Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bb817fb2-35a0-360b-8580-9765a03e269b.roa
File:                     bb817fb2-35a0-360b-8580-9765a03e269b.roa (raw, json)
Hash identifier:          uKJbmM2XGgsi9wBLTKAAMQGEpzSa6qQ5HFuAxAokZXk=
Subject key identifier:   06:EC:DC:40:04:E9:3E:B2:06:D2:E8:EB:4C:6C:6F:9B:26:02:55:AC
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584ED2C837708A1E0B876DA7F4C0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bb817fb2-35a0-360b-8580-9765a03e269b.roa
Signing time:             Thu 13 Aug 2026 12:51:41 +0000
ROA not before:           Thu 13 Aug 2026 12:51:41 +0000
ROA not after:            Wed 11 Nov 2026 13:51:41 +0000
asID:                     274955
IP address blocks:        38.183.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d2:c8:37:70:8a:1e:0b:87:6d:a7:f4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Aug 13 12:51:41 2026 GMT
            Not After : Nov 11 13:51:41 2026 GMT
        Subject: CN=abd689ba-553e-4c0a-a9d3-8b3a7441bc03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9a:1d:65:33:78:8d:38:ec:0d:5b:cf:c5:17:
                    bd:f1:cb:63:94:44:4f:33:a1:71:4d:86:a4:80:65:
                    9c:40:d6:7f:db:f0:89:92:20:84:28:f7:84:34:4e:
                    ba:72:09:ec:0b:1f:9f:e7:a2:d0:eb:24:af:43:d7:
                    69:a5:43:87:92:00:57:2b:d0:21:5f:3c:1b:38:b1:
                    a5:b3:b9:c1:4a:97:36:86:8c:aa:a4:7d:de:10:5a:
                    6c:0e:3a:1d:fe:02:98:41:8d:1d:5b:4e:f8:83:ed:
                    6f:e2:f6:6c:00:23:60:fa:bc:a1:8e:c9:3d:fc:f9:
                    33:99:6a:72:13:76:b3:d1:3a:db:0e:24:5d:96:0c:
                    45:d7:14:e3:69:69:b2:e7:15:8d:ca:ee:b4:72:6d:
                    1a:c2:39:8b:49:80:d3:7c:2c:d3:0b:16:3f:c6:a4:
                    b0:bd:d1:34:74:cd:9f:3e:ce:b4:7d:c7:a6:34:a1:
                    cb:81:40:7b:45:e9:86:88:12:b7:13:dd:65:e7:a1:
                    7c:da:af:13:da:16:cf:3a:70:98:71:a6:c5:63:59:
                    65:74:c4:d0:eb:ae:bb:c3:0e:1a:85:ff:56:43:ba:
                    51:74:f1:43:39:c9:39:04:1c:ec:56:f6:70:a9:09:
                    34:31:fe:5e:6b:d8:81:62:53:1a:3b:d1:c9:e6:46:
                    a8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:EC:DC:40:04:E9:3E:B2:06:D2:E8:EB:4C:6C:6F:9B:26:02:55:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bb817fb2-35a0-360b-8580-9765a03e269b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.183.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:09:95:98:9a:2c:b1:c2:cc:6b:80:cf:43:34:64:b1:18:f9:
         d1:bc:07:85:34:df:60:67:3a:6b:f1:d5:92:68:f9:2f:b3:9b:
         8c:d9:5c:5a:71:e2:99:c6:d6:d3:e1:34:86:eb:ed:44:a6:d0:
         31:c7:63:4e:d1:a8:9c:2e:12:eb:dd:eb:84:31:b2:4c:86:85:
         72:de:a0:91:b3:59:ff:8d:f3:ae:b2:da:28:4c:91:2f:dc:b9:
         0a:69:cd:7d:be:05:8e:89:a1:fa:60:2c:a6:8d:23:33:b0:41:
         98:e6:8a:c6:a6:fc:73:ab:42:67:96:47:49:be:27:9b:b1:3c:
         58:53:82:0a:2f:d6:54:ee:0b:c0:ae:49:b3:c2:b6:86:e3:37:
         6e:9a:72:7b:70:bd:3e:bd:f4:a2:b8:b7:67:1c:1b:a9:cc:b2:
         16:9b:9c:2c:b1:db:cc:08:0f:4b:76:0e:e1:b9:e6:14:9d:ec:
         f7:f1:8c:aa:a1:eb:0d:09:95:28:77:3e:9e:ec:9d:97:3b:32:
         1b:33:b7:a6:35:76:6f:3e:5b:d0:13:37:0d:c1:f3:73:b4:ae:
         ea:dd:b5:93:5d:d3:a0:cf:5b:01:cf:7f:7d:60:fb:9d:eb:f7:
         21:f4:7b:97:ba:80:88:f1:a2:b1:0c:88:82:cd:b4:75:aa:26:
         13:e8:10:aa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7SyDdwih4Lh22n9MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDgxMzEyNTE0MVoXDTI2MTExMTEzNTE0MVowLzEtMCsGA1UEAxMk
YWJkNjg5YmEtNTUzZS00YzBhLWE5ZDMtOGIzYTc0NDFiYzAzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZodZTN4jTjsDVvPxRe98ctjlERPM6FxTYak
gGWcQNZ/2/CJkiCEKPeENE66cgnsCx+f56LQ6ySvQ9dppUOHkgBXK9AhXzwbOLGl
s7nBSpc2hoyqpH3eEFpsDjod/gKYQY0dW074g+1v4vZsACNg+ryhjsk9/PkzmWpy
E3az0TrbDiRdlgxF1xTjaWmy5xWNyu60cm0awjmLSYDTfCzTCxY/xqSwvdE0dM2f
Ps60fcemNKHLgUB7RemGiBK3E91l56F82q8T2hbPOnCYcabFY1lldMTQ6667ww4a
hf9WQ7pRdPFDOck5BBzsVvZwqQk0Mf5ea9iBYlMaO9HJ5kaoXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAbs3EAE6T6yBtLo60xsb5smAlWsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYmI4MTdmYjItMzVhMC0z
NjBiLTg1ODAtOTc2NWEwM2UyNjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJrfIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEUJlZiaLLHCzGuAz0M0ZLEY+dG8B4U032BnOmvx1ZJo+S+zm4zZXFpx
4pnG1tPhNIbr7USm0DHHY07RqJwuEuvd64QxskyGhXLeoJGzWf+N866y2ihMkS/c
uQppzX2+BY6JofpgLKaNIzOwQZjmisam/HOrQmeWR0m+J5uxPFhTggov1lTuC8Cu
SbPCtobjN26acntwvT699KK4t2ccG6nMshabnCyx28wID0t2DuG55hSd7PfxjKqh
6w0JlSh3Pp7snZc7Mhszt6Y1dm8+W9ATNw3B83O0rurdtZNd06DPWwHPf31g+53r
9yH0e5e6gIjxorEMiILNtHWqJhPoEKo=
-----END CERTIFICATE-----
Generated at Fri Sep 11 13:46:41 2026 by rpki-client