Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/071b7e54-e3e0-3592-b440-bd51fd6973d4.roa
File:                     071b7e54-e3e0-3592-b440-bd51fd6973d4.roa (raw, json)
Hash identifier:          vQIO8FI+YGsD5rj9FO907WIwV6JXaYawQpoYSkQ6wa0=
Subject key identifier:   AB:12:C6:36:8E:26:A5:99:5A:21:C4:E3:5A:33:88:A8:6C:BF:51:F8
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E92C7A97044A6FAEC2E2C9700
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/071b7e54-e3e0-3592-b440-bd51fd6973d4.roa
Signing time:             Tue 21 Jul 2026 14:38:50 +0000
ROA not before:           Tue 21 Jul 2026 14:38:50 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     58061
IP address blocks:        38.180.36.0/22 maxlen: 24
                          38.180.57.0/24 maxlen: 24
                          38.180.68.0/22 maxlen: 24
                          38.180.90.0/23 maxlen: 24
                          38.180.96.0/22 maxlen: 24
                          38.180.104.0/23 maxlen: 24
                          38.180.112.0/23 maxlen: 24
                          38.180.114.0/23 maxlen: 24
                          38.180.116.0/23 maxlen: 24
                          38.180.120.0/22 maxlen: 24
                          38.180.124.0/23 maxlen: 24
                          38.180.130.0/23 maxlen: 24
                          38.180.132.0/23 maxlen: 24
                          38.180.134.0/24 maxlen: 24
                          38.180.136.0/23 maxlen: 24
                          38.180.145.0/24 maxlen: 24
                          38.180.146.0/24 maxlen: 24
                          38.180.155.0/24 maxlen: 24
                          38.180.156.0/22 maxlen: 24
                          38.180.160.0/24 maxlen: 24
                          38.180.167.0/24 maxlen: 24
                          38.180.168.0/22 maxlen: 24
                          38.180.172.0/23 maxlen: 24
                          38.180.174.0/24 maxlen: 24
                          38.180.176.0/23 maxlen: 24
                          38.180.179.0/24 maxlen: 24
                          38.180.180.0/24 maxlen: 24
                          38.180.182.0/23 maxlen: 24
                          38.180.185.0/24 maxlen: 24
                          38.180.186.0/23 maxlen: 24
                          38.180.206.0/23 maxlen: 24
                          38.180.208.0/23 maxlen: 24
                          38.180.210.0/23 maxlen: 24
                          38.180.213.0/24 maxlen: 24
                          38.180.220.0/22 maxlen: 24
                          38.180.231.0/24 maxlen: 24
                          38.180.232.0/23 maxlen: 24
                          38.180.234.0/24 maxlen: 24
                          38.180.242.0/23 maxlen: 24
                          38.180.244.0/24 maxlen: 24
                          38.180.251.0/24 maxlen: 24
                          38.180.254.0/23 maxlen: 24
                          38.244.134.0/23 maxlen: 24
                          38.244.136.0/21 maxlen: 24
                          38.244.158.0/23 maxlen: 24
                          38.244.160.0/23 maxlen: 24
                          38.244.174.0/23 maxlen: 24
                          38.244.178.0/23 maxlen: 24
                          38.244.189.0/24 maxlen: 24
                          38.244.193.0/24 maxlen: 24
                          38.244.194.0/24 maxlen: 24
                          38.244.199.0/24 maxlen: 24
                          38.244.200.0/24 maxlen: 24
                          38.244.205.0/24 maxlen: 24
                          38.244.206.0/24 maxlen: 24
                          38.244.208.0/22 maxlen: 24
                          38.244.213.0/24 maxlen: 24
                          38.244.214.0/24 maxlen: 24
                          38.244.217.0/24 maxlen: 24
                          38.244.218.0/24 maxlen: 24
                          38.244.219.0/24 maxlen: 24
                          38.244.220.0/24 maxlen: 24
                          38.244.221.0/24 maxlen: 24
                          38.244.222.0/24 maxlen: 24
                          149.33.0.0/24 maxlen: 24
                          149.33.8.0/23 maxlen: 24
                          149.33.12.0/23 maxlen: 24
                          149.33.14.0/24 maxlen: 24
                          149.33.19.0/24 maxlen: 24
                          149.33.20.0/22 maxlen: 24
                          149.33.24.0/24 maxlen: 24
                          149.33.35.0/24 maxlen: 24
                          149.33.36.0/23 maxlen: 24
                          149.33.39.0/24 maxlen: 24
