Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/711a04de-db2a-4e54-8693-ca6a2c107ab4/38cc9063-fc37-349c-9675-3e8f6dafcc2a.roa
File:                     38cc9063-fc37-349c-9675-3e8f6dafcc2a.roa (raw, json)
Hash identifier:          UCTqRx6WNMfoCnvkq24J8fY44HaDZspSPVLBX1Gv9KM=
Subject key identifier:   24:4F:E3:FF:21:C9:4E:7C:73:BA:73:91:C9:66:5C:F4:CD:59:40:25
Certificate issuer:       /CN=711a04de-db2a-4e54-8693-ca6a2c107ab4
Certificate serial:       010D0C9F4328584E9BE51A2B260F9DB4E76A7840
Authority key identifier: 9E:4C:B6:A1:BA:B0:AD:5C:D2:C8:7D:DA:CF:9C:C2:79:6E:0B:36:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/711a04de-db2a-4e54-8693-ca6a2c107ab4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/711a04de-db2a-4e54-8693-ca6a2c107ab4/38cc9063-fc37-349c-9675-3e8f6dafcc2a.roa
Signing time:             Fri 24 Jul 2026 21:00:12 +0000
ROA not before:           Fri 24 Jul 2026 21:00:12 +0000
ROA not after:            Thu 22 Oct 2026 21:00:12 +0000
asID:                     400426
IP address blocks:        128.254.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/711a04de-db2a-4e54-8693-ca6a2c107ab4/711a04de-db2a-4e54-8693-ca6a2c107ab4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/711a04de-db2a-4e54-8693-ca6a2c107ab4/711a04de-db2a-4e54-8693-ca6a2c107ab4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/711a04de-db2a-4e54-8693-ca6a2c107ab4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:e5:1a:2b:26:0f:9d:b4:e7:6a:78:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=711a04de-db2a-4e54-8693-ca6a2c107ab4
        Validity
            Not Before: Jul 24 21:00:12 2026 GMT
            Not After : Oct 22 21:00:12 2026 GMT
        Subject: CN=37ab1197-f361-4a03-bed6-7aec1e182cde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:fd:6e:18:29:d8:b0:c1:a0:9e:24:fc:6f:9d:
                    a6:75:cf:c4:b3:59:c4:ea:af:7a:37:72:c5:d3:b2:
                    6c:5d:07:d3:80:b1:93:68:18:0a:a8:bf:93:b6:f0:
                    b7:ef:d1:54:82:49:16:1d:04:90:69:b8:03:04:08:
                    2d:61:b7:90:d6:71:f3:d1:ff:c9:eb:ed:58:37:ae:
                    e0:c6:4d:2b:a7:7a:5b:d1:c4:69:bd:a9:f9:61:da:
                    0c:03:1e:2c:3b:25:ef:ca:5b:03:77:77:ac:3b:6a:
                    cc:f4:0a:58:2e:1e:da:60:80:d0:e7:69:d4:f7:8c:
                    67:0c:33:bd:48:be:b2:59:05:8a:42:00:52:15:72:
                    15:a7:4d:41:e6:a6:07:d3:fb:0b:32:14:3b:06:c4:
                    34:dd:7f:d4:5d:1e:14:53:dd:b7:66:4c:72:26:2f:
                    06:55:bb:63:05:63:90:e9:39:96:f6:1c:55:f9:b9:
                    fe:ac:41:3e:4e:1b:9b:21:49:26:8d:4d:7f:aa:11:
                    75:16:3b:d2:29:ae:67:f1:97:49:04:b4:5f:fc:62:
                    cf:f0:35:5b:ff:ab:fe:ec:67:20:8f:d2:33:4a:61:
                    7f:0d:7e:57:ba:b9:ff:87:35:50:0e:00:cc:10:db:
                    a7:07:2c:48:51:49:d6:1a:41:f5:62:62:86:8a:7f:
