Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/dbe154e7-ffb1-3d09-8295-15eccedea2f6.roa
File:                     dbe154e7-ffb1-3d09-8295-15eccedea2f6.roa (raw, json)
Hash identifier:          0CBYzN4d9tJDI5wNcljBdYcgICKZJPKFhC9hq/HUuHc=
Subject key identifier:   B0:AC:EB:7E:79:EA:FB:FD:2E:76:C1:EA:86:EF:A9:C3:41:F8:EA:FF
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E4129E79248A48022C8EA0780
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/dbe154e7-ffb1-3d09-8295-15eccedea2f6.roa
Signing time:             Mon 22 Jun 2026 09:00:11 +0000
ROA not before:           Mon 22 Jun 2026 09:00:11 +0000
ROA not after:            Sun 20 Sep 2026 09:00:11 +0000
asID:                     264750
IP address blocks:        38.74.208.0/20 maxlen: 24
                          38.189.192.0/18 maxlen: 24
                          38.196.0.0/18 maxlen: 24
                          205.137.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:41:29:e7:92:48:a4:80:22:c8:ea:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jun 22 09:00:11 2026 GMT
            Not After : Sep 20 09:00:11 2026 GMT
        Subject: CN=7ef74a00-345d-4366-abfe-b83812b04eaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1b:f0:4f:1c:89:03:9f:a9:06:ee:b1:cd:44:
                    5a:22:69:c9:95:0d:f6:52:62:6a:06:80:e1:b4:c4:
                    4e:fc:c7:50:bf:cc:12:7d:a0:c8:61:a9:1d:d8:b8:
                    be:59:8f:dc:8e:84:f3:fa:ee:62:4b:6f:70:5f:15:
                    07:cd:7d:fd:3c:87:ab:d4:c2:0b:b8:00:9c:36:22:
                    d4:16:ae:4e:e1:cc:0f:a5:4a:31:b4:3f:28:63:8a:
                    e9:71:62:eb:0c:42:97:7d:b8:dc:e1:fc:96:db:0b:
                    ce:b8:23:dd:b8:56:fd:f6:ba:b1:e6:1d:3f:52:5b:
                    02:7a:57:ca:5f:af:ff:d0:0d:03:1f:b9:ab:8c:1d:
                    f0:2c:42:57:a1:6d:7f:56:df:13:9e:6f:ea:3d:ec:
                    42:02:4b:30:d8:63:a2:4f:31:9e:56:74:9a:8b:ab:
                    32:c7:13:cc:64:56:44:6e:28:51:1f:c1:62:a1:71:
                    1b:2f:ae:69:20:fd:e7:e8:cc:cd:e4:df:2e:62:29:
                    e2:c9:ea:08:1c:7a:a6:39:bb:c7:f6:94:27:01:a6:
                    a9:1e:86:a4:5c:e8:6a:05:21:fc:f8:a9:b5:2f:c3:
                    05:87:f8:77:1f:3f:ed:01:d8:d6:11:b4:2a:42:20:
                    ae:7f:ba:64:c6:f0:ac:86:85:67:3a:fa:22:b7:7d:
                    5d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:AC:EB:7E:79:EA:FB:FD:2E:76:C1:EA:86:EF:A9:C3:41:F8:EA:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/dbe154e7-ffb1-3d09-8295-15eccedea2f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.74.208.0/20
                  38.189.192.0/18
                  38.196.0.0/18
                  205.137.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:31:bb:93:d3:95:0c:47:09:77:14:44:60:7e:1e:58:3c:04:
         76:46:8d:9a:ae:a4:99:e9:01:01:12:0b:24:f1:39:99:4b:5a:
         5f:62:ae:c9:c5:fe:f9:79:a3:03:61:18:40:78:60:4c:45:ae:
         df:c9:19:85:e8:f1:9d:a3:a7:e2:a5:cf:d4:fc:ae:e5:34:39:
         b3:47:46:fe:a6:92:95:98:50:0b:25:54:78:13:81:b3:8d:d2:
         dc:9f:58:98:5e:25:dd:15:85:bf:01:9c:ca:01:b5:a1:06:d0:
         78:10:3a:b5:4c:b2:8b:da:78:6a:a8:a5:dd:7c:d6:e0:f9:9f:
         7b:dc:5f:43:0e:b6:9b:d2:55:e9:a7:3a:87:e8:6f:9c:04:4d:
         33:45:6f:6d:d6:d0:96:49:9a:1b:00:b6:e3:f1:de:3d:a1:11:
         2a:b7:9c:e4:fa:b3:e7:1e:73:72:07:a0:b0:51:e6:9c:82:36:
         0a:11:c5:88:fa:cc:b8:0f:df:7f:46:4f:32:01:b6:c7:c7:54:
         fd:61:31:4a:ce:e2:c6:e6:69:8d:8f:b2:6f:69:17:44:1e:c4:
         5b:6a:58:b2:f9:57:7c:fb:2c:cd:93:13:53:43:5a:ce:ca:d1:
         17:15:68:8d:ab:e8:cb:be:5e:44:23:78:8e:13:91:d1:77:d8:
         c3:0d:a9:a3
-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWE5BKeeSSKSAIsjqB4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDYyMjA5MDAxMVoXDTI2MDkyMDA5MDAxMVowLzEtMCsGA1UEAxMk
N2VmNzRhMDAtMzQ1ZC00MzY2LWFiZmUtYjgzODEyYjA0ZWFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxvwTxyJA5+pBu6xzURaImnJlQ32UmJqBoDh
tMRO/MdQv8wSfaDIYakd2Li+WY/cjoTz+u5iS29wXxUHzX39PIer1MILuACcNiLU
Fq5O4cwPpUoxtD8oY4rpcWLrDEKXfbjc4fyW2wvOuCPduFb99rqx5h0/UlsCelfK
X6//0A0DH7mrjB3wLEJXoW1/Vt8Tnm/qPexCAksw2GOiTzGeVnSai6syxxPMZFZE
bihRH8FioXEbL65pIP3n6MzN5N8uYiniyeoIHHqmObvH9pQnAaapHoakXOhqBSH8
+Km1L8MFh/h3Hz/tAdjWEbQqQiCuf7pkxvCshoVnOvoit31dkQIDAQABo4IDZzCC
A2MwHQYDVR0OBBYEFLCs63556vv9LnbB6obvqcNB+Or/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZGJlMTU0ZTctZmZiMS0z
ZDA5LTgyOTUtMTVlY2NlZGVhMmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQEJkrQAwQG
Jr3AAwQGJsQAAwQEzYkwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr
BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz
Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAH8xu5PTlQxHCXcURGB+Hlg8BHZGjZqu
pJnpAQESCyTxOZlLWl9irsnF/vl5owNhGEB4YExFrt/JGYXo8Z2jp+Klz9T8ruU0
ObNHRv6mkpWYUAslVHgTgbON0tyfWJheJd0Vhb8BnMoBtaEG0HgQOrVMsovaeGqo
pd181uD5n3vcX0MOtpvSVemnOofob5wETTNFb23W0JZJmhsAtuPx3j2hESq3nOT6
s+cec3IHoLBR5pyCNgoRxYj6zLgP339GTzIBtsfHVP1hMUrO4sbmaY2Psm9pF0Qe
xFtqWLL5V3z7LM2TE1NDWs7K0RcVaI2r6Mu+XkQjeI4TkdF32MMNqaM=
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:42:39 2026 by rpki-client