Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b2f0b086-79ec-3566-ac5e-971e2fe11986.roa
File:                     b2f0b086-79ec-3566-ac5e-971e2fe11986.roa (raw, json)
Hash identifier:          rT6Ix/kaDyUUihCvk9jFgiViTHTyFXkcpCNZa6Zu47M=
Subject key identifier:   80:10:2D:65:C4:63:F1:97:02:C6:58:E0:A4:DC:27:A2:AF:6D:DF:AC
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584EA794676534639E9424C8B670
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b2f0b086-79ec-3566-ac5e-971e2fe11986.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     215596
IP address blocks:        38.45.52.0/22 maxlen: 22
                          154.62.100.0/24 maxlen: 24
                          154.62.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:67:65:34:63:9e:94:24:c8:b6:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=1cbd7254-7c1a-406e-ad6f-dab8dd8d0104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:54:16:c3:99:92:95:e7:ad:0c:6c:84:a8:8d:
                    6b:60:ce:5e:ad:1c:6f:61:50:b6:0e:e6:6b:1b:c1:
                    df:8f:d7:b7:8a:ed:61:8b:2c:c3:ac:04:fc:2a:3b:
                    a6:92:98:52:6a:69:a3:3d:f2:87:c4:af:8a:b6:2e:
                    e2:21:b2:1b:b8:e3:99:85:d7:32:b0:e0:eb:78:ff:
                    dc:99:14:2f:f9:6f:42:34:8d:84:d6:2e:91:c5:25:
                    b2:e8:34:ee:44:d4:96:37:43:92:d2:42:7a:b3:21:
                    c9:5d:24:4b:86:34:9c:36:9d:09:33:be:e5:a9:e6:
                    34:da:f4:7a:06:0e:cf:dc:75:88:63:4d:0c:04:9e:
                    ec:4c:b9:18:cb:01:a1:1a:55:64:04:38:a8:1c:45:
                    b1:1e:f7:75:c9:a2:c8:86:1a:e6:38:1a:28:2f:94:
                    2c:e3:cc:fa:7a:09:14:8b:89:f8:ab:2c:ef:7e:af:
                    8e:d5:d8:22:1d:41:b3:74:4d:99:c2:fc:e4:3a:2b:
                    91:02:18:5c:6c:b1:fd:7d:5d:86:f3:44:60:7e:4c:
                    71:e7:91:15:a6:8b:04:97:cd:1b:59:38:6a:fa:67:
                    b8:fc:2c:f7:10:e3:f2:bc:a7:11:02:c9:a2:3c:e5:
                    3a:14:c5:8d:c6:be:a0:f0:70:23:99:5e:ee:fb:7e:
                    f5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:10:2D:65:C4:63:F1:97:02:C6:58:E0:A4:DC:27:A2:AF:6D:DF:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b2f0b086-79ec-3566-ac5e-971e2fe11986.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.45.52.0/22
                  154.62.100.0/24
                  154.62.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:7f:92:b0:58:ff:af:4a:82:ad:a5:94:cf:c6:4c:b8:d8:0d:
         8d:f0:67:b9:47:55:0c:09:cb:9f:aa:dc:31:df:df:ff:cd:ec:
         fd:57:e0:29:97:3f:87:57:35:23:e5:e4:ee:9d:b6:35:98:34:
         12:8a:5f:8f:8f:0c:71:52:b1:eb:20:3d:64:45:d1:5c:e1:e4:
         e2:62:52:7f:04:50:32:8d:a6:e8:7a:aa:f9:7c:5e:25:e0:42:
         af:25:a5:1a:6a:be:4a:57:ff:20:6c:92:93:83:fc:d5:ee:9c:
         78:6e:ab:92:89:a0:dd:70:21:1d:a8:7e:94:8c:7b:81:f1:eb:
         d1:2c:81:26:c8:22:cc:b4:8d:2d:92:62:ec:f2:1f:25:83:de:
         f0:53:f0:f3:77:32:c7:49:25:91:c2:97:e5:6e:2f:e0:ea:83:
         33:8b:a3:9b:bb:f3:af:16:1f:06:05:e0:77:b3:35:aa:df:9d:
         cf:ca:0b:e4:66:d0:59:b6:9b:2d:21:27:54:4c:f3:61:b3:c4:
         07:9c:39:6e:c4:a0:59:07:e7:7d:64:d1:38:e2:69:5f:7a:9e:
         6a:d6:1d:1a:33:dd:1e:4b:31:71:3e:00:1e:62:ef:fb:da:73:
         34:bf:ff:a1:1c:a8:3c:63:5e:64:ee:5a:1e:f2:a0:73:5b:31:
         ad:9a:0a:fb
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE6nlGdlNGOelCTItnAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MWNiZDcyNTQtN2MxYS00MDZlLWFkNmYtZGFiOGRkOGQwMTA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplQWw5mSleetDGyEqI1rYM5erRxvYVC2DuZr
G8Hfj9e3iu1hiyzDrAT8KjumkphSammjPfKHxK+Kti7iIbIbuOOZhdcysODreP/c
mRQv+W9CNI2E1i6RxSWy6DTuRNSWN0OS0kJ6syHJXSRLhjScNp0JM77lqeY02vR6
Bg7P3HWIY00MBJ7sTLkYywGhGlVkBDioHEWxHvd1yaLIhhrmOBooL5Qs48z6egkU
i4n4qyzvfq+O1dgiHUGzdE2ZwvzkOiuRAhhcbLH9fV2G80Rgfkxx55EVposEl80b
WThq+me4/Cz3EOPyvKcRAsmiPOU6FMWNxr6g8HAjmV7u+371UQIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFIAQLWXEY/GXAsZY4KTcJ6Kvbd+sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYjJmMGIwODYtNzllYy0z
NTY2LWFjNWUtOTcxZTJmZTExOTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCJi00AwQA
mj5kAwQCmj5wMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAMR/krBY/69Kgq2llM/GTLjYDY3wZ7lHVQwJy5+q
3DHf3//N7P1X4CmXP4dXNSPl5O6dtjWYNBKKX4+PDHFSsesgPWRF0Vzh5OJiUn8E
UDKNpuh6qvl8XiXgQq8lpRpqvkpX/yBskpOD/NXunHhuq5KJoN1wIR2ofpSMe4Hx
69EsgSbIIsy0jS2SYuzyHyWD3vBT8PN3MsdJJZHCl+VuL+DqgzOLo5u7868WHwYF
4HezNarfnc/KC+Rm0Fm2my0hJ1RM82GzxAecOW7EoFkH531k0TjiaV96nmrWHRoz
3R5LMXE+AB5i7/vaczS//6EcqDxjXmTuWh7yoHNbMa2aCvs=
-----END CERTIFICATE-----
Generated at Fri Sep 11 14:30:21 2026 by rpki-client