Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/fb972b12-802e-3973-880e-d35ad80cf075.roa
File:                     fb972b12-802e-3973-880e-d35ad80cf075.roa (raw, json)
Hash identifier:          IBKkfgGKQvuPqGqEzzuTSxdkBZu7cBbBb4btajLkk3s=
Subject key identifier:   DA:27:32:2C:9E:64:A4:41:68:C8:8F:59:99:7A:C3:53:D4:69:36:29
Certificate issuer:       /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial:       010D0C9F4328584DE84B3538315A5FF3E8286400
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/fb972b12-802e-3973-880e-d35ad80cf075.roa
Signing time:             Thu 21 May 2026 13:00:32 +0000
ROA not before:           Thu 21 May 2026 13:00:32 +0000
ROA not after:            Wed 19 Aug 2026 13:00:32 +0000
asID:                     137922
IP address blocks:        138.43.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:4b:35:38:31:5a:5f:f3:e8:28:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
        Validity
            Not Before: May 21 13:00:32 2026 GMT
            Not After : Aug 19 13:00:32 2026 GMT
        Subject: CN=ecb2d634-b576-4710-b6e1-8b0227aa3639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:41:fc:53:a8:b7:d2:b9:59:1d:4d:45:ee:f0:
                    e0:03:99:9c:a5:ff:78:4b:56:e3:6a:98:0e:2a:d4:
                    6c:a8:06:27:c5:60:9e:ef:7d:8b:a9:a9:c3:ce:ed:
                    2e:0c:c4:ad:5d:ac:20:3f:40:ea:0c:ac:0e:b9:0e:
                    a3:1f:af:57:f5:8b:6c:e5:f9:18:13:18:cc:d3:66:
                    14:fb:fd:ec:dd:5d:f5:cc:1e:71:c6:91:9a:52:26:
                    b7:43:21:0d:7b:de:be:8c:9f:76:72:da:73:e2:98:
                    2d:91:77:de:d4:6c:7c:b9:d0:87:00:c3:ae:33:1b:
                    50:55:f3:0a:eb:2e:a5:02:72:d2:c7:69:99:fa:4e:
                    86:d6:02:02:43:74:23:ef:70:ca:bc:91:3a:5d:92:
                    f5:c8:fe:15:00:29:9e:67:99:7e:a8:68:e4:68:6b:
                    41:9f:6e:3b:82:92:24:e1:1d:96:b6:17:85:75:c5:
                    6c:d8:55:e7:ca:c3:51:da:0e:3f:5c:cc:35:97:87:
                    45:f8:ad:82:15:f6:e7:e9:3d:44:1e:22:f4:e0:05:
                    cd:35:fe:a7:e4:36:4d:bd:ba:09:4b:89:17:63:65:
                    d9:29:56:d8:05:60:5e:a9:32:f3:60:60:3f:47:c5:
                    6a:aa:b9:09:8e:e8:f3:84:c3:84:39:68:9b:c0:02:
                    79:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:27:32:2C:9E:64:A4:41:68:C8:8F:59:99:7A:C3:53:D4:69:36:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/fb972b12-802e-3973-880e-d35ad80cf075.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl

            X509v3 Authority Key Identifier:
                keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.43.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:c5:76:eb:29:bc:fb:2c:3f:f6:df:47:86:a2:31:97:6d:ca:
         e5:72:c2:8a:63:92:14:bb:a1:ed:49:29:86:b9:a7:29:08:ff:
         25:90:d6:fc:db:f0:0a:fe:c7:ac:b0:f0:ab:85:68:8b:7c:48:
         bd:ee:ff:00:f5:c6:6e:5a:3e:98:8c:48:78:b0:1e:99:53:3b:
         ec:7a:1f:bc:8c:63:48:3f:dd:c6:80:fe:ca:39:a9:a9:e5:70:
         bc:b6:c6:30:95:3c:57:09:af:08:93:3a:c0:1d:8e:1a:ff:37:
         51:33:fa:58:35:54:ff:b3:64:db:ae:40:a3:b6:7b:ea:b4:3a:
         e4:91:86:64:35:5a:c6:a2:ca:95:53:bd:33:35:aa:4f:60:5b:
         1c:1d:74:3d:68:82:7a:e3:c2:4f:1c:07:b9:03:56:d4:b0:41:
         8c:5e:f1:a0:c8:b9:02:b3:b5:5f:99:d7:c2:30:6c:20:96:4f:
         d0:d5:55:45:9b:d6:82:95:6c:b3:54:de:ad:13:ed:b7:60:67:
         8a:aa:c4:00:21:56:4a:a3:61:8f:f5:f1:f8:3f:dc:5a:27:b0:
         77:05:5b:e1:ab:08:c6:13:52:08:49:a2:c9:36:b1:f8:d2:f4:
         8c:f4:6e:6b:0b:b6:c6:14:61:20:ad:5b:aa:10:b5:8e:46:a7:
         86:95:90:b6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3oSzU4MVpf8+goZAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk
YTkzMB4XDTI2MDUyMTEzMDAzMloXDTI2MDgxOTEzMDAzMlowLzEtMCsGA1UEAxMk
ZWNiMmQ2MzQtYjU3Ni00NzEwLWI2ZTEtOGIwMjI3YWEzNjM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0H8U6i30rlZHU1F7vDgA5mcpf94S1bjapgO
KtRsqAYnxWCe732LqanDzu0uDMStXawgP0DqDKwOuQ6jH69X9Yts5fkYExjM02YU
+/3s3V31zB5xxpGaUia3QyENe96+jJ92ctpz4pgtkXfe1Gx8udCHAMOuMxtQVfMK
6y6lAnLSx2mZ+k6G1gICQ3Qj73DKvJE6XZL1yP4VACmeZ5l+qGjkaGtBn247gpIk
4R2WtheFdcVs2FXnysNR2g4/XMw1l4dF+K2CFfbn6T1EHiL04AXNNf6n5DZNvboJ
S4kXY2XZKVbYBWBeqTLzYGA/R8VqqrkJjujzhMOEOWibwAJ5kwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNonMiyeZKRBaMiPWZl6w1PUaTYpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0
N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvZmI5NzJiMTItODAyZS0z
OTczLTg4MGUtZDM1YWQ4MGNmMDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0
NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1
ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj
OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiitgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADzFduspvPssP/bfR4aiMZdtyuVywopjkhS7oe1JKYa5pykI/yWQ1vzb
8Ar+x6yw8KuFaIt8SL3u/wD1xm5aPpiMSHiwHplTO+x6H7yMY0g/3caA/so5qanl
cLy2xjCVPFcJrwiTOsAdjhr/N1Ez+lg1VP+zZNuuQKO2e+q0OuSRhmQ1WsaiypVT
vTM1qk9gWxwddD1ognrjwk8cB7kDVtSwQYxe8aDIuQKztV+Z18IwbCCWT9DVVUWb
1oKVbLNU3q0T7bdgZ4qqxAAhVkqjYY/18fg/3FonsHcFW+GrCMYTUghJosk2sfjS
9Iz0bmsLtsYUYSCtW6oQtY5Gp4aVkLY=
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:05:22 2026 by rpki-client