Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/071b7e54-e3e0-3592-b440-bd51fd6973d4.roa
File:                     071b7e54-e3e0-3592-b440-bd51fd6973d4.roa (raw, json)
Hash identifier:          1eV1IeO3qkaMwX9GnHRllOuDKoczU2DlU0elEohSB90=
Subject key identifier:   D4:5C:B3:E2:89:20:2A:C8:54:28:98:A5:DD:70:AE:A2:4E:CE:FE:F9
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F5612498CBAE707D359733680
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/071b7e54-e3e0-3592-b440-bd51fd6973d4.roa
Signing time:             Tue 29 Sep 2026 13:31:49 +0000
ROA not before:           Tue 29 Sep 2026 13:31:49 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     58061
IP address blocks:        38.180.36.0/22 maxlen: 24
                          38.180.57.0/24 maxlen: 24
                          38.180.68.0/22 maxlen: 24
                          38.180.90.0/23 maxlen: 24
                          38.180.96.0/22 maxlen: 24
                          38.180.104.0/23 maxlen: 24
                          38.180.112.0/23 maxlen: 24
                          38.180.114.0/23 maxlen: 24
                          38.180.116.0/23 maxlen: 24
                          38.180.120.0/22 maxlen: 24
                          38.180.124.0/23 maxlen: 24
                          38.180.130.0/23 maxlen: 24
                          38.180.132.0/23 maxlen: 24
                          38.180.134.0/24 maxlen: 24
                          38.180.136.0/23 maxlen: 24
                          38.180.145.0/24 maxlen: 24
                          38.180.146.0/24 maxlen: 24
                          38.180.155.0/24 maxlen: 24
                          38.180.156.0/22 maxlen: 24
                          38.180.160.0/24 maxlen: 24
                          38.180.167.0/24 maxlen: 24
                          38.180.168.0/22 maxlen: 24
                          38.180.172.0/23 maxlen: 24
                          38.180.174.0/24 maxlen: 24
                          38.180.176.0/23 maxlen: 24
                          38.180.179.0/24 maxlen: 24
                          38.180.180.0/24 maxlen: 24
                          38.180.182.0/23 maxlen: 24
                          38.180.185.0/24 maxlen: 24
                          38.180.186.0/23 maxlen: 24
                          38.180.206.0/23 maxlen: 24
                          38.180.208.0/23 maxlen: 24
                          38.180.210.0/23 maxlen: 24
                          38.180.213.0/24 maxlen: 24
                          38.180.220.0/22 maxlen: 24
                          38.180.231.0/24 maxlen: 24
                          38.180.232.0/23 maxlen: 24
                          38.180.234.0/24 maxlen: 24
                          38.180.242.0/23 maxlen: 24
                          38.180.244.0/24 maxlen: 24
                          38.180.251.0/24 maxlen: 24
                          38.180.254.0/23 maxlen: 24
                          38.244.134.0/23 maxlen: 24
                          38.244.136.0/21 maxlen: 24
                          38.244.158.0/23 maxlen: 24
                          38.244.160.0/23 maxlen: 24
                          38.244.174.0/23 maxlen: 24
                          38.244.178.0/23 maxlen: 24
                          38.244.189.0/24 maxlen: 24
                          38.244.193.0/24 maxlen: 24
                          38.244.194.0/24 maxlen: 24
                          38.244.199.0/24 maxlen: 24
                          38.244.200.0/24 maxlen: 24
                          38.244.205.0/24 maxlen: 24
                          38.244.206.0/24 maxlen: 24
                          38.244.208.0/22 maxlen: 24
                          38.244.213.0/24 maxlen: 24
                          38.244.214.0/24 maxlen: 24
                          38.244.217.0/24 maxlen: 24
                          38.244.218.0/24 maxlen: 24
                          38.244.219.0/24 maxlen: 24
                          38.244.220.0/24 maxlen: 24
                          38.244.221.0/24 maxlen: 24
                          38.244.222.0/24 maxlen: 24
                          38.244.223.0/24 maxlen: 24
                          38.244.224.0/24 maxlen: 24
                          38.244.225.0/24 maxlen: 24
                          149.33.0.0/24 maxlen: 24
                          149.33.8.0/23 maxlen: 24
                          149.33.12.0/23 maxlen: 24
                          149.33.14.0/24 maxlen: 24
                          149.33.19.0/24 maxlen: 24
                          149.33.20.0/22 maxlen: 24
                          149.33.24.0/24 maxlen: 24
                          149.33.35.0/24 maxlen: 24
                          149.33.36.0/23 maxlen: 24
                          149.33.39.0/24 maxlen: 24
                          149.33.40.0/23 maxlen: 24
