Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9b1bf2b4-1a5b-3601-bb5c-50510a75436b.roa
File:                     9b1bf2b4-1a5b-3601-bb5c-50510a75436b.roa (raw, json)
Hash identifier:          TGWdSXvbCJo2QTawV3pHDkBWubfp5NseXrfSaeLbaHE=
Subject key identifier:   4F:BE:8B:05:36:84:45:B5:F0:90:09:A3:45:F7:18:B1:48:E6:2A:82
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584EE22749AFCDB6101DD746E3C0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9b1bf2b4-1a5b-3601-bb5c-50510a75436b.roa
Signing time:             Wed 19 Aug 2026 01:00:12 +0000
ROA not before:           Wed 19 Aug 2026 01:00:12 +0000
ROA not after:            Tue 17 Nov 2026 02:00:12 +0000
asID:                     56902
IP address blocks:        38.51.51.0/24 maxlen: 24
                          206.62.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e2:27:49:af:cd:b6:10:1d:d7:46:e3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Aug 19 01:00:12 2026 GMT
            Not After : Nov 17 02:00:12 2026 GMT
        Subject: CN=ee9c5836-c118-425e-a747-3a5ba9ad8472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:47:62:81:e6:03:fb:ae:ad:1e:41:69:7f:12:
                    4e:32:fb:b3:59:8d:e9:08:c4:b5:c2:b4:a6:ce:dc:
                    74:68:03:f2:4a:9d:48:a8:4a:45:ff:d4:dd:87:8f:
                    51:85:0a:22:36:f3:86:c4:00:fa:1c:42:95:2d:2b:
                    a7:f8:5a:aa:30:1e:44:93:1b:1f:1a:d0:b1:16:b9:
                    a9:82:b1:08:fd:7d:72:ab:2b:76:4c:08:9f:fe:10:
                    1a:13:80:94:0e:67:6e:21:66:d8:fc:bc:51:a8:30:
                    76:8b:b7:a8:86:2e:c2:d5:b3:61:c2:c1:33:55:db:
                    f6:cc:db:93:85:1e:00:73:1f:56:40:14:e8:c7:58:
                    bc:fb:39:c9:f0:fb:82:7e:14:71:70:96:ad:93:a7:
                    c3:aa:23:4c:66:70:d5:8a:59:12:e3:6c:6c:d0:56:
                    d3:fa:7d:28:26:99:73:ab:1f:66:a8:de:1c:94:77:
                    b8:b1:29:78:3e:61:7f:c9:c5:da:50:bf:64:36:1e:
                    69:09:36:25:7a:83:61:7d:67:02:25:ba:e5:79:8a:
                    84:61:8c:cb:c5:d8:ee:65:61:d9:f3:44:4c:34:3c:
                    7e:ec:91:e2:15:56:05:47:d3:e3:65:c0:7e:9a:46:
                    c5:5c:47:4d:22:8e:f2:af:7f:31:ef:1a:e2:bc:09:
                    53:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:BE:8B:05:36:84:45:B5:F0:90:09:A3:45:F7:18:B1:48:E6:2A:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9b1bf2b4-1a5b-3601-bb5c-50510a75436b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.51.51.0/24
                  206.62.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:f7:2b:5f:56:b8:fc:3b:bf:b2:e8:75:c6:7d:a6:b4:61:77:
         5f:35:0f:6b:c9:3f:2c:40:a3:f4:d7:e6:9d:7f:43:23:15:54:
         74:7b:cf:45:a7:78:c0:dd:cf:82:03:9e:07:39:d5:9b:e8:55:
         11:f5:a1:5d:2d:20:72:42:0d:8b:a2:09:04:f5:24:82:2a:87:
         d5:e4:c7:71:36:cb:29:78:39:e7:85:45:72:3d:04:71:79:30:
         98:90:30:e6:74:2e:cb:5e:41:f4:1d:3a:29:e2:c1:58:86:45:
         f5:ab:5c:ac:2d:dc:50:60:54:8e:1d:5a:34:f7:ca:20:cd:00:
         91:17:c1:c3:ea:4e:3d:bd:af:aa:f8:36:fc:6b:da:3d:69:0c:
         86:01:24:b7:1c:b2:79:29:49:ee:00:ad:89:b4:e3:68:da:73:
         c3:1f:9b:65:07:79:00:7f:7f:0f:88:86:d7:27:97:61:ad:90:
         70:48:d5:2a:c1:d7:62:63:54:ae:8d:d5:3b:cd:aa:fb:f3:97:
         ce:ea:2f:9b:6f:3b:fd:fd:59:8d:59:bb:c6:1a:e7:54:46:68:
         a6:5d:d1:d9:89:06:c7:d8:73:67:ce:9d:e2:05:d4:7e:c8:7f:
         82:5f:0e:f9:80:00:fc:2c:12:97:bb:af:99:6d:d0:bd:13:f4:
         dd:fd:2b:0f
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE7iJ0mvzbYQHddG48AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDgxOTAxMDAxMloXDTI2MTExNzAyMDAxMlowLzEtMCsGA1UEAxMk
ZWU5YzU4MzYtYzExOC00MjVlLWE3NDctM2E1YmE5YWQ4NDcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0digeYD+66tHkFpfxJOMvuzWY3pCMS1wrSm
ztx0aAPySp1IqEpF/9Tdh49RhQoiNvOGxAD6HEKVLSun+FqqMB5EkxsfGtCxFrmp
grEI/X1yqyt2TAif/hAaE4CUDmduIWbY/LxRqDB2i7eohi7C1bNhwsEzVdv2zNuT
hR4Acx9WQBTox1i8+znJ8PuCfhRxcJatk6fDqiNMZnDVilkS42xs0FbT+n0oJplz
qx9mqN4clHe4sSl4PmF/ycXaUL9kNh5pCTYleoNhfWcCJbrleYqEYYzLxdjuZWHZ
80RMNDx+7JHiFVYFR9PjZcB+mkbFXEdNIo7yr38x7xrivAlTOQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFE++iwU2hEW18JAJo0X3GLFI5iqCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOWIxYmYyYjQtMWE1Yi0z
NjAxLWJiNWMtNTA1MTBhNzU0MzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJjMzAwQC
zj4wMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAB33K19WuPw7v7LodcZ9prRhd181D2vJPyxAo/TX5p1/QyMV
VHR7z0WneMDdz4IDngc51ZvoVRH1oV0tIHJCDYuiCQT1JIIqh9Xkx3E2yyl4OeeF
RXI9BHF5MJiQMOZ0LsteQfQdOiniwViGRfWrXKwt3FBgVI4dWjT3yiDNAJEXwcPq
Tj29r6r4Nvxr2j1pDIYBJLccsnkpSe4ArYm042jac8Mfm2UHeQB/fw+Ihtcnl2Gt
kHBI1SrB12JjVK6N1TvNqvvzl87qL5tvO/39WY1Zu8Ya51RGaKZd0dmJBsfYc2fO
neIF1H7If4JfDvmAAPwsEpe7r5lt0L0T9N39Kw8=
-----END CERTIFICATE-----
Generated at Fri Sep 11 03:14:27 2026 by rpki-client