Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a434041a-d7ad-300a-b921-55b5c3b621b4.roa
File:                     a434041a-d7ad-300a-b921-55b5c3b621b4.roa (raw, json)
Hash identifier:          GrvejnD5++HMMAAM9uivIeEcpwHdY6PfoOfE0a2mmXE=
Subject key identifier:   C9:7D:DB:C5:65:7C:49:3E:5A:4B:01:F5:44:20:A8:73:58:74:30:AC
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F1E2CF7D75A797037439D1340
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a434041a-d7ad-300a-b921-55b5c3b621b4.roa
Signing time:             Wed 09 Sep 2026 13:00:11 +0000
ROA not before:           Wed 09 Sep 2026 13:00:11 +0000
ROA not after:            Tue 08 Dec 2026 14:00:11 +0000
asID:                     262433
IP address blocks:        38.236.92.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1e:2c:f7:d7:5a:79:70:37:43:9d:13:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep  9 13:00:11 2026 GMT
            Not After : Dec  8 14:00:11 2026 GMT
        Subject: CN=d4c2ec82-9714-4670-ab7e-f52681b698b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7b:1f:e6:4f:cf:9b:ba:0c:c0:8e:5d:89:4d:
                    11:8d:12:dd:ee:36:c7:2d:7b:60:9d:88:00:24:57:
                    d3:79:f9:e9:3b:41:02:2a:3a:6b:87:d8:55:50:04:
                    5e:78:9d:d2:03:da:c8:33:a9:35:30:8f:bd:c6:d5:
                    ea:38:20:df:bd:71:50:2a:33:ac:63:5e:c9:93:14:
                    b2:2c:0a:d9:24:f3:8f:34:6e:dd:d9:4c:49:69:ff:
                    31:ef:c2:30:34:c6:46:c5:6a:2a:58:32:13:74:de:
                    64:7d:e5:86:0b:a4:31:8f:bd:e3:54:51:12:53:8f:
                    93:fd:04:eb:3e:41:77:40:43:c0:32:f3:7d:a1:59:
                    ef:8a:66:5a:dc:65:c9:52:7a:7f:49:b0:15:12:6f:
                    59:56:7e:82:39:47:3c:f1:04:87:cf:4a:8c:19:4e:
                    63:35:d9:17:2c:33:78:0f:e1:21:27:f8:9a:6e:d0:
                    1f:76:a7:17:3a:90:9b:b5:70:15:8e:5a:a2:e1:45:
                    0e:a1:99:ec:23:e5:21:cc:ad:fb:9b:94:b7:dd:2d:
                    c1:c9:4d:82:d0:82:94:e4:f7:b2:fe:7c:25:ae:8f:
                    ea:91:d5:2c:01:37:8c:ed:b4:8c:ce:46:b5:c2:4e:
                    ae:89:bb:5e:2f:10:90:19:96:63:38:0b:8d:0d:64:
                    18:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:7D:DB:C5:65:7C:49:3E:5A:4B:01:F5:44:20:A8:73:58:74:30:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a434041a-d7ad-300a-b921-55b5c3b621b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.236.92.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:47:b0:bc:0b:bc:64:7c:79:f4:b6:10:4d:ad:d3:fb:2f:73:
         17:e9:b9:99:42:a7:0b:e7:48:e7:d3:5d:4c:28:2e:10:fd:0a:
         fc:11:54:ae:3a:2e:4e:3a:74:03:cb:07:1b:4d:87:d2:38:8a:
         69:d4:1a:e7:9e:cc:fc:7d:b5:a1:6f:33:c9:15:8a:04:9f:b9:
         3e:8d:bc:4c:e1:35:14:36:4e:ea:a9:fd:97:fe:59:70:a8:5a:
         db:37:a8:66:81:b8:14:a7:db:cb:29:6a:78:d0:28:36:79:e3:
         87:93:bf:93:ce:ed:df:af:bc:10:ee:e7:ec:99:88:ef:9a:c7:
         c2:8b:ea:a7:16:82:b5:ae:5b:a1:c5:d4:03:bd:9b:a6:f9:bf:
         49:6d:0f:e1:7b:07:86:08:7b:86:7d:2b:13:6a:ba:29:63:43:
         77:a0:8e:af:93:fa:0b:b2:58:d9:13:ac:66:d7:fd:05:e6:e4:
         c4:1e:09:5b:a6:aa:64:e1:9d:6c:5c:72:e5:97:17:30:4f:3c:
         fa:35:f2:34:38:63:b8:a7:81:c8:4d:ce:4d:a3:79:60:68:2f:
         58:0c:33:bf:87:4d:85:e3:cd:0e:0a:bf:15:ba:91:e9:13:92:
         7f:cf:b3:67:c0:2b:4d:da:c7:4e:2a:2b:dc:e5:44:a9:89:e0:
         dc:a5:dc:9e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8eLPfXWnlwN0OdE0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDkwOTEzMDAxMVoXDTI2MTIwODE0MDAxMVowLzEtMCsGA1UEAxMk
ZDRjMmVjODItOTcxNC00NjcwLWFiN2UtZjUyNjgxYjY5OGI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXsf5k/Pm7oMwI5diU0RjRLd7jbHLXtgnYgA
JFfTefnpO0ECKjprh9hVUAReeJ3SA9rIM6k1MI+9xtXqOCDfvXFQKjOsY17JkxSy
LArZJPOPNG7d2UxJaf8x78IwNMZGxWoqWDITdN5kfeWGC6Qxj73jVFESU4+T/QTr
PkF3QEPAMvN9oVnvimZa3GXJUnp/SbAVEm9ZVn6COUc88QSHz0qMGU5jNdkXLDN4
D+EhJ/iabtAfdqcXOpCbtXAVjlqi4UUOoZnsI+UhzK37m5S33S3ByU2C0IKU5Pey
/nwlro/qkdUsATeM7bSMzka1wk6uibteLxCQGZZjOAuNDWQYzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMl928VlfEk+WksB9UQgqHNYdDCsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYTQzNDA0MWEtZDdhZC0z
MDBhLWI5MjEtNTViNWMzYjYyMWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJuxcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFJHsLwLvGR8efS2EE2t0/svcxfpuZlCpwvnSOfTXUwoLhD9CvwRVK46
Lk46dAPLBxtNh9I4imnUGueezPx9taFvM8kVigSfuT6NvEzhNRQ2Tuqp/Zf+WXCo
Wts3qGaBuBSn28spanjQKDZ544eTv5PO7d+vvBDu5+yZiO+ax8KL6qcWgrWuW6HF
1AO9m6b5v0ltD+F7B4YIe4Z9KxNquiljQ3egjq+T+guyWNkTrGbX/QXm5MQeCVum
qmThnWxccuWXFzBPPPo18jQ4Y7ingchNzk2jeWBoL1gMM7+HTYXjzQ4KvxW6kekT
kn/Ps2fAK03ax04qK9zlRKmJ4Nyl3J4=
-----END CERTIFICATE-----
Generated at Fri Sep 11 14:32:13 2026 by rpki-client