                          149.33.40.0/23 maxlen: 24
                          149.33.46.0/23 maxlen: 24
                          149.33.48.0/24 maxlen: 24
                          149.33.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:92:c7:a9:70:44:a6:fa:ec:2e:2c:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jul 21 14:38:50 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=cacba3a6-4e03-4079-83e4-8408602369aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6c:66:b3:cd:83:08:9a:0c:ab:a4:e9:cd:96:
                    24:cd:e6:a8:a3:12:a0:9f:e0:06:1b:e8:e6:be:78:
                    5b:5b:3e:d3:a0:77:5c:1a:af:81:71:44:8d:a4:4f:
                    c8:d2:7b:94:dd:43:50:ba:af:c0:f0:3d:7c:6e:66:
                    61:1a:ac:39:f6:35:e1:89:dc:f7:27:7c:d4:94:79:
                    5b:50:3e:2d:3d:0a:ae:7a:d5:d8:fe:38:9a:19:96:
                    b7:29:8c:03:03:63:e1:dd:a1:64:e3:46:29:cb:66:
                    c7:e4:a7:eb:b1:7a:72:5d:64:4f:d8:40:de:d7:4b:
                    e0:f7:7b:82:d4:65:ad:be:ae:71:60:55:69:49:4c:
                    3d:45:e4:76:fa:3f:e1:14:a5:42:e9:2f:f7:68:44:
                    ea:1b:dc:ac:db:80:10:0f:9d:4a:be:61:33:3f:37:
                    76:89:4f:fa:02:ba:f1:53:de:5b:0b:19:3a:8b:1f:
                    07:4f:5f:79:ef:98:74:26:1d:eb:d0:e0:f2:8c:cb:
                    63:df:40:61:f0:e9:58:fb:99:57:e0:1f:6c:cd:29:
                    02:ca:93:d1:a7:ec:d4:76:aa:d7:50:10:03:13:2d:
                    93:f3:a7:50:60:7a:15:99:92:0e:4d:ca:2a:7e:70:
                    6a:54:a4:70:7a:7e:e7:4b:dc:c4:54:1d:2b:32:2c:
                    2e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:12:C6:36:8E:26:A5:99:5A:21:C4:E3:5A:33:88:A8:6C:BF:51:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/071b7e54-e3e0-3592-b440-bd51fd6973d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.180.36.0/22
                  38.180.57.0/24
                  38.180.68.0/22
                  38.180.90.0/23
                  38.180.96.0/22
                  38.180.104.0/23
                  38.180.112.0-38.180.117.255
                  38.180.120.0-38.180.125.255
                  38.180.130.0-38.180.134.255
                  38.180.136.0/23
                  38.180.145.0-38.180.146.255
                  38.180.155.0-38.180.160.255
                  38.180.167.0-38.180.174.255
                  38.180.176.0/23
                  38.180.179.0-38.180.180.255
                  38.180.182.0/23
                  38.180.185.0-38.180.187.255
                  38.180.206.0-38.180.211.255
                  38.180.213.0/24
                  38.180.220.0/22
                  38.180.231.0-38.180.234.255
                  38.180.242.0-38.180.244.255
                  38.180.251.0/24
                  38.180.254.0/23
                  38.244.134.0-38.244.143.255
                  38.244.158.0-38.244.161.255
                  38.244.174.0/23
                  38.244.178.0/23
                  38.244.189.0/24
                  38.244.193.0-38.244.194.255
                  38.244.199.0-38.244.200.255
                  38.244.205.0-38.244.206.255
                  38.244.208.0/22
                  38.244.213.0-38.244.214.255
                  38.244.217.0-38.244.222.255
                  149.33.0.0/24
                  149.33.8.0/23
                  149.33.12.0-149.33.14.255
                  149.33.19.0-149.33.24.255
                  149.33.35.0-149.33.37.255
                  149.33.39.0-149.33.41.255
                  149.33.46.0-149.33.48.255
                  149.33.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:e0:8b:f8:9b:5c:c9:12:dd:1c:8b:12:ff:17:a9:ca:f2:98:
         3e:36:6a:db:73:9b:40:91:c0:f8:7a:29:87:83:73:5f:67:95:
         43:47:3c:d5:7c:d0:e6:f1:2e:db:10:0b:93:b0:50:dd:64:9f:
         8b:38:9b:79:ca:ce:26:39:e0:ae:6e:fa:0a:e6:98:16:66:50:
         20:0c:86:b9:78:fa:eb:67:29:62:de:3c:06:99:14:87:89:c0:
         f5:3f:8d:ce:26:d4:65:e9:96:a5:48:10:c4:03:c8:4e:c2:77:
         ec:09:75:74:2b:12:5c:7e:ea:53:ec:68:e8:ea:ae:13:ae:a4:
         e2:c7:eb:b4:e8:df:ee:d0:69:7e:d5:95:38:a2:df:2a:9d:47:
         32:91:b5:86:0b:da:66:d6:4a:11:a6:a1:5e:1e:af:65:b0:27:
         7a:26:19:cc:aa:d1:4f:2b:95:7a:67:c9:89:57:dc:87:1b:64:
         5d:7d:8d:8e:0e:29:04:16:8a:df:a3:22:86:e7:45:6d:1d:5b:
         ab:6d:fa:5b:e7:02:f3:e7:81:42:d4:fd:6b:d6:e2:70:e4:0c:
         99:3d:a4:c4:09:2b:54:a4:01:91:db:7b:ab:02:87:77:60:f1:
         1b:e6:57:67:50:82:3d:05:26:c1:a8:8a:4c:46:9d:9e:3f:ce:
         e2:ea:2d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:21:01 2026 by rpki-client