Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a4215ba-864d-34ec-b833-8c78bbbe7c8d.roa
File:                     4a4215ba-864d-34ec-b833-8c78bbbe7c8d.roa (raw, json)
Hash identifier:          cCfxtNkiPFcnBuXS1ZFzdEW+WXLpeTSJT9RrNgK361M=
Subject key identifier:   B9:19:77:D9:2B:89:4F:B2:C0:7B:EF:73:17:07:34:B5:5D:C2:79:90
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584B832AAEC5770BD68D71467900
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a4215ba-864d-34ec-b833-8c78bbbe7c8d.roa
Signing time:             Mon 13 Oct 2025 22:04:36 +0000
ROA not before:           Mon 13 Oct 2025 22:04:36 +0000
ROA not after:            Sun 11 Jan 2026 23:04:36 +0000
asID:                     61461
IP address blocks:        38.171.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:83:2a:ae:c5:77:0b:d6:8d:71:46:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct 13 22:04:36 2025 GMT
            Not After : Jan 11 23:04:36 2026 GMT
        Subject: CN=357b5aa0-20de-443c-9fcf-e3c657012e41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:dc:30:bf:5d:92:46:80:df:f9:d0:b0:ac:df:
                    7a:a3:7a:34:8d:8a:67:6b:9b:14:43:6c:ad:75:7f:
                    44:87:9b:f1:fd:bc:f5:e5:6d:bb:85:08:d0:a7:22:
                    cd:46:b9:e0:95:7e:70:8e:42:90:27:7c:53:47:7c:
                    99:ce:ae:60:6f:e6:42:20:ab:9b:0b:f2:8e:4f:e0:
                    a2:cb:8c:82:af:63:75:91:af:cd:e7:0a:9f:7a:95:
                    65:ef:ab:25:02:23:f4:09:d3:62:96:19:ec:6c:e4:
                    6c:17:b6:7a:9f:ec:43:79:f0:6a:17:cd:4f:11:b0:
                    73:ed:bf:b0:87:5c:3b:8b:f3:5e:02:a6:c3:ae:58:
                    cf:af:3a:34:41:3e:ef:b7:d8:eb:ff:f7:90:be:fe:
                    3a:76:47:7e:c8:fd:7b:51:2b:7c:e5:ae:08:60:41:
                    54:c8:1a:45:9f:91:ea:67:15:b8:d4:c7:3d:6c:54:
                    46:d3:df:c5:0a:cc:de:bb:c0:80:1d:de:a3:ec:3c:
                    d8:8a:39:4b:e8:25:cc:1b:1f:44:fc:89:2a:b3:e8:
                    db:f7:21:ee:17:2e:14:82:19:81:09:f3:01:cf:b8:
                    4f:28:0e:28:63:03:e6:94:dd:e7:ae:23:1b:10:a6:
                    4b:09:7d:94:77:39:25:2f:07:33:39:8e:c7:d5:52:
                    48:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:19:77:D9:2B:89:4F:B2:C0:7B:EF:73:17:07:34:B5:5D:C2:79:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a4215ba-864d-34ec-b833-8c78bbbe7c8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.171.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:43:11:2a:c7:69:a4:f2:de:80:49:85:d1:df:b8:c9:23:dc:
         0b:35:92:c8:6a:39:f7:12:c9:a6:fa:ff:8e:91:a2:a6:ec:51:
         43:6e:ed:6b:32:66:f8:49:fb:2c:b3:3e:00:c4:8b:af:8b:2a:
         d9:5e:07:3d:96:09:fb:10:61:1a:6f:02:4c:aa:42:15:db:e0:
         54:9e:d5:af:10:45:77:c5:40:35:b2:a3:e4:94:6e:ae:ad:e9:
         cd:62:35:9a:d8:df:2c:89:52:8b:14:85:7c:e5:d3:d1:94:43:
         23:0a:ef:a0:36:97:9a:7c:7b:86:54:f8:bb:38:86:65:77:2a:
         0a:b8:ac:d5:e1:59:5d:05:47:37:7f:50:86:79:9f:8b:57:84:
         9a:18:2d:ed:d4:f5:bb:2c:0e:59:24:20:51:0b:25:1f:38:70:
         34:46:2e:9f:7e:fe:c1:e1:cd:1e:b4:4c:5f:6d:5f:61:f8:3f:
         f3:af:12:90:bd:59:ff:be:46:dc:3a:f3:7c:e3:25:9c:81:f2:
         22:15:7c:f8:6f:6a:51:dc:b6:68:8d:e9:f0:ab:9d:c6:ce:8f:
         15:cf:66:11:64:35:e9:53:46:98:78:ef:21:4d:d7:29:1a:3f:
         03:d2:b1:da:80:13:05:88:a6:a4:09:3e:8e:27:e0:4d:07:37:
         6f:23:fc:4f
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEuDKq7FdwvWjXFGeQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI1MTAxMzIyMDQzNloXDTI2MDExMTIzMDQzNlowLzEtMCsGA1UEAxMk
MzU3YjVhYTAtMjBkZS00NDNjLTlmY2YtZTNjNjU3MDEyZTQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytwwv12SRoDf+dCwrN96o3o0jYpna5sUQ2yt
dX9Eh5vx/bz15W27hQjQpyLNRrnglX5wjkKQJ3xTR3yZzq5gb+ZCIKubC/KOT+Ci
y4yCr2N1ka/N5wqfepVl76slAiP0CdNilhnsbORsF7Z6n+xDefBqF81PEbBz7b+w
h1w7i/NeAqbDrljPrzo0QT7vt9jr//eQvv46dkd+yP17USt85a4IYEFUyBpFn5Hq
ZxW41Mc9bFRG09/FCszeu8CAHd6j7DzYijlL6CXMGx9E/Ikqs+jb9yHuFy4UghmB
CfMBz7hPKA4oYwPmlN3nriMbEKZLCX2UdzklLwczOY7H1VJIhwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFLkZd9kriU+ywHvvcxcHNLVdwnmQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNGE0MjE1YmEtODY0ZC0z
NGVjLWI4MzMtOGM3OGJiYmU3YzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAJqswVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAokMRKsdppPLegEmF0d+4ySPcCzWSyGo59xLJpvr/jpGipuxRQ27tazJm
+En7LLM+AMSLr4sq2V4HPZYJ+xBhGm8CTKpCFdvgVJ7VrxBFd8VANbKj5JRurq3p
zWI1mtjfLIlSixSFfOXT0ZRDIwrvoDaXmnx7hlT4uziGZXcqCris1eFZXQVHN39Q
hnmfi1eEmhgt7dT1uywOWSQgUQslHzhwNEYun37+weHNHrRMX21fYfg/868SkL1Z
/75G3DrzfOMlnIHyIhV8+G9qUdy2aI3p8Kudxs6PFc9mEWQ16VNGmHjvIU3XKRo/
A9Kx2oATBYimpAk+jifgTQc3byP8Tw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:27:10 2025 by rpki-client