Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e9f5a67a-7e2d-32d3-80a1-c1258330d02c.roa
File:                     e9f5a67a-7e2d-32d3-80a1-c1258330d02c.roa (raw, json)
Hash identifier:          a7Yv+xZ7TbJWPblL7QYmIikDbBUIMHQt77yUyZndpeE=
Subject key identifier:   93:CD:60:49:5E:86:6A:9B:AA:A1:F3:70:E1:0B:D8:29:D2:10:2C:01
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584ED9C74C50F9F464D5E2031500
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e9f5a67a-7e2d-32d3-80a1-c1258330d02c.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     138064
IP address blocks:        38.3.160.0/24 maxlen: 24
                          38.80.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:4c:50:f9:f4:64:d5:e2:03:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=f2cc1b23-a2ec-42f6-b1bb-74af8ee86810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:99:2b:6b:29:a3:e7:14:a7:f5:58:b2:af:b0:
                    ac:9f:be:d9:05:eb:a7:e7:e9:87:4c:4e:85:d2:b9:
                    54:81:63:01:77:40:0f:1e:cc:c7:25:cb:c9:62:e0:
                    8c:3e:5b:97:7d:b3:03:de:2e:c0:59:e9:8a:aa:a7:
                    fa:cd:db:33:34:cf:00:82:00:57:7c:8a:0b:a4:f8:
                    7b:21:39:fa:85:34:89:39:c5:c0:59:4c:60:8e:15:
                    a3:68:38:21:de:25:fd:d4:f9:92:5f:27:33:54:94:
                    6a:3c:6d:8b:5e:b4:aa:ef:75:2f:60:17:69:28:b3:
                    86:82:10:eb:d7:0b:b7:c1:db:67:f6:33:0d:ea:f1:
                    da:35:2a:08:b3:e0:f8:bc:fd:bc:c9:e8:e5:29:1b:
                    f3:96:a2:95:35:dd:5f:79:2b:97:19:c2:a9:57:de:
                    91:5c:a4:68:35:e3:9e:a7:e0:9d:e6:b0:6f:88:21:
                    9b:52:ac:8b:9d:f9:75:43:37:a5:24:c2:bd:db:13:
                    89:f5:86:53:99:e0:0b:ae:02:cf:6e:f6:24:46:a5:
                    df:a3:7a:1d:03:66:41:51:6a:4a:8a:21:e2:65:4c:
                    5f:3d:82:75:46:1e:17:0e:cc:ed:9c:7b:d1:44:8b:
                    70:39:b2:4f:a6:1d:13:78:ec:1d:ed:57:96:2c:58:
                    af:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:CD:60:49:5E:86:6A:9B:AA:A1:F3:70:E1:0B:D8:29:D2:10:2C:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e9f5a67a-7e2d-32d3-80a1-c1258330d02c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.3.160.0/24
                  38.80.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:c7:c9:72:bd:00:e0:3a:a5:78:a4:10:1f:82:30:b8:36:36:
         0d:07:8e:df:80:7d:e0:68:72:e7:af:39:68:ec:4c:7a:32:08:
         8b:82:dd:95:00:72:2f:cc:27:53:f8:13:72:fb:ae:fe:1c:a7:
         0b:d9:18:f6:96:16:a3:bf:3d:69:ba:cb:9e:e9:a8:e8:6c:ef:
         73:c0:2a:63:93:9f:e7:9a:cd:d3:5a:1c:d8:e7:4b:a2:4a:58:
         04:02:75:91:8e:c0:f1:60:55:75:b4:c6:20:a9:82:7c:3f:db:
         d6:ce:2c:cb:a4:c7:ef:f8:f6:90:47:57:50:f4:ef:55:a9:1a:
         c8:00:bd:23:be:e7:4d:c3:3d:ac:10:97:0e:0e:b9:ef:d5:b5:
         bc:33:b5:61:cc:c8:bf:38:eb:b3:31:d0:95:de:13:60:07:bc:
         97:a0:c4:5b:6c:17:e3:82:ad:e7:30:b9:06:4b:44:0b:6c:61:
         00:2b:04:dd:6d:e1:0e:9f:d1:e6:3e:bb:26:82:55:86:d8:03:
         14:fa:c3:4c:13:95:b4:af:e7:ad:bc:fd:08:77:45:f7:47:9f:
         57:5e:d8:16:6f:ac:b9:6e:24:b5:72:d0:ab:1f:21:6f:e6:35:
         2e:d6:26:ff:cc:e4:a5:64:19:db:b2:dc:36:61:7b:ce:5c:5e:
         32:26:4a:b8
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE7Zx0xQ+fRk1eIDFQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDgxNjAxMDAxNFoXDTI2MTExNDAyMDAxNFowLzEtMCsGA1UEAxMk
ZjJjYzFiMjMtYTJlYy00MmY2LWIxYmItNzRhZjhlZTg2ODEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5kraymj5xSn9Viyr7Csn77ZBeun5+mHTE6F
0rlUgWMBd0APHszHJcvJYuCMPluXfbMD3i7AWemKqqf6zdszNM8AggBXfIoLpPh7
ITn6hTSJOcXAWUxgjhWjaDgh3iX91PmSXyczVJRqPG2LXrSq73UvYBdpKLOGghDr
1wu3wdtn9jMN6vHaNSoIs+D4vP28yejlKRvzlqKVNd1feSuXGcKpV96RXKRoNeOe
p+Cd5rBviCGbUqyLnfl1QzelJMK92xOJ9YZTmeALrgLPbvYkRqXfo3odA2ZBUWpK
iiHiZUxfPYJ1Rh4XDsztnHvRRItwObJPph0TeOwd7VeWLFivdQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFJPNYElehmqbqqHzcOEL2CnSECwBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZTlmNWE2N2EtN2UyZC0z
MmQzLTgwYTEtYzEyNTgzMzBkMDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJgOgAwQA
JlBLMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAIfHyXK9AOA6pXikEB+CMLg2Ng0Hjt+AfeBocuevOWjsTHoy
CIuC3ZUAci/MJ1P4E3L7rv4cpwvZGPaWFqO/PWm6y57pqOhs73PAKmOTn+eazdNa
HNjnS6JKWAQCdZGOwPFgVXW0xiCpgnw/29bOLMukx+/49pBHV1D071WpGsgAvSO+
503DPawQlw4Oue/VtbwztWHMyL8467Mx0JXeE2AHvJegxFtsF+OCrecwuQZLRAts
YQArBN1t4Q6f0eY+uyaCVYbYAxT6w0wTlbSv5628/Qh3RfdHn1de2BZvrLluJLVy
0KsfIW/mNS7WJv/M5KVkGduy3DZhe85cXjImSrg=
-----END CERTIFICATE-----
Generated at Fri Sep 11 13:49:44 2026 by rpki-client