Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d0da16fa-c45a-39ec-ab92-304bf221f242.roa
File:                     d0da16fa-c45a-39ec-ab92-304bf221f242.roa (raw, json)
Hash identifier:          /v6lWIKl/QLA+qePuzMN7Q6lHJalhVdX2/LxhhC3W/U=
Subject key identifier:   96:F5:F2:69:92:B1:22:D1:71:6B:1D:84:FE:21:C1:12:7F:36:8C:E1
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D1B19E729AF63E3F78302B388
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d0da16fa-c45a-39ec-ab92-304bf221f242.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     132146
IP address blocks:        38.181.96.0/20 maxlen: 24
                          154.19.0.0/19 maxlen: 24
                          209.146.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:19:e7:29:af:63:e3:f7:83:02:b3:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=09e9a9bd-013d-4427-b49c-2d57234e5972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:2d:c4:24:33:09:53:a9:c2:dd:b7:a9:0e:88:
                    06:08:67:e4:22:2d:45:59:57:ae:35:2f:67:5c:10:
                    6f:9e:3a:7b:00:a9:f5:57:cf:15:85:24:b6:8a:81:
                    bb:99:26:17:75:bb:83:d3:c5:ed:3b:e4:5c:e2:95:
                    5e:58:e7:76:da:75:a5:96:de:23:08:44:54:42:bc:
                    b1:0b:b2:f3:27:3a:dc:58:5b:80:5c:e0:99:47:5b:
                    1c:4f:a8:a4:af:34:42:9f:48:b6:0e:79:44:cd:2b:
                    0e:87:49:ae:2e:f4:e7:bb:5b:c7:94:44:f6:82:80:
                    34:6b:4e:ed:b1:bd:42:83:28:d0:41:bd:c6:36:48:
                    7f:00:6a:b6:2a:03:30:3d:d3:c0:7e:c4:dd:b5:bd:
                    68:7e:39:66:19:c9:2f:99:16:a1:e4:32:c7:e4:44:
                    e3:51:96:fc:89:99:47:d4:aa:18:b4:7a:49:8f:75:
                    c7:58:da:37:5f:94:b2:47:9a:a8:9f:7d:c4:e2:7a:
                    e0:ea:3e:b0:53:d9:6e:2b:36:69:a2:31:43:64:aa:
                    0c:03:2c:b0:6f:c4:86:85:ad:ed:2f:ba:7d:c7:64:
                    9e:4b:d8:fd:a4:cb:db:61:a7:27:df:c1:17:a2:69:
                    c9:c9:5e:2d:75:c2:6e:86:95:92:c3:48:fa:8a:ff:
                    96:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:F5:F2:69:92:B1:22:D1:71:6B:1D:84:FE:21:C1:12:7F:36:8C:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d0da16fa-c45a-39ec-ab92-304bf221f242.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.181.96.0/20
                  154.19.0.0/19
                  209.146.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:02:a4:c0:50:6b:89:3a:8f:0b:f6:60:76:98:c8:96:03:be:
         a4:93:74:c9:39:23:31:35:82:2e:ec:35:a5:36:b7:36:84:df:
         22:10:2e:8b:6a:4d:c8:3d:45:90:32:25:6d:3d:b5:51:9d:4b:
         87:25:c8:3d:eb:f4:81:67:b2:a1:6e:84:5b:89:4e:d7:b7:e3:
         f1:21:a9:43:0c:32:d0:fa:9f:87:03:06:af:19:f6:7e:f3:3e:
         b1:e2:fe:8f:42:22:5f:be:5c:09:0f:64:9a:18:b7:cd:62:f7:
         68:43:b9:f0:20:0b:ab:b5:b0:35:f7:7b:c2:b0:41:22:0a:90:
         d7:3b:87:55:e7:54:07:38:a6:ab:0c:b4:28:53:96:f9:2c:28:
         25:6d:93:4f:ca:b4:6d:4a:0e:ee:6d:59:f0:53:bb:71:d9:25:
         92:e3:d9:34:e1:93:8a:7d:69:18:dd:da:8e:39:f3:58:ea:e6:
         31:bc:0c:50:c0:b7:c5:ad:82:71:12:fe:b2:e7:92:03:98:66:
         74:50:3d:b7:fb:aa:a2:b7:80:c5:ae:4d:7c:cc:4a:1e:2a:3a:
         87:b0:2f:14:61:99:e9:98:38:13:a1:16:32:fe:64:50:e2:e9:
         95:aa:e6:f8:f1:75:cf:1b:c9:2e:66:bb:0e:08:57:77:f1:f8:
         d0:ec:c6:b0
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE0bGecpr2Pj94MCs4gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk
MDllOWE5YmQtMDEzZC00NDI3LWI0OWMtMmQ1NzIzNGU1OTcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiS3EJDMJU6nC3bepDogGCGfkIi1FWVeuNS9n
XBBvnjp7AKn1V88VhSS2ioG7mSYXdbuD08XtO+Rc4pVeWOd22nWllt4jCERUQryx
C7LzJzrcWFuAXOCZR1scT6ikrzRCn0i2DnlEzSsOh0muLvTnu1vHlET2goA0a07t
sb1CgyjQQb3GNkh/AGq2KgMwPdPAfsTdtb1ofjlmGckvmRah5DLH5ETjUZb8iZlH
1KoYtHpJj3XHWNo3X5SyR5qon33E4nrg6j6wU9luKzZpojFDZKoMAyywb8SGha3t
L7p9x2SeS9j9pMvbYacn38EXomnJyV4tdcJuhpWSw0j6iv+WWwIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFJb18mmSsSLRcWsdhP4hwRJ/NozhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZDBkYTE2ZmEtYzQ1YS0z
OWVjLWFiOTItMzA0YmYyMjFmMjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEJrVgAwQF
mhMAAwQA0ZIlMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAK4CpMBQa4k6jwv2YHaYyJYDvqSTdMk5IzE1gi7s
NaU2tzaE3yIQLotqTcg9RZAyJW09tVGdS4clyD3r9IFnsqFuhFuJTte34/EhqUMM
MtD6n4cDBq8Z9n7zPrHi/o9CIl++XAkPZJoYt81i92hDufAgC6u1sDX3e8KwQSIK
kNc7h1XnVAc4pqsMtChTlvksKCVtk0/KtG1KDu5tWfBTu3HZJZLj2TThk4p9aRjd
2o4581jq5jG8DFDAt8WtgnES/rLnkgOYZnRQPbf7qqK3gMWuTXzMSh4qOoewLxRh
memYOBOhFjL+ZFDi6ZWq5vjxdc8byS5muw4IV3fx+NDsxrA=
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:32 2026 by rpki-client