Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe/38d1f288-45f9-3c96-95e5-06926d86ac16.roa
File:                     38d1f288-45f9-3c96-95e5-06926d86ac16.roa (raw, json)
Hash identifier:          fJlrdU9os75vnqN0mCyohOl7+QmpJys4jgxBKX311pA=
Subject key identifier:   2F:EC:0B:9A:92:54:4A:78:88:06:25:82:D9:76:CA:63:85:BB:F9:10
Certificate issuer:       /CN=7a66e7fb-89d9-467a-83cb-031bb17ccfbe
Certificate serial:       010D0C9F4328584E97B50CA4A92990B38CD89C40
Authority key identifier: 9A:ED:B1:FF:91:E4:42:89:3D:78:4D:56:EF:CB:03:06:EB:CE:E9:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe/38d1f288-45f9-3c96-95e5-06926d86ac16.roa
Signing time:             Thu 23 Jul 2026 09:00:11 +0000
ROA not before:           Thu 23 Jul 2026 09:00:11 +0000
ROA not after:            Wed 21 Oct 2026 09:00:11 +0000
asID:                     13335
IP address blocks:        131.219.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe/7a66e7fb-89d9-467a-83cb-031bb17ccfbe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe/7a66e7fb-89d9-467a-83cb-031bb17ccfbe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:97:b5:0c:a4:a9:29:90:b3:8c:d8:9c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a66e7fb-89d9-467a-83cb-031bb17ccfbe
        Validity
            Not Before: Jul 23 09:00:11 2026 GMT
            Not After : Oct 21 09:00:11 2026 GMT
        Subject: CN=7f87294d-bd72-4854-be4b-83fcfbe87f55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:83:2e:f6:24:8f:2b:2a:6e:92:b9:e6:30:1c:
                    2f:c7:6f:95:2e:06:5d:bd:a8:91:dd:3e:ed:88:77:
                    1e:ae:e8:a8:f3:c5:17:6b:11:82:6b:9f:df:0b:3c:
                    2a:d7:dc:06:9e:f8:30:38:a9:17:2a:de:26:04:6a:
                    32:36:1b:66:e8:83:14:1f:75:b4:8a:1f:56:54:1c:
                    db:5f:dc:29:26:f3:47:71:9e:9d:fe:23:8e:f8:b8:
                    a5:3d:01:c3:bc:cf:8c:d4:6c:53:b7:b1:05:d2:18:
                    45:69:3c:8a:46:f6:fa:ce:57:59:61:d5:60:82:f4:
                    c7:8f:6e:0c:04:4c:2d:f4:3b:17:cc:01:ed:1c:26:
                    e1:7a:86:c5:1e:75:17:d2:36:f5:a9:f8:f5:4f:47:
                    ee:eb:8c:7b:af:44:07:7c:d1:70:ae:86:53:6c:4c:
                    92:c3:d8:1a:16:a6:de:f8:26:a9:6a:0d:f2:4d:fd:
                    68:86:1a:07:ed:ba:0b:9d:b4:8d:22:43:4e:7c:31:
                    46:a1:e7:88:9e:7c:54:10:3c:5d:26:27:58:41:79:
                    d4:7a:ee:c3:11:19:34:5e:6b:73:42:cf:55:a3:ad:
                    b4:4d:71:59:c1:22:3a:41:a1:d3:39:8a:43:26:e8:
                    ca:df:6f:3b:2d:12:24:f7:b4:9b:37:4c:70:8d:86:
                    10:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:EC:0B:9A:92:54:4A:78:88:06:25:82:D9:76:CA:63:85:BB:F9:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe/38d1f288-45f9-3c96-95e5-06926d86ac16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe/7a66e7fb-89d9-467a-83cb-031bb17ccfbe.crl

