Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e2f8d1c9-a3e1-36c6-803a-4273e15116ac.roa
File:                     e2f8d1c9-a3e1-36c6-803a-4273e15116ac.roa (raw, json)
Hash identifier:          2V0Y2es3pN0z649+ebn07YN+2HCBJuyGc8Bvdm5u7PY=
Subject key identifier:   56:09:2B:C4:90:59:EA:BF:D4:BC:5C:F0:7B:2C:7F:CC:7F:E6:1E:7B
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F6F231723381838E8160D9560
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e2f8d1c9-a3e1-36c6-803a-4273e15116ac.roa
Signing time:             Thu 08 Oct 2026 13:00:12 +0000
ROA not before:           Thu 08 Oct 2026 13:00:12 +0000
ROA not after:            Wed 06 Jan 2027 14:00:12 +0000
asID:                     11550
IP address blocks:        38.22.128.0/20 maxlen: 24
                          38.86.80.0/21 maxlen: 24
                          38.86.92.0/22 maxlen: 24
                          38.124.112.0/20 maxlen: 24
                          38.162.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:23:17:23:38:18:38:e8:16:0d:95:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct  8 13:00:12 2026 GMT
            Not After : Jan  6 14:00:12 2027 GMT
        Subject: CN=fe1b4813-6ce7-4068-980a-56d85c5c5f56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:71:c7:71:01:f5:25:f5:44:b0:be:fe:64:da:
                    a2:be:20:0f:94:20:3f:e3:9b:1d:c0:e1:7d:dd:be:
                    3f:73:18:7f:a3:9c:56:50:b6:09:1a:5e:0d:98:39:
                    da:7d:8a:63:f6:ef:25:c3:63:4b:75:e4:5f:1a:3e:
                    1f:bd:7b:3e:d7:8f:58:0d:fd:35:8a:51:51:74:15:
                    75:ab:23:44:85:7c:79:ab:82:99:a6:84:96:16:26:
                    3d:f3:09:b3:6c:b0:06:21:aa:3f:09:de:4e:4b:6e:
                    88:f4:d1:5b:bd:98:c3:88:5a:93:28:36:3d:44:cd:
                    ff:9a:e8:10:97:a7:7e:23:40:c3:7c:0c:1a:ee:bc:
                    9f:4f:30:0c:40:d0:4b:18:81:eb:2f:01:03:63:6d:
                    9f:e4:2a:26:6a:b5:d3:c0:33:f9:74:a1:a3:90:d7:
                    94:19:ef:6a:1d:2a:2c:35:00:46:96:45:15:00:7a:
                    02:60:b9:29:02:8a:71:fb:47:57:4e:2f:d2:01:0d:
                    bf:4f:38:42:41:6b:c2:08:53:c7:e3:ab:e1:4a:84:
                    c2:da:d1:bb:27:87:30:97:3d:17:38:2c:50:7d:99:
                    2c:0a:78:83:c2:a5:87:20:01:37:0d:5d:fd:d8:23:
                    7a:65:85:53:ce:98:d4:cc:66:fb:ab:20:bd:fe:c0:
                    90:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:09:2B:C4:90:59:EA:BF:D4:BC:5C:F0:7B:2C:7F:CC:7F:E6:1E:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e2f8d1c9-a3e1-36c6-803a-4273e15116ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.22.128.0/20
                  38.86.80.0/21
                  38.86.92.0/22
                  38.124.112.0/20
                  38.162.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:7c:d2:df:34:1c:33:ff:46:ca:ea:48:80:b5:7e:da:2b:f0:
         c5:47:a9:d2:82:b8:e8:d1:7e:2c:58:8c:5d:d9:15:fa:59:e8:
         ff:27:c7:23:d2:af:11:32:8b:0a:fd:89:8e:5f:1f:85:7c:0e:
         1b:16:6e:8e:ae:b6:2b:d3:1d:35:16:e9:a1:6c:90:61:d4:81:
         c0:9d:ba:e4:3d:b4:67:18:18:44:0e:7d:c1:ea:61:36:73:d1:
         ab:1d:4d:da:f9:18:44:98:12:70:c3:42:98:6e:ae:24:db:a3:
         ba:96:34:1d:f7:84:27:ca:9f:8f:7f:f3:61:cb:11:d4:32:05:
         67:0d:87:de:cc:61:3c:62:e0:70:26:ee:a6:e9:97:63:54:2e:
         29:55:42:0a:c5:4d:88:77:df:78:38:d3:68:b7:74:e7:a2:63:
         9b:a2:62:8d:b5:71:1b:36:be:52:91:7a:a3:f4:76:80:5e:00:
         96:a0:04:20:a9:20:f0:21:d8:fe:5b:06:89:46:98:db:2b:73:
         ca:5a:02:c1:42:a5:eb:49:7a:63:75:f4:da:90:4d:7d:a6:4d:
         39:f6:05:43:10:06:da:23:a8:46:1e:11:d5:28:36:35:e7:c3:
         fc:8f:59:c4:2d:7e:48:90:e9:fc:bf:8d:e1:a4:cf:ea:c8:8b:
         ba:77:6c:22
-----BEGIN CERTIFICATE-----
MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWE9vIxcjOBg46BYNlWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk
ZmUxYjQ4MTMtNmNlNy00MDY4LTk4MGEtNTZkODVjNWM1ZjU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknHHcQH1JfVEsL7+ZNqiviAPlCA/45sdwOF9
3b4/cxh/o5xWULYJGl4NmDnafYpj9u8lw2NLdeRfGj4fvXs+149YDf01ilFRdBV1
qyNEhXx5q4KZpoSWFiY98wmzbLAGIao/Cd5OS26I9NFbvZjDiFqTKDY9RM3/mugQ
l6d+I0DDfAwa7ryfTzAMQNBLGIHrLwEDY22f5ComarXTwDP5dKGjkNeUGe9qHSos
NQBGlkUVAHoCYLkpAopx+0dXTi/SAQ2/TzhCQWvCCFPH46vhSoTC2tG7J4cwlz0X
OCxQfZksCniDwqWHIAE3DV392CN6ZYVTzpjUzGb7qyC9/sCQpQIDAQABo4IDbTCC
A2kwHQYDVR0OBBYEFFYJK8SQWeq/1Lxc8Hssf8x/5h57MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZTJmOGQxYzktYTNlMS0z
NmM2LTgwM2EtNDI3M2UxNTExNmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQEJhaAAwQD
JlZQAwQCJlZcAwQEJnxwAwQEJqIwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw
OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw
a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFZ80t80HDP/RsrqSIC1ftor
8MVHqdKCuOjRfixYjF3ZFfpZ6P8nxyPSrxEyiwr9iY5fH4V8DhsWbo6utivTHTUW
6aFskGHUgcCduuQ9tGcYGEQOfcHqYTZz0asdTdr5GESYEnDDQphuriTbo7qWNB33
hCfKn49/82HLEdQyBWcNh97MYTxi4HAm7qbpl2NULilVQgrFTYh333g402i3dOei
Y5uiYo21cRs2vlKReqP0doBeAJagBCCpIPAh2P5bBolGmNsrc8paAsFCpetJemN1
9NqQTX2mTTn2BUMQBtojqEYeEdUoNjXnw/yPWcQtfkiQ6fy/jeGkz+rIi7p3bCI=
-----END CERTIFICATE-----
Generated at Tue Oct 27 20:40:10 2026 by rpki-client