Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ed0c3ed2-7152-369f-a890-a099c69fcd84.roa
File:                     ed0c3ed2-7152-369f-a890-a099c69fcd84.roa (raw, json)
Hash identifier:          HNMZXrKQUIkXWy9v5kW+os6oOVvRhge3h7tfI4mf1wo=
Subject key identifier:   5F:18:24:F1:0A:E2:E4:39:EC:7A:D9:2D:13:B9:E3:AD:51:2B:06:45
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F48CA54BD899405EBA4C5CE60
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ed0c3ed2-7152-369f-a890-a099c69fcd84.roa
Signing time:             Thu 24 Sep 2026 19:21:19 +0000
ROA not before:           Thu 24 Sep 2026 19:21:19 +0000
ROA not after:            Wed 23 Dec 2026 20:21:19 +0000
asID:                     262550
IP address blocks:        38.43.70.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:48:ca:54:bd:89:94:05:eb:a4:c5:ce:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep 24 19:21:19 2026 GMT
            Not After : Dec 23 20:21:19 2026 GMT
        Subject: CN=2a7038d7-a4e3-4dc5-934e-381d14ca5d39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:4d:81:a6:c7:6d:2d:49:3d:08:37:a4:e1:50:
                    ac:2a:15:cb:2e:83:0a:41:3e:62:3f:df:c3:38:51:
                    4d:ab:4d:3c:1b:3b:d3:74:92:c8:64:08:a2:c1:ce:
                    94:24:a8:84:b1:3f:7f:23:67:30:30:04:81:87:f3:
                    df:f4:fd:34:7e:3e:43:f8:c3:bd:33:2e:0f:17:0d:
                    44:f3:6f:80:cf:bd:ca:4f:05:ad:8e:77:a0:73:6a:
                    4c:c8:43:a4:8a:cb:87:10:8c:94:c0:46:b0:77:c0:
                    f6:2e:4d:ec:3e:b7:68:3e:9a:2f:ec:c2:4f:8e:7f:
                    7b:39:05:8a:01:28:e2:f0:33:1e:58:51:9d:44:9d:
                    0c:ee:64:89:3d:8a:56:0f:3a:bb:e6:2c:88:34:90:
                    79:b0:7f:57:07:89:8e:8c:24:cb:d4:4b:36:8e:36:
                    96:a6:8a:f5:c8:c3:5c:dd:a7:e0:fa:3f:ad:f6:ad:
                    e6:d8:94:ae:b4:a7:52:2c:2b:60:19:0e:41:27:ce:
                    f9:8f:75:28:ad:d2:5c:bc:a7:7c:62:8e:db:eb:45:
                    7d:0d:90:0c:89:85:58:d2:17:5f:dc:d4:93:0b:1d:
                    c9:dd:6a:a0:75:2a:11:9e:a3:76:67:17:0d:97:f0:
                    7f:27:dc:ec:6d:34:cf:ab:33:fc:af:e6:ac:84:f6:
                    ea:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:18:24:F1:0A:E2:E4:39:EC:7A:D9:2D:13:B9:E3:AD:51:2B:06:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ed0c3ed2-7152-369f-a890-a099c69fcd84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.43.70.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:69:3f:cd:0d:77:34:b5:32:52:e5:af:d8:a3:8f:0a:28:80:
         f6:ad:6d:d2:03:f7:69:df:42:e3:69:7b:e5:fb:9e:79:69:06:
         12:73:bd:f4:60:b1:84:e3:b1:bb:47:46:1f:74:1a:4a:42:d2:
         e9:d4:f7:02:52:45:a5:1a:2a:87:48:f9:08:34:9b:3f:08:b5:
         33:2a:3b:18:7c:cb:18:fd:7b:3e:b6:9f:32:78:38:f6:88:52:
         50:76:4a:23:ca:6c:35:f8:07:9d:23:93:5a:d1:cd:b5:79:fb:
         ee:b8:16:fe:a7:7b:ff:05:73:45:ea:f8:bc:0c:99:fb:aa:ac:
         c3:1e:88:9e:6b:f8:62:33:a5:e8:29:76:a6:ff:dd:94:b7:01:
         57:dd:64:f3:fc:f6:3a:9f:f4:16:24:3d:9c:a4:a8:f2:a3:50:
         92:52:59:69:b6:6e:17:5e:82:9a:04:3b:85:25:40:3a:0b:31:
         e4:ef:47:d5:ad:37:8f:25:54:7a:63:0f:ef:14:fd:88:11:69:
         2f:cc:24:02:4c:09:2e:81:43:f6:03:29:07:24:1c:4c:f3:98:
         c9:10:b6:71:7c:18:50:6b:39:36:03:04:40:fc:af:78:b9:35:
         20:ca:c6:e8:1a:45:ca:39:58:48:8f:63:ce:de:f5:99:fe:2f:
         0d:eb:4f:33
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9IylS9iZQF66TFzmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDkyNDE5MjExOVoXDTI2MTIyMzIwMjExOVowLzEtMCsGA1UEAxMk
MmE3MDM4ZDctYTRlMy00ZGM1LTkzNGUtMzgxZDE0Y2E1ZDM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgk2BpsdtLUk9CDek4VCsKhXLLoMKQT5iP9/D
OFFNq008GzvTdJLIZAiiwc6UJKiEsT9/I2cwMASBh/Pf9P00fj5D+MO9My4PFw1E
82+Az73KTwWtjnegc2pMyEOkisuHEIyUwEawd8D2Lk3sPrdoPpov7MJPjn97OQWK
ASji8DMeWFGdRJ0M7mSJPYpWDzq75iyINJB5sH9XB4mOjCTL1Es2jjaWpor1yMNc
3afg+j+t9q3m2JSutKdSLCtgGQ5BJ875j3UordJcvKd8Yo7b60V9DZAMiYVY0hdf
3NSTCx3J3WqgdSoRnqN2ZxcNl/B/J9zsbTTPqzP8r+ashPbqxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF8YJPEK4uQ57HrZLRO5461RKwZFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZWQwYzNlZDItNzE1Mi0z
NjlmLWE4OTAtYTA5OWM2OWZjZDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJitGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD1pP80NdzS1MlLlr9ijjwoogPatbdID92nfQuNpe+X7nnlpBhJzvfRg
sYTjsbtHRh90GkpC0unU9wJSRaUaKodI+Qg0mz8ItTMqOxh8yxj9ez62nzJ4OPaI
UlB2SiPKbDX4B50jk1rRzbV5++64Fv6ne/8Fc0Xq+LwMmfuqrMMeiJ5r+GIzpegp
dqb/3ZS3AVfdZPP89jqf9BYkPZykqPKjUJJSWWm2bhdegpoEO4UlQDoLMeTvR9Wt
N48lVHpjD+8U/YgRaS/MJAJMCS6BQ/YDKQckHEzzmMkQtnF8GFBrOTYDBED8r3i5
NSDKxugaRco5WEiPY87e9Zn+Lw3rTzM=
-----END CERTIFICATE-----
Generated at Fri Sep 25 17:04:59 2026 by rpki-client