Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c1aa13f0-7551-36d3-bf51-5563f7c911fd.roa
File:                     c1aa13f0-7551-36d3-bf51-5563f7c911fd.roa (raw, json)
Hash identifier:          wqIvTtSPFKLZBvol08GcxG2HChgTmggQqJFk6LC2Zdc=
Subject key identifier:   5F:DE:3B:7E:6C:4E:82:72:8B:D5:BF:C8:49:09:26:16:C7:01:23:3B
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E5E7A01D119E095605D422880
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c1aa13f0-7551-36d3-bf51-5563f7c911fd.roa
Signing time:             Thu 02 Jul 2026 21:00:12 +0000
ROA not before:           Thu 02 Jul 2026 21:00:12 +0000
ROA not after:            Wed 30 Sep 2026 21:00:12 +0000
asID:                     152644
IP address blocks:        38.99.243.0/24 maxlen: 24
                          154.3.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5e:7a:01:d1:19:e0:95:60:5d:42:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jul  2 21:00:12 2026 GMT
            Not After : Sep 30 21:00:12 2026 GMT
        Subject: CN=905f882f-7cca-4676-b16a-698da68a4db5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c6:9d:0b:27:38:ca:af:17:80:20:35:25:d9:
                    c1:1c:a4:08:0a:06:7f:e3:95:15:3e:e9:11:40:7d:
                    f4:30:69:7d:84:42:bb:88:20:50:1c:4e:77:d3:c6:
                    b5:de:06:f3:89:6e:04:b1:5f:1d:c3:57:28:8e:1c:
                    e6:3d:12:f4:a7:f6:4c:b5:54:d6:51:27:3f:76:44:
                    fd:7d:1f:05:c1:22:c1:9d:77:33:0f:39:1d:31:a1:
                    0f:59:40:be:b1:1f:73:94:8a:d9:e6:35:5a:3d:75:
                    a5:48:06:b3:c4:b7:17:58:94:72:5c:dc:aa:6b:7e:
                    67:75:b1:21:da:d2:85:c0:9b:8b:e1:a8:3c:2c:ad:
                    c0:35:87:20:04:69:15:23:15:cf:a7:57:25:50:d2:
                    93:28:93:8a:1a:a5:85:6d:d8:d7:5a:3a:f4:86:fc:
                    0d:6e:07:2f:3e:df:a6:03:93:00:bd:7a:fc:c6:62:
                    86:a5:4d:aa:a9:34:94:ec:07:f9:a8:6d:94:c6:b3:
                    16:d9:a6:a0:7c:47:58:3f:30:7a:6f:1f:56:9e:3d:
                    11:11:19:44:f2:4d:5f:e1:74:5b:88:dd:ae:a8:ba:
                    e6:6c:08:5c:45:6c:e0:87:e4:38:ba:0d:a2:a3:43:
                    7c:cc:aa:8e:df:f1:c6:39:3a:97:37:f8:b8:21:c6:
                    e8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:DE:3B:7E:6C:4E:82:72:8B:D5:BF:C8:49:09:26:16:C7:01:23:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c1aa13f0-7551-36d3-bf51-5563f7c911fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.99.243.0/24
                  154.3.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:d7:d5:c8:64:6d:55:4b:43:8e:22:d4:c3:a2:09:2c:b4:2e:
         fd:68:b8:39:c5:b1:10:39:63:32:e4:c1:24:4d:a3:e2:b3:7d:
         8f:4f:c7:53:4c:4a:f0:f6:eb:d2:d2:ac:d0:a3:b1:0b:d8:76:
         de:0c:73:a8:87:63:01:36:4f:7e:74:76:92:ad:59:5c:7a:fd:
         f0:19:19:a9:b9:1a:1b:24:86:57:9c:3c:b1:4e:5c:ba:2e:16:
         13:2a:58:e7:86:53:e6:27:e2:eb:b4:d3:23:6e:67:58:df:b1:
         a5:65:19:ab:b5:f6:35:d6:7b:b6:7b:26:fc:40:9f:4b:99:c4:
         8e:61:72:f9:74:e0:4a:53:a2:a6:92:69:63:b8:ed:79:db:9c:
         40:94:d2:32:d7:45:6b:e5:47:d7:07:76:cf:4e:40:cd:99:78:
         b3:b1:ac:5b:a8:fb:d0:11:46:24:2c:70:90:d3:30:a2:c0:53:
         0f:81:d0:d6:8c:d5:88:d4:fe:fe:11:b6:ec:46:fa:2d:b7:8b:
         a7:02:2b:67:1b:ed:55:f5:05:96:35:68:67:1d:f3:68:5c:d0:
         44:90:72:c3:45:e6:f3:3a:03:37:bc:67:81:a0:47:b8:c1:bb:
         09:70:83:32:6c:40:eb:b5:d9:c9:49:94:17:16:d0:cc:ce:6d:
         85:30:1b:1b
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE5eegHRGeCVYF1CKIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDcwMjIxMDAxMloXDTI2MDkzMDIxMDAxMlowLzEtMCsGA1UEAxMk
OTA1Zjg4MmYtN2NjYS00Njc2LWIxNmEtNjk4ZGE2OGE0ZGI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMadCyc4yq8XgCA1JdnBHKQICgZ/45UVPukR
QH30MGl9hEK7iCBQHE5308a13gbziW4EsV8dw1cojhzmPRL0p/ZMtVTWUSc/dkT9
fR8FwSLBnXczDzkdMaEPWUC+sR9zlIrZ5jVaPXWlSAazxLcXWJRyXNyqa35ndbEh
2tKFwJuL4ag8LK3ANYcgBGkVIxXPp1clUNKTKJOKGqWFbdjXWjr0hvwNbgcvPt+m
A5MAvXr8xmKGpU2qqTSU7Af5qG2UxrMW2aagfEdYPzB6bx9Wnj0RERlE8k1f4XRb
iN2uqLrmbAhcRWzgh+Q4ug2io0N8zKqO3/HGOTqXN/i4Icbo4QIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFF/eO35sToJyi9W/yEkJJhbHASM7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYzFhYTEzZjAtNzU1MS0z
NmQzLWJmNTEtNTU2M2Y3YzkxMWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJmPzAwQA
mgOpMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAILX1chkbVVLQ44i1MOiCSy0Lv1ouDnFsRA5YzLkwSRNo+Kz
fY9Px1NMSvD269LSrNCjsQvYdt4Mc6iHYwE2T350dpKtWVx6/fAZGam5Ghskhlec
PLFOXLouFhMqWOeGU+Yn4uu00yNuZ1jfsaVlGau19jXWe7Z7JvxAn0uZxI5hcvl0
4EpToqaSaWO47XnbnECU0jLXRWvlR9cHds9OQM2ZeLOxrFuo+9ARRiQscJDTMKLA
Uw+B0NaM1YjU/v4RtuxG+i23i6cCK2cb7VX1BZY1aGcd82hc0ESQcsNF5vM6Aze8
Z4GgR7jBuwlwgzJsQOu12clJlBcW0MzObYUwGxs=
-----END CERTIFICATE-----
Generated at Thu Jul 23 06:41:40 2026 by rpki-client