35:
                    af:f3:e3:76:fd:74:03:92:e7:82:8a:fa:d8:7f:6d:
                    9a:48:22:60:fb:b3:97:d6:96:36:b3:36:21:3e:0c:
                    7b:b2:5c:cd:ec:73:65:4f:b9:b0:5f:c3:f8:6a:c4:
                    2d:21:c6:a0:4b:39:23:c8:a2:79:f2:5a:73:59:f3:
                    f6:13:72:74:91:5d:c1:03:f1:8b:ad:ce:08:27:a2:
                    e4:f3:7e:5b:75:f6:a7:f1:27:6d:2a:56:58:58:80:
                    5b:13:7e:7c:ab:19:eb:16:6b:ca:5a:13:ab:fc:f5:
                    38:a7:f1:75:f6:0f:b8:2f:6b:fe:2a:c7:41:52:f8:
                    e1:da:bc:fb:5b:77:eb:8e:a7:9d:08:68:6b:82:49:
                    57:d5:7f:9b:57:6d:91:d1:a9:f5:40:1f:1b:a8:17:
                    95:73:91:3e:e5:c5:a3:9a:ea:f1:95:71:81:f3:59:
                    e7:ee:cc:95:c8:99:d3:75:f2:8a:3b:af:18:15:b1:
                    35:41:aa:9d:cf:9e:82:bb:8f:ea:da:2a:14:80:6c:
                    69:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:2E:1D:00:36:CA:E3:E6:DA:93:09:88:C6:76:D4:C7:47:36:5C:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8d3facee-f645-3925-aa8a-5998571c6d34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.252.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:9f:73:72:cd:44:13:2b:81:64:47:a4:42:c7:51:c8:72:f7:
         7c:d3:1d:23:19:60:21:e9:1e:8f:bc:90:ea:0a:47:bd:3b:01:
         9a:a4:ba:c7:7d:a4:dd:33:d6:40:6d:90:87:a3:ed:2b:49:43:
         24:30:20:cd:bd:66:08:98:22:2a:59:ad:6e:2e:a0:28:4e:d2:
         77:b7:60:30:cd:5b:1b:54:1e:5e:58:8e:df:a8:bb:43:e2:ba:
         c7:85:ed:90:6a:06:de:91:94:cc:9f:c8:9e:fd:7d:ea:72:90:
         26:ad:16:87:36:7a:7c:c5:1a:7f:2f:39:d7:e1:87:e7:2a:9e:
         a7:ad:80:65:77:62:b8:7e:02:00:f8:41:5f:9c:b8:8f:bc:9d:
         5a:86:df:ef:15:38:66:c4:0e:d7:39:61:d5:d2:8f:70:37:5b:
         93:bb:91:af:52:5c:d4:b3:61:68:74:f8:69:97:7d:53:81:60:
         49:68:88:0e:fb:49:67:99:c7:e7:14:a6:02:33:72:2e:02:a8:
         48:d2:80:de:1f:7b:5c:7c:1b:e4:a7:33:5a:ec:71:81:c9:86:
         0b:ca:e1:0b:6a:2e:20:0e:84:83:3c:b8:1e:7c:f4:d8:0e:74:
         a4:4b:fd:7e:8c:57:26:3d:19:c3:18:d4:73:82:ef:6e:06:40:
         4b:ff:a8:31
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3gqBD2vmPqBd037QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDUxODE5MjExN1oXDTI2MDgxNjE5MjExN1owLzEtMCsGA1UEAxMk
ODE2MmQ2MDAtZGYxZC00MTMxLTg4OTAtMzhhZWMyYzAzMjAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw804KVF1J8iks1IEfdx48FOxnpoOY5k++45T
Ig3rGTGT/snyLR6rSY1g15KpcNZuiVmbwZwO1uCsYzWv8+N2/XQDkueCivrYf22a
SCJg+7OX1pY2szYhPgx7slzN7HNlT7mwX8P4asQtIcagSzkjyKJ58lpzWfP2E3J0
kV3BA/GLrc4IJ6Lk835bdfan8SdtKlZYWIBbE358qxnrFmvKWhOr/PU4p/F19g+4
L2v+KsdBUvjh2rz7W3frjqedCGhrgklX1X+bV22R0an1QB8bqBeVc5E+5cWjmurx
lXGB81nn7syVyJnTdfKKO68YFbE1Qaqdz56Cu4/q2ioUgGxpxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBwuHQA2yuPm2pMJiMZ21MdHNlx3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOGQzZmFjZWUtZjY0NS0z
OTI1LWFhOGEtNTk5ODU3MWM2ZDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJvyQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFifc3LNRBMrgWRHpELHUchy93zTHSMZYCHpHo+8kOoKR707AZqkusd9
pN0z1kBtkIej7StJQyQwIM29ZgiYIipZrW4uoChO0ne3YDDNWxtUHl5Yjt+ou0Pi
useF7ZBqBt6RlMyfyJ79fepykCatFoc2enzFGn8vOdfhh+cqnqetgGV3Yrh+AgD4
QV+cuI+8nVqG3+8VOGbEDtc5YdXSj3A3W5O7ka9SXNSzYWh0+GmXfVOBYEloiA77
SWeZx+cUpgIzci4CqEjSgN4fe1x8G+SnM1rscYHJhgvK4QtqLiAOhIM8uB589NgO
dKRL/X6MVyY9GcMY1HOC724GQEv/qDE=
-----END CERTIFICATE-----
Generated at Fri Jun 12 22:33:40 2026 by rpki-client