Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e0b288e4-b9f7-320c-b7e6-03b11911704c.roa
File:                     e0b288e4-b9f7-320c-b7e6-03b11911704c.roa (raw, json)
Hash identifier:          YJOlkfwBQdk/Nzh/AHhUZUj1BQRSbh29v8fJrNr5ZdE=
Subject key identifier:   D7:32:0B:B5:68:CD:B8:B7:72:F1:22:F2:3A:CE:85:62:87:CA:15:39
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E2EDB1F14C302A690E0B49280
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e0b288e4-b9f7-320c-b7e6-03b11911704c.roa
Signing time:             Mon 15 Jun 2026 19:37:12 +0000
ROA not before:           Mon 15 Jun 2026 19:37:12 +0000
ROA not after:            Sun 13 Sep 2026 19:37:12 +0000
asID:                     0
IP address blocks:        38.148.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2e:db:1f:14:c3:02:a6:90:e0:b4:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jun 15 19:37:12 2026 GMT
            Not After : Sep 13 19:37:12 2026 GMT
        Subject: CN=f25d22d7-cb64-4bcc-99a8-277e8b6fe8ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:fc:84:83:03:ed:70:bd:83:34:f3:0d:55:e8:
                    e7:e1:d2:26:9a:16:2f:bb:de:d5:d5:c4:e8:b3:f2:
                    38:fd:90:c7:02:7b:20:f7:71:8e:d1:ac:76:24:ef:
                    91:ca:48:01:25:ba:1a:25:d9:6c:4e:97:59:87:9f:
                    39:6d:3d:2f:b3:0f:5e:92:90:22:78:a1:f8:bf:fb:
                    6a:32:03:33:70:8a:5d:ce:10:41:d5:a5:56:c4:d3:
                    9d:ff:13:ce:58:4f:9b:46:40:a3:24:c7:43:48:18:
                    77:f4:a4:8c:20:7a:62:28:1d:55:eb:18:18:fd:3c:
                    60:42:49:a7:3e:9b:f4:cd:67:6c:c0:01:b7:74:cd:
                    c9:26:b4:7d:00:7b:5b:0d:7b:ae:16:94:48:d2:a3:
                    45:fa:d2:ed:58:1e:76:e5:29:7f:67:98:be:8d:b4:
                    2b:de:79:2d:79:f1:82:77:e0:48:1b:08:72:93:74:
                    6e:02:70:90:7a:f2:6b:9d:f5:3f:48:94:93:60:21:
                    6e:f7:1a:23:53:5b:5a:30:50:94:b2:db:c1:ea:65:
                    dc:f7:5b:c4:86:d5:5c:1b:7d:69:2b:48:0e:23:29:
                    c2:a9:b1:c3:54:31:35:54:18:3a:fc:91:03:d8:80:
                    df:eb:d1:11:4d:b7:bc:32:b7:e2:8d:21:57:3f:17:
                    e1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:32:0B:B5:68:CD:B8:B7:72:F1:22:F2:3A:CE:85:62:87:CA:15:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e0b288e4-b9f7-320c-b7e6-03b11911704c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.148.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:32:8d:4c:47:93:b9:0e:07:a6:e4:67:33:52:ee:a7:28:c0:
         c2:95:56:29:0f:da:a2:b0:ef:30:24:66:96:f0:19:a4:e1:4a:
         76:3f:49:88:cc:95:3a:f2:99:fa:05:6d:e3:01:43:bf:f9:ca:
         3d:f8:3c:27:6e:72:51:d5:0a:05:db:f1:63:62:fb:0c:53:fa:
         c6:5e:b0:f2:c8:26:7f:29:f9:46:eb:68:bb:8c:fe:8d:2b:ed:
         b8:d0:71:7e:5d:51:33:36:41:b4:0d:e4:f1:11:7e:20:b6:a7:
         e6:17:83:ff:b3:2d:36:6b:17:e8:b5:f3:d5:47:1e:5b:c6:a5:
         ca:a3:9e:07:84:4b:96:d2:9c:06:70:02:fc:f0:6d:de:ed:95:
         f5:16:bd:0c:8c:03:99:21:61:a9:70:2e:07:62:45:b4:5f:ee:
         74:2c:31:da:5a:05:4d:e3:63:3c:f8:ae:c6:d6:b8:5e:99:fa:
         35:ee:de:22:1a:89:2e:91:b5:58:e8:1e:be:19:2b:1e:b2:b5:
         b8:e9:0d:99:9e:a3:2e:75:02:fb:62:c6:fd:b0:ac:d0:6e:04:
         99:00:9f:c0:82:5f:31:3d:0c:f9:1c:42:46:f0:06:b5:7c:41:
         61:70:2a:d9:47:80:e7:b8:37:77:cc:a2:a8:1b:d4:dc:79:f9:
         7f:6b:06:d4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4u2x8UwwKmkOC0koAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDYxNTE5MzcxMloXDTI2MDkxMzE5MzcxMlowLzEtMCsGA1UEAxMk
ZjI1ZDIyZDctY2I2NC00YmNjLTk5YTgtMjc3ZThiNmZlOGFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifyEgwPtcL2DNPMNVejn4dImmhYvu97V1cTo
s/I4/ZDHAnsg93GO0ax2JO+RykgBJboaJdlsTpdZh585bT0vsw9ekpAieKH4v/tq
MgMzcIpdzhBB1aVWxNOd/xPOWE+bRkCjJMdDSBh39KSMIHpiKB1V6xgY/TxgQkmn
Ppv0zWdswAG3dM3JJrR9AHtbDXuuFpRI0qNF+tLtWB525Sl/Z5i+jbQr3nktefGC
d+BIGwhyk3RuAnCQevJrnfU/SJSTYCFu9xojU1taMFCUstvB6mXc91vEhtVcG31p
K0gOIynCqbHDVDE1VBg6/JED2IDf69ERTbe8MrfijSFXPxfhWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNcyC7Vozbi3cvEi8jrOhWKHyhU5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZTBiMjg4ZTQtYjlmNy0z
MjBjLWI3ZTYtMDNiMTE5MTE3MDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEJpSAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGwyjUxHk7kOB6bkZzNS7qcowMKVVikP2qKw7zAkZpbwGaThSnY/SYjM
lTrymfoFbeMBQ7/5yj34PCduclHVCgXb8WNi+wxT+sZesPLIJn8p+UbraLuM/o0r
7bjQcX5dUTM2QbQN5PERfiC2p+YXg/+zLTZrF+i189VHHlvGpcqjngeES5bSnAZw
Avzwbd7tlfUWvQyMA5khYalwLgdiRbRf7nQsMdpaBU3jYzz4rsbWuF6Z+jXu3iIa
iS6RtVjoHr4ZKx6ytbjpDZmeoy51Avtixv2wrNBuBJkAn8CCXzE9DPkcQkbwBrV8
QWFwKtlHgOe4N3fMoqgb1Nx5+X9rBtQ=
-----END CERTIFICATE-----
Generated at Wed Jun 24 16:01:57 2026 by rpki-client