Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d755aa94-a968-36f4-afd7-d1a0d94f20e3.roa
File:                     d755aa94-a968-36f4-afd7-d1a0d94f20e3.roa (raw, json)
Hash identifier:          dgoTk9I9M922mD84myMz60sNGDWkv6Qz8b+ZYgyWUDk=
Subject key identifier:   12:18:A0:97:64:91:0F:84:84:9B:1A:15:CC:91:3E:85:70:6A:F9:93
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E9614611555892FF2D3480800
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d755aa94-a968-36f4-afd7-d1a0d94f20e3.roa
Signing time:             Wed 22 Jul 2026 19:00:50 +0000
ROA not before:           Wed 22 Jul 2026 19:00:50 +0000
ROA not after:            Tue 20 Oct 2026 19:00:50 +0000
asID:                     53863
IP address blocks:        38.69.208.0/21 maxlen: 21
                          38.108.72.0/23 maxlen: 23
                          38.128.238.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:96:14:61:15:55:89:2f:f2:d3:48:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jul 22 19:00:50 2026 GMT
            Not After : Oct 20 19:00:50 2026 GMT
        Subject: CN=d25c802e-22d9-4548-b096-8f303e8af9b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ba:79:fa:e6:92:05:b5:9b:b8:77:77:b9:e6:
                    b2:63:fc:a9:b4:ec:e5:34:4a:7c:1b:5f:72:dc:21:
                    fa:cb:09:16:18:7c:bf:f1:a3:70:a5:10:be:b8:f6:
                    0d:3f:ce:78:c7:ba:5b:5a:d7:da:03:83:ed:58:24:
                    ac:14:e4:9a:ed:7d:02:96:74:63:62:0e:c0:b4:c5:
                    10:f1:30:f8:fe:3b:a7:ca:08:21:9a:e2:45:aa:68:
                    c6:ea:ba:13:f5:50:ca:e6:bd:d2:4b:84:82:45:9c:
                    5f:8b:03:28:76:88:90:74:7b:08:1a:a1:7b:d6:89:
                    da:9b:20:7a:81:e8:91:ce:ca:7d:8b:69:69:a6:78:
                    3f:89:f5:cd:5d:cf:ae:00:4e:af:17:04:6c:78:e1:
                    40:3a:e6:39:02:fc:d0:43:b3:4c:57:ba:41:4f:20:
                    27:1d:e6:3a:c9:29:54:fd:73:1d:78:10:0a:b8:d6:
                    84:b1:93:4d:bf:fb:d8:29:95:44:33:07:33:9a:75:
                    9d:f0:f8:33:61:ee:e5:f7:43:f6:e7:46:36:ce:d0:
                    1f:80:bc:31:fa:d8:46:3d:10:e3:a4:1c:4c:04:56:
                    69:42:02:67:53:41:16:cf:50:a0:8b:f5:ac:a1:ec:
                    96:7e:c1:cd:21:89:c9:74:b3:6e:33:98:be:dd:18:
                    81:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:18:A0:97:64:91:0F:84:84:9B:1A:15:CC:91:3E:85:70:6A:F9:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d755aa94-a968-36f4-afd7-d1a0d94f20e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.69.208.0/21
                  38.108.72.0/23
                  38.128.238.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:5f:ed:70:3f:cf:27:2e:9b:44:52:73:34:2a:65:ee:cc:f1:
         44:10:4b:d0:2d:62:f4:2a:e3:05:d8:c8:b9:f8:2f:c0:cc:dc:
         8e:c3:5c:dc:6a:5f:98:7d:30:48:2c:21:8a:73:09:74:01:82:
         99:f0:39:db:a9:d5:ff:69:fb:2b:9f:dd:a5:07:61:45:00:b5:
         5d:8f:8c:98:e8:c4:12:ff:8c:a9:1e:ae:ae:b2:c0:de:4d:fe:
         26:61:5e:15:a5:07:0f:bf:40:b8:46:1a:87:c9:ee:d4:61:70:
         5e:f7:2c:e6:59:cf:d1:64:dd:66:fc:d4:22:e4:da:1e:a4:33:
         15:f9:60:07:8f:94:ad:60:bb:59:89:bd:84:db:2b:00:90:aa:
         35:d2:3d:38:36:7f:20:30:a4:8a:7c:6f:94:f8:de:88:e7:b2:
         fa:79:4f:d1:88:1b:8e:41:60:db:c9:32:8a:58:6c:21:76:50:
         f8:19:d7:02:cf:9b:bb:5b:46:d0:1a:74:05:b5:23:bb:1a:87:
         1e:8f:c8:f8:d7:09:0e:40:d1:ff:e7:99:5d:3f:82:fa:36:a4:
         64:64:e2:50:9f:8a:04:eb:1a:ed:8d:24:ec:35:15:a0:9b:11:
         f7:1e:a2:45:eb:79:cd:2d:67:24:be:01:3e:40:3f:17:19:ee:
         aa:5f:26:ce
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE6WFGEVVYkv8tNICAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDcyMjE5MDA1MFoXDTI2MTAyMDE5MDA1MFowLzEtMCsGA1UEAxMk
ZDI1YzgwMmUtMjJkOS00NTQ4LWIwOTYtOGYzMDNlOGFmOWI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrp5+uaSBbWbuHd3ueayY/yptOzlNEp8G19y
3CH6ywkWGHy/8aNwpRC+uPYNP854x7pbWtfaA4PtWCSsFOSa7X0ClnRjYg7AtMUQ
8TD4/junygghmuJFqmjG6roT9VDK5r3SS4SCRZxfiwModoiQdHsIGqF71onamyB6
geiRzsp9i2lppng/ifXNXc+uAE6vFwRseOFAOuY5AvzQQ7NMV7pBTyAnHeY6ySlU
/XMdeBAKuNaEsZNNv/vYKZVEMwczmnWd8PgzYe7l90P250Y2ztAfgLwx+thGPRDj
pBxMBFZpQgJnU0EWz1Cgi/WsoeyWfsHNIYnJdLNuM5i+3RiBkQIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFBIYoJdkkQ+EhJsaFcyRPoVwavmTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZDc1NWFhOTQtYTk2OC0z
NmY0LWFmZDctZDFhMGQ5NGYyMGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDJkXQAwQB
JmxIAwQBJoDuMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAItf7XA/zycum0RSczQqZe7M8UQQS9AtYvQq4wXY
yLn4L8DM3I7DXNxqX5h9MEgsIYpzCXQBgpnwOdup1f9p+yuf3aUHYUUAtV2PjJjo
xBL/jKkerq6ywN5N/iZhXhWlBw+/QLhGGofJ7tRhcF73LOZZz9Fk3Wb81CLk2h6k
MxX5YAePlK1gu1mJvYTbKwCQqjXSPTg2fyAwpIp8b5T43ojnsvp5T9GIG45BYNvJ
MopYbCF2UPgZ1wLPm7tbRtAadAW1I7sahx6PyPjXCQ5A0f/nmV0/gvo2pGRk4lCf
igTrGu2NJOw1FaCbEfceokXrec0tZyS+AT5APxcZ7qpfJs4=
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:56:49 2026 by rpki-client