Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/91bf583c-a916-3bf5-8f86-520e92525169.roa
File:                     91bf583c-a916-3bf5-8f86-520e92525169.roa (raw, json)
Hash identifier:          BBQ8cwufKy5KzxU3c09EcCt8LWMuc4R7oG9Ssl2/nb0=
Subject key identifier:   A2:B5:0E:0C:5F:A5:5C:B2:16:9B:0D:B6:16:62:CF:D7:BD:16:DF:3D
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E253F1CAFFCCB2D0D40069B00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/91bf583c-a916-3bf5-8f86-520e92525169.roa
Signing time:             Fri 12 Jun 2026 09:00:11 +0000
ROA not before:           Fri 12 Jun 2026 09:00:11 +0000
ROA not after:            Thu 10 Sep 2026 09:00:11 +0000
asID:                     264758
IP address blocks:        38.156.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:3f:1c:af:fc:cb:2d:0d:40:06:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jun 12 09:00:11 2026 GMT
            Not After : Sep 10 09:00:11 2026 GMT
        Subject: CN=42e0a0de-bafd-4719-b6ad-9d9b92818895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8c:29:bc:37:6a:45:80:b5:70:2e:8c:5d:f8:
                    bc:20:7a:5d:ec:bd:33:44:ab:4d:22:dc:e6:de:24:
                    5c:60:da:cb:9e:f2:17:95:1e:d8:e9:12:a9:87:4c:
                    c8:2b:da:e0:e6:39:66:43:57:e5:bc:5b:15:13:d0:
                    31:29:5f:94:f2:9e:2b:74:94:a3:45:c2:ac:c5:62:
                    0f:5f:52:d4:8e:c4:74:88:fe:62:e1:9b:5f:e9:30:
                    b4:a8:aa:99:f1:8f:f9:b2:75:ee:c7:88:ac:25:26:
                    55:d5:47:34:53:66:d8:1c:a8:55:ca:e4:a1:3c:8b:
                    8e:8c:c0:e4:04:e9:a6:e2:6f:8d:30:4a:8b:ee:83:
                    be:c7:b2:6c:2b:57:1e:a0:06:5a:db:32:ec:32:50:
                    bb:1c:b7:3f:ee:41:d6:fe:94:98:ff:31:98:27:ba:
                    81:dc:42:1d:a9:70:c2:4e:cc:ca:bc:fe:1f:2f:47:
                    83:6d:46:f4:91:42:68:18:9c:ba:15:cf:01:c2:41:
                    2a:8e:25:25:7e:18:60:0b:d6:00:35:48:a4:52:6a:
                    6d:2b:a6:11:0d:fb:a2:3c:72:3b:13:63:53:85:ab:
                    bc:63:57:26:85:39:9d:4d:37:da:c4:39:88:ea:ef:
                    06:a7:44:7f:08:98:35:5a:1b:45:14:c2:12:62:11:
                    5d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:B5:0E:0C:5F:A5:5C:B2:16:9B:0D:B6:16:62:CF:D7:BD:16:DF:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/91bf583c-a916-3bf5-8f86-520e92525169.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.156.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:f5:c5:d0:a1:3e:d9:81:ba:5a:91:a8:96:37:87:e9:cc:17:
         37:ac:e6:39:76:2b:6c:85:44:b8:80:14:66:5f:6d:be:e2:9b:
         3b:32:2d:72:30:15:b1:52:b7:c4:4f:c8:94:ed:63:e1:f9:23:
         21:d7:ab:d3:b1:c3:b0:77:4e:3e:02:45:82:04:75:77:c0:79:
         15:cd:ea:62:7d:cb:0e:6d:61:ae:b2:cb:58:d9:39:9a:3a:88:
         d8:12:24:ca:77:b0:32:88:21:17:61:fd:8e:45:42:ca:2f:5c:
         f6:16:e4:20:73:5d:2c:f9:68:e6:1a:79:e6:a6:91:50:fc:30:
         39:55:53:13:c6:24:89:11:46:58:03:60:4b:20:ed:e5:74:cf:
         80:3f:d6:f9:17:e6:5d:86:87:36:21:aa:5d:b1:da:3c:93:69:
         00:4e:3f:9a:66:d6:61:54:d0:94:31:bf:62:5c:06:8d:fa:5f:
         b2:2a:4d:4a:13:03:f0:ee:dd:69:71:dd:96:ec:a5:35:b4:b8:
         7e:b3:78:c1:ee:73:bc:e4:70:25:15:d3:2f:ac:4a:6e:4a:74:
         25:36:25:a1:2a:5c:08:15:dc:00:f1:a8:2d:3a:9a:f7:9f:59:
         99:2e:1a:b5:6b:32:f1:ea:f4:28:26:08:42:bb:69:c6:a9:43:
         da:d9:60:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4lPxyv/MstDUAGmwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDYxMjA5MDAxMVoXDTI2MDkxMDA5MDAxMVowLzEtMCsGA1UEAxMk
NDJlMGEwZGUtYmFmZC00NzE5LWI2YWQtOWQ5YjkyODE4ODk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4wpvDdqRYC1cC6MXfi8IHpd7L0zRKtNItzm
3iRcYNrLnvIXlR7Y6RKph0zIK9rg5jlmQ1flvFsVE9AxKV+U8p4rdJSjRcKsxWIP
X1LUjsR0iP5i4Ztf6TC0qKqZ8Y/5snXux4isJSZV1Uc0U2bYHKhVyuShPIuOjMDk
BOmm4m+NMEqL7oO+x7JsK1ceoAZa2zLsMlC7HLc/7kHW/pSY/zGYJ7qB3EIdqXDC
TszKvP4fL0eDbUb0kUJoGJy6Fc8BwkEqjiUlfhhgC9YANUikUmptK6YRDfuiPHI7
E2NThau8Y1cmhTmdTTfaxDmI6u8Gp0R/CJg1WhtFFMISYhFdXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKK1DgxfpVyyFpsNthZiz9e9Ft89MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOTFiZjU4M2MtYTkxNi0z
YmY1LThmODYtNTIwZTkyNTI1MTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJpxTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHv1xdChPtmBulqRqJY3h+nMFzes5jl2K2yFRLiAFGZfbb7imzsyLXIw
FbFSt8RPyJTtY+H5IyHXq9Oxw7B3Tj4CRYIEdXfAeRXN6mJ9yw5tYa6yy1jZOZo6
iNgSJMp3sDKIIRdh/Y5FQsovXPYW5CBzXSz5aOYaeeamkVD8MDlVUxPGJIkRRlgD
YEsg7eV0z4A/1vkX5l2GhzYhql2x2jyTaQBOP5pm1mFU0JQxv2JcBo36X7IqTUoT
A/Du3Wlx3ZbspTW0uH6zeMHuc7zkcCUV0y+sSm5KdCU2JaEqXAgV3ADxqC06mvef
WZkuGrVrMvHq9CgmCEK7acapQ9rZYLg=
-----END CERTIFICATE-----
Generated at Fri Jun 12 22:40:55 2026 by rpki-client