                          149.33.46.0/23 maxlen: 24
                          149.33.48.0/24 maxlen: 24
                          149.33.49.0/24 maxlen: 24
                          149.33.50.0/24 maxlen: 24
                          149.33.52.0/23 maxlen: 24
                          149.33.54.0/24 maxlen: 24
                          149.33.56.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:56:12:49:8c:ba:e7:07:d3:59:73:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep 29 13:31:49 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=1c03f67d-fa49-4e8b-ae6d-fb67899ab51e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:10:f8:9a:69:0b:cf:78:ee:1b:08:12:7f:e9:
                    28:2d:e4:7d:91:42:bb:5d:98:5c:26:84:f8:25:8d:
                    92:52:0e:26:c2:4f:1d:12:11:c1:bc:80:48:91:45:
                    c1:7f:34:0a:27:eb:b4:33:aa:fc:f5:83:0f:d2:4c:
                    a0:67:c7:97:e9:17:1f:69:08:e8:72:68:c1:b0:7c:
                    d4:0a:17:15:09:0b:00:cf:8a:fa:98:f3:81:0f:ea:
                    2b:44:da:64:e2:96:f5:03:13:8c:89:db:97:b3:df:
                    75:54:ba:1b:02:a3:9a:0a:8a:8d:6d:72:54:cd:96:
                    68:62:28:39:60:11:4e:06:fa:a4:55:4a:f8:e5:f3:
                    7b:2f:78:3c:e7:93:c4:96:71:75:8b:c3:a5:f1:96:
                    17:aa:ea:b7:ca:4b:8f:ab:03:98:b2:3d:95:9d:10:
                    77:e5:57:42:55:cb:50:a1:c6:3f:d4:3b:d7:da:9c:
                    3e:90:db:1d:cd:bd:03:e3:2b:1a:b6:b2:8b:65:f8:
                    b4:cf:9c:18:7c:11:a2:36:1a:98:46:24:2e:29:a0:
                    18:99:fc:98:22:9f:63:d8:5f:06:df:46:fb:db:4f:
                    67:7a:32:1f:aa:4e:09:91:64:a7:b1:82:6e:6e:3b:
                    b3:98:61:fa:a7:37:ab:48:42:55:44:6c:96:c4:37:
                    5e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:5C:B3:E2:89:20:2A:C8:54:28:98:A5:DD:70:AE:A2:4E:CE:FE:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/071b7e54-e3e0-3592-b440-bd51fd6973d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.180.36.0/22
                  38.180.57.0/24
                  38.180.68.0/22
                  38.180.90.0/23
                  38.180.96.0/22
                  38.180.104.0/23
                  38.180.112.0-38.180.117.255
                  38.180.120.0-38.180.125.255
                  38.180.130.0-38.180.134.255
                  38.180.136.0/23
                  38.180.145.0-38.180.146.255
                  38.180.155.0-38.180.160.255
                  38.180.167.0-38.180.174.255
                  38.180.176.0/23
                  38.180.179.0-38.180.180.255
                  38.180.182.0/23
                  38.180.185.0-38.180.187.255
                  38.180.206.0-38.180.211.255
                  38.180.213.0/24
                  38.180.220.0/22
                  38.180.231.0-38.180.234.255
                  38.180.242.0-38.180.244.255
                  38.180.251.0/24
                  38.180.254.0/23
                  38.244.134.0-38.244.143.255
                  38.244.158.0-38.244.161.255
                  38.244.174.0/23
                  38.244.178.0/23
                  38.244.189.0/24
                  38.244.193.0-38.244.194.255
                  38.244.199.0-38.244.200.255
                  38.244.205.0-38.244.206.255
                  38.244.208.0/22
                  38.244.213.0-38.244.214.255
                  38.244.217.0-38.244.225.255
                  149.33.0.0/24
                  149.33.8.0/23
                  149.33.12.0-149.33.14.255
                  149.33.19.0-149.33.24.255
                  149.33.35.0-149.33.37.255
                  149.33.39.0-149.33.41.255
                  149.33.46.0-149.33.50.255
                  149.33.52.0-149.33.54.255
                  149.33.56.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:89:37:d5:f1:7f:fb:15:e0:c4:a5:90:30:59:18:87:80:83:
         54:a2:97:8b:26:ff:d7:29:02:a9:21:16:6b:e2:ed:a9:2b:11:
         4a:3c:e2:58:f4:51:d3:89:ba:e2:3c:c0:2a:10:cc:7d:5e:36:
         e4:00:f7:b8:34:16:d0:9e:b6:60:a5:9e:09:3b:61:ef:c4:ec:
         d8:71:99:5b:f2:44:e1:df:20:5d:ec:c9:97:2d:ba:e8:65:1b:
         8e:80:bb:3a:6b:0a:6a:87:a1:f5:2d:39:0a:e2:48:b9:de:ce:
         f5:10:d1:25:a6:eb:47:fb:55:3b:71:ff:8a:38:51:1a:cd:23:
         5e:16:4c:4c:71:4d:a0:59:c6:3b:e2:bc:62:7f:22:a0:15:69:
         47:49:c2:10:0a:6a:c2:0b:2e:c0:1c:e9:7c:c8:1e:8e:a8:fc:
         f2:9b:e5:29:34:ab:1f:57:0e:54:98:74:29:84:54:cc:f3:5b:
         3c:c4:2f:b4:40:ca:2e:61:9d:0f:e3:2d:21:66:f2:66:b7:66:
         8c:04:cc:29:b5:4a:18:46:d2:82:27:a2:b6:7e:ac:24:22:e7:
         ab:73:81:04:59:11:1a:f3:f7:3f:ab:db:d9:48:db:ba:e3:4f:
         3a:7a:41:9f:7d:5e:cb:75:ac:89:f4:c5:fe:5e:31:cf:2d:ce:
         33:c2:58:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 21:31:23 2026 by rpki-client