            X509v3 Authority Key Identifier:
                keyid:9A:ED:B1:FF:91:E4:42:89:3D:78:4D:56:EF:CB:03:06:EB:CE:E9:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.219.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:c3:59:5b:5e:76:d5:53:f0:5e:7a:57:65:88:94:0a:ed:5f:
         af:c4:54:8f:a2:a6:59:5f:98:7c:34:96:53:30:a2:68:77:28:
         ff:3d:1c:81:91:92:c9:5c:df:5d:92:f8:31:6c:c1:1b:da:29:
         b8:9e:21:e4:1d:ee:3a:8c:11:5d:ec:31:13:68:51:da:86:87:
         a8:c8:f2:4f:c3:3b:64:f8:f1:a6:9a:68:85:1c:14:34:02:15:
         8a:58:ab:af:b2:aa:47:66:ed:da:ad:2c:b6:51:45:a4:06:87:
         7a:9f:83:f9:79:c8:47:56:90:87:0f:3b:94:0c:d5:83:7d:39:
         f5:06:74:87:8e:7f:ad:cf:db:d2:dd:3d:4c:cd:fe:c4:49:6e:
         10:7a:de:50:4d:bc:7f:72:fd:22:84:c7:9b:8c:dd:cf:95:bb:
         14:b4:8c:cd:0e:40:d4:bd:e6:25:12:eb:ff:de:eb:93:32:2c:
         fe:93:63:cd:f2:f7:ab:7c:99:b3:37:2f:e4:8b:ad:11:9c:ae:
         f1:80:7d:45:96:a1:f4:dd:2b:1f:b3:9f:23:08:b1:16:c9:56:
         54:32:fc:8a:e8:c0:d2:53:19:af:20:62:d8:77:29:7b:79:a1:
         7d:ed:b4:27:f5:57:c6:a2:4d:b5:96:c6:e0:e6:4a:4b:d7:8c:
         b3:40:b0:4e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6XtQykqSmQs4zYnEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2E2NmU3ZmItODlkOS00NjdhLTgzY2ItMDMxYmIxN2Nj
ZmJlMB4XDTI2MDcyMzA5MDAxMVoXDTI2MTAyMTA5MDAxMVowLzEtMCsGA1UEAxMk
N2Y4NzI5NGQtYmQ3Mi00ODU0LWJlNGItODNmY2ZiZTg3ZjU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoMu9iSPKypukrnmMBwvx2+VLgZdvaiR3T7t
iHceruio88UXaxGCa5/fCzwq19wGnvgwOKkXKt4mBGoyNhtm6IMUH3W0ih9WVBzb
X9wpJvNHcZ6d/iOO+LilPQHDvM+M1GxTt7EF0hhFaTyKRvb6zldZYdVggvTHj24M
BEwt9DsXzAHtHCbheobFHnUX0jb1qfj1T0fu64x7r0QHfNFwroZTbEySw9gaFqbe
+Capag3yTf1ohhoH7boLnbSNIkNOfDFGoeeInnxUEDxdJidYQXnUeu7DERk0Xmtz
Qs9Vo620TXFZwSI6QaHTOYpDJujK3287LRIk97SbN0xwjYYQ9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC/sC5qSVEp4iAYlgtl2ymOFu/kQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83YTY2
ZTdmYi04OWQ5LTQ2N2EtODNjYi0wMzFiYjE3Y2NmYmUvMzhkMWYyODgtNDVmOS0z
Yzk2LTk1ZTUtMDY5MjZkODZhYzE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvN2E2NmU3ZmItODlkOS00NjdhLTgz
Y2ItMDMxYmIxN2NjZmJlLzdhNjZlN2ZiLTg5ZDktNDY3YS04M2NiLTAzMWJiMTdj
Y2ZiZS5jcmwwHwYDVR0jBBgwFoAUmu2x/5HkQok9eE1W78sDBuvO6b0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS83YTY2ZTdmYi04OWQ5LTQ2N2EtODNjYi0wMzFi
YjE3Y2NmYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg9uYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF/DWVtedtVT8F56V2WIlArtX6/EVI+ipllfmHw0llMwomh3KP89HIGR
kslc312S+DFswRvaKbieIeQd7jqMEV3sMRNoUdqGh6jI8k/DO2T48aaaaIUcFDQC
FYpYq6+yqkdm7dqtLLZRRaQGh3qfg/l5yEdWkIcPO5QM1YN9OfUGdIeOf63P29Ld
PUzN/sRJbhB63lBNvH9y/SKEx5uM3c+VuxS0jM0OQNS95iUS6//e65MyLP6TY83y
96t8mbM3L+SLrRGcrvGAfUWWofTdKx+znyMIsRbJVlQy/IrowNJTGa8gYth3KXt5
oX3ttCf1V8aiTbWWxuDmSkvXjLNAsE4=
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:24:53 2026 by rpki-client