Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ba24c616-ea26-3fca-92d3-86f09ef5760d.roa
File:                     ba24c616-ea26-3fca-92d3-86f09ef5760d.roa (raw, json)
Hash identifier:          D9Mre+SyH6iEE5CjKqyWT+IqQO/LRkDKuPBRsK9o6xU=
Subject key identifier:   5F:0A:5D:78:A1:ED:E1:3C:D2:AC:55:34:19:D9:9C:A5:F2:1A:81:F0
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E22744A1512B5D3D72E4CE480
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ba24c616-ea26-3fca-92d3-86f09ef5760d.roa
Signing time:             Thu 11 Jun 2026 09:00:12 +0000
ROA not before:           Thu 11 Jun 2026 09:00:12 +0000
ROA not after:            Wed 09 Sep 2026 09:00:12 +0000
asID:                     137816
IP address blocks:        38.71.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:22:74:4a:15:12:b5:d3:d7:2e:4c:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jun 11 09:00:12 2026 GMT
            Not After : Sep  9 09:00:12 2026 GMT
        Subject: CN=13435b92-d003-468d-b0b3-095e74364d85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:42:ba:d5:8e:c2:a3:42:02:6d:c3:ca:86:e0:
                    21:5a:1f:50:13:ac:5d:6a:ea:fe:e3:1f:ff:23:29:
                    3b:b3:6b:62:5a:f1:ee:d7:1b:1f:fe:13:ce:8c:c4:
                    66:ba:69:35:a3:7a:46:c6:a3:38:3c:bc:09:53:5d:
                    95:78:54:f9:ee:9b:50:14:01:fc:23:e7:3f:ee:47:
                    7d:65:88:4b:2b:87:b7:6e:51:66:f0:6d:20:63:f2:
                    06:d1:3f:3f:bb:c4:7b:71:e6:c8:c0:ba:8d:5f:9b:
                    88:0e:58:22:91:01:d5:16:b6:53:c1:f3:d1:62:54:
                    61:1c:14:62:e2:81:a2:dc:2b:c2:82:96:0e:02:76:
                    e7:33:41:31:db:0a:9c:9f:a7:6c:d6:2b:5f:24:ff:
                    22:51:72:65:cc:b7:1b:6a:ad:94:76:c8:d8:e0:c5:
                    be:a6:61:c4:74:1b:31:2b:c1:b5:df:7b:40:ec:60:
                    5a:49:02:64:c2:3e:3a:cc:97:6a:80:b8:f3:04:7f:
                    8b:58:46:b4:ad:a8:ec:6a:b2:92:fb:7d:c0:35:0e:
                    79:35:1b:5a:ca:98:0f:05:ad:80:55:8d:a7:f9:a3:
                    f0:02:ff:3a:33:22:45:cc:6b:60:d2:d1:fa:82:a6:
                    66:e6:71:bd:3b:a5:94:05:ee:ec:ce:23:64:ff:90:
                    3b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:0A:5D:78:A1:ED:E1:3C:D2:AC:55:34:19:D9:9C:A5:F2:1A:81:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ba24c616-ea26-3fca-92d3-86f09ef5760d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.71.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:ab:91:ac:5d:23:ba:47:a5:20:ab:e0:ca:af:c6:be:ff:4e:
         8e:c7:d8:20:b9:d5:08:00:f9:13:2e:76:37:af:b9:17:b3:6d:
         42:b6:80:8b:e7:2b:6f:05:06:7a:ac:70:78:81:7e:a5:7f:a1:
         01:ab:3e:78:07:72:89:71:21:62:08:e7:50:22:3f:e6:d5:9c:
         2c:9b:39:ab:b0:d3:04:46:48:e8:09:2a:c5:3b:9c:dd:4c:44:
         75:10:8e:fe:c9:70:eb:35:ba:7f:a1:20:46:50:0e:ef:ce:4b:
         83:18:61:1b:6c:a8:d2:6f:a0:36:91:f6:1c:17:a5:f9:8f:23:
         52:2b:a4:49:72:b3:ca:54:5a:bd:65:91:51:46:fc:d0:ef:54:
         24:a3:77:da:69:b6:c5:8c:2b:9d:69:08:f4:99:5b:c4:6a:6b:
         b9:1f:3e:3c:1d:a4:f0:f8:a2:58:d8:e5:14:c6:0e:ac:00:b0:
         18:cd:94:86:53:fb:22:8f:11:13:7a:a0:7f:72:8c:cd:a8:6c:
         7b:e8:af:a5:44:61:05:06:52:cc:55:cf:0d:65:b5:04:d1:31:
         fd:de:a9:ca:d4:df:a0:c7:e9:16:a1:32:e6:40:80:35:f3:d6:
         f3:52:23:65:e7:fe:c0:46:c0:d4:7c:72:3a:e8:04:c5:f9:a9:
         8f:c1:02:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4idEoVErXT1y5M5IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDYxMTA5MDAxMloXDTI2MDkwOTA5MDAxMlowLzEtMCsGA1UEAxMk
MTM0MzViOTItZDAwMy00NjhkLWIwYjMtMDk1ZTc0MzY0ZDg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUK61Y7Co0ICbcPKhuAhWh9QE6xdaur+4x//
Iyk7s2tiWvHu1xsf/hPOjMRmumk1o3pGxqM4PLwJU12VeFT57ptQFAH8I+c/7kd9
ZYhLK4e3blFm8G0gY/IG0T8/u8R7cebIwLqNX5uIDlgikQHVFrZTwfPRYlRhHBRi
4oGi3CvCgpYOAnbnM0Ex2wqcn6ds1itfJP8iUXJlzLcbaq2UdsjY4MW+pmHEdBsx
K8G133tA7GBaSQJkwj46zJdqgLjzBH+LWEa0rajsarKS+33ANQ55NRtaypgPBa2A
VY2n+aPwAv86MyJFzGtg0tH6gqZm5nG9O6WUBe7sziNk/5A7AwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF8KXXih7eE80qxVNBnZnKXyGoHwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYmEyNGM2MTYtZWEyNi0z
ZmNhLTkyZDMtODZmMDllZjU3NjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJkcvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKWrkaxdI7pHpSCr4Mqvxr7/To7H2CC51QgA+RMudjevuRezbUK2gIvn
K28FBnqscHiBfqV/oQGrPngHcolxIWII51AiP+bVnCybOauw0wRGSOgJKsU7nN1M
RHUQjv7JcOs1un+hIEZQDu/OS4MYYRtsqNJvoDaR9hwXpfmPI1IrpElys8pUWr1l
kVFG/NDvVCSjd9pptsWMK51pCPSZW8Rqa7kfPjwdpPD4oljY5RTGDqwAsBjNlIZT
+yKPERN6oH9yjM2obHvor6VEYQUGUsxVzw1ltQTRMf3eqcrU36DH6RahMuZAgDXz
1vNSI2Xn/sBGwNR8cjroBMX5qY/BAtI=
-----END CERTIFICATE-----
Generated at Fri Jun 12 22:36:36 2026 by rpki-client