Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b612f597-0e10-33de-96de-d007b89575c1.roa
File:                     b612f597-0e10-33de-96de-d007b89575c1.roa (raw, json)
Hash identifier:          gLT51jVLh20zp4RbLZE1IbGpRwSdZj0na87n9byIWKo=
Subject key identifier:   4C:0B:C0:C1:D3:0B:3C:F3:D8:B2:E7:43:AA:8B:97:72:88:91:48:2B
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F0D6CE6A058EBEC2113223700
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b612f597-0e10-33de-96de-d007b89575c1.roa
Signing time:             Thu 03 Sep 2026 13:00:12 +0000
ROA not before:           Thu 03 Sep 2026 13:00:12 +0000
ROA not after:            Wed 02 Dec 2026 14:00:12 +0000
asID:                     11562
IP address blocks:        38.46.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0d:6c:e6:a0:58:eb:ec:21:13:22:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep  3 13:00:12 2026 GMT
            Not After : Dec  2 14:00:12 2026 GMT
        Subject: CN=67e0dbe2-3668-45ca-90df-95d68e127b9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ca:88:3d:82:5c:ce:1b:35:71:8a:6a:d1:9b:
                    ca:f3:f7:30:df:7b:10:4d:fc:06:76:97:f0:4c:d4:
                    01:29:74:6f:8d:10:a6:e8:21:ec:14:c1:5f:10:ef:
                    56:26:96:c8:35:23:e0:aa:a0:e4:c1:db:5d:59:5b:
                    92:76:5d:87:be:f3:6f:a7:53:33:94:88:4a:86:70:
                    8b:df:9c:e1:43:fb:aa:2d:0a:d8:3d:24:82:3d:98:
                    45:b3:03:db:33:8d:ee:67:c6:52:d9:ca:f6:15:86:
                    9d:ac:b2:84:c5:36:ca:c3:2e:71:e2:1f:6c:1b:11:
                    1c:93:48:72:f5:bc:9f:47:4a:98:4f:66:ca:c1:c7:
                    c0:45:d3:4b:01:f4:18:9a:61:23:d9:a2:67:b1:1a:
                    4a:6e:c0:16:09:0a:02:34:62:7d:4e:9d:0c:2a:a3:
                    da:05:12:71:59:1b:16:6e:14:6a:f3:7e:c1:33:c0:
                    f5:37:cc:de:6c:88:9b:cc:b0:2b:f0:b3:ab:3e:d0:
                    b9:1d:07:47:a4:ef:ee:ae:e2:25:6e:5e:ca:0f:23:
                    97:3d:18:71:01:86:ae:de:80:35:84:65:96:94:88:
                    f8:76:70:95:23:7f:09:5f:8d:20:1e:62:65:93:e7:
                    66:ff:47:14:1e:57:06:d6:a7:67:c1:4e:0b:63:f1:
                    5d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:0B:C0:C1:D3:0B:3C:F3:D8:B2:E7:43:AA:8B:97:72:88:91:48:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b612f597-0e10-33de-96de-d007b89575c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.46.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:9a:a6:05:d4:e1:3f:1e:1d:1b:e1:9e:eb:62:a9:47:a7:cc:
         34:22:1b:c0:ce:69:18:11:f8:39:d8:22:b4:55:a1:34:18:2d:
         2c:ec:43:18:0f:7a:72:87:82:fa:07:2b:fa:96:c3:60:26:60:
         f0:31:86:28:30:97:2e:ca:fa:30:11:61:01:77:c1:be:41:e4:
         f6:83:18:5a:72:fc:f4:9b:4f:e6:56:63:1b:e0:53:79:c1:25:
         fe:39:92:58:f0:51:59:29:9b:c8:a9:b3:d9:6d:05:70:a1:47:
         fa:c2:f8:7e:1c:cb:e8:03:39:93:98:4d:db:b4:41:20:57:02:
         86:93:ed:29:f6:77:3a:bf:04:c9:1b:c7:a8:2f:db:af:90:26:
         9e:bd:fe:07:94:1b:5c:07:bf:d9:2a:3e:73:b1:d4:81:aa:fd:
         e5:f0:72:7f:02:60:5b:d5:9d:50:e5:35:19:73:e9:bd:71:c3:
         2e:02:8a:cd:95:06:97:10:e7:5c:99:d5:97:18:9f:cb:87:d6:
         68:2f:3b:66:2f:ac:b7:80:2f:dd:08:84:d7:b9:0a:cf:49:8a:
         ea:73:1a:50:04:4d:15:7d:47:bf:fa:c9:33:75:2a:59:ec:8b:
         0d:fc:00:fc:b7:6a:18:34:06:ae:d0:54:66:63:73:92:b0:e2:
         ff:95:47:29
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbOagWOvsIRMiNwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk
NjdlMGRiZTItMzY2OC00NWNhLTkwZGYtOTVkNjhlMTI3YjllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38qIPYJczhs1cYpq0ZvK8/cw33sQTfwGdpfw
TNQBKXRvjRCm6CHsFMFfEO9WJpbINSPgqqDkwdtdWVuSdl2HvvNvp1MzlIhKhnCL
35zhQ/uqLQrYPSSCPZhFswPbM43uZ8ZS2cr2FYadrLKExTbKwy5x4h9sGxEck0hy
9byfR0qYT2bKwcfARdNLAfQYmmEj2aJnsRpKbsAWCQoCNGJ9Tp0MKqPaBRJxWRsW
bhRq837BM8D1N8zebIibzLAr8LOrPtC5HQdHpO/uruIlbl7KDyOXPRhxAYau3oA1
hGWWlIj4dnCVI38JX40gHmJlk+dm/0cUHlcG1qdnwU4LY/FdWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEwLwMHTCzzz2LLnQ6qLl3KIkUgrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYjYxMmY1OTctMGUxMC0z
M2RlLTk2ZGUtZDAwN2I4OTU3NWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJi6NMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADKapgXU4T8eHRvhnutiqUenzDQiG8DOaRgR+DnYIrRVoTQYLSzsQxgP
enKHgvoHK/qWw2AmYPAxhigwly7K+jARYQF3wb5B5PaDGFpy/PSbT+ZWYxvgU3nB
Jf45kljwUVkpm8ips9ltBXChR/rC+H4cy+gDOZOYTdu0QSBXAoaT7Sn2dzq/BMkb
x6gv26+QJp69/geUG1wHv9kqPnOx1IGq/eXwcn8CYFvVnVDlNRlz6b1xwy4Cis2V
BpcQ51yZ1ZcYn8uH1mgvO2YvrLeAL90IhNe5Cs9JiupzGlAETRV9R7/6yTN1Klns
iw38APy3ahg0Bq7QVGZjc5Kw4v+VRyk=
-----END CERTIFICATE-----
Generated at Fri Sep 11 14:32:12 2026 by rpki-client