                    96:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:4F:E3:FF:21:C9:4E:7C:73:BA:73:91:C9:66:5C:F4:CD:59:40:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/711a04de-db2a-4e54-8693-ca6a2c107ab4/38cc9063-fc37-349c-9675-3e8f6dafcc2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/711a04de-db2a-4e54-8693-ca6a2c107ab4/711a04de-db2a-4e54-8693-ca6a2c107ab4.crl

            X509v3 Authority Key Identifier:
                keyid:9E:4C:B6:A1:BA:B0:AD:5C:D2:C8:7D:DA:CF:9C:C2:79:6E:0B:36:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/711a04de-db2a-4e54-8693-ca6a2c107ab4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:d4:68:47:20:7d:2d:e6:a2:06:13:b1:97:6d:81:b8:31:2f:
         e5:95:08:3c:8d:42:8c:78:36:1e:08:df:b8:2a:84:62:81:db:
         15:d6:55:ba:7c:d7:38:0f:b0:be:d0:2a:f1:98:90:cf:ba:0c:
         84:4a:24:dd:c5:8f:3a:fe:c2:67:be:31:40:a1:68:80:a7:5d:
         1d:a6:e4:bf:0a:c8:88:64:46:80:3c:ae:81:7b:b5:ef:ad:65:
         69:e3:3b:e2:bb:7b:94:32:06:8a:f8:0a:7a:ce:94:de:38:21:
         11:ab:f3:f1:57:14:e0:2b:15:92:81:37:cf:7e:e8:78:59:21:
         c2:19:8f:8a:43:79:6f:e9:d4:e0:b8:61:0e:3c:92:8b:4d:27:
         61:1a:6b:74:1e:df:4b:bb:19:86:11:6b:ed:29:0e:b8:33:7b:
         ff:8b:7b:68:7c:f0:9a:67:d8:92:6c:92:7d:8c:06:00:ae:55:
         76:4f:38:6c:f6:52:2f:67:5d:ce:f0:27:21:f9:5b:c7:1c:11:
         6c:81:9e:1f:12:36:12:5f:8b:93:58:fa:be:3f:3c:96:4a:5f:
         d4:8c:c7:10:fc:ed:9e:c6:8c:e2:6e:01:e3:14:22:af:53:8d:
         67:18:94:84:0e:ac:32:d8:32:a1:80:77:f4:4d:33:b8:1c:86:
         53:f3:3f:b5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6b5RorJg+dtOdqeEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzExYTA0ZGUtZGIyYS00ZTU0LTg2OTMtY2E2YTJjMTA3
YWI0MB4XDTI2MDcyNDIxMDAxMloXDTI2MTAyMjIxMDAxMlowLzEtMCsGA1UEAxMk
MzdhYjExOTctZjM2MS00YTAzLWJlZDYtN2FlYzFlMTgyY2RlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgv1uGCnYsMGgniT8b52mdc/Es1nE6q96N3LF
07JsXQfTgLGTaBgKqL+TtvC379FUgkkWHQSQabgDBAgtYbeQ1nHz0f/J6+1YN67g
xk0rp3pb0cRpvan5YdoMAx4sOyXvylsDd3esO2rM9ApYLh7aYIDQ52nU94xnDDO9
SL6yWQWKQgBSFXIVp01B5qYH0/sLMhQ7BsQ03X/UXR4UU923ZkxyJi8GVbtjBWOQ
6TmW9hxV+bn+rEE+ThubIUkmjU1/qhF1FjvSKa5n8ZdJBLRf/GLP8DVb/6v+7Gcg
j9IzSmF/DX5Xurn/hzVQDgDMENunByxIUUnWGkH1YmKGin+WMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCRP4/8hyU58c7pzkclmXPTNWUAlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83MTFh
MDRkZS1kYjJhLTRlNTQtODY5My1jYTZhMmMxMDdhYjQvMzhjYzkwNjMtZmMzNy0z
NDljLTk2NzUtM2U4ZjZkYWZjYzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzExYTA0ZGUtZGIyYS00ZTU0LTg2
OTMtY2E2YTJjMTA3YWI0LzcxMWEwNGRlLWRiMmEtNGU1NC04NjkzLWNhNmEyYzEw
N2FiNC5jcmwwHwYDVR0jBBgwFoAUnky2obqwrVzSyH3az5zCeW4LNp0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83MTFhMDRkZS1kYjJhLTRlNTQtODY5My1jYTZh
MmMxMDdhYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgP6IMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC7UaEcgfS3mogYTsZdtgbgxL+WVCDyNQox4Nh4I37gqhGKB2xXWVbp8
1zgPsL7QKvGYkM+6DIRKJN3Fjzr+wme+MUChaICnXR2m5L8KyIhkRoA8roF7te+t
ZWnjO+K7e5QyBor4CnrOlN44IRGr8/FXFOArFZKBN89+6HhZIcIZj4pDeW/p1OC4
YQ48kotNJ2Eaa3Qe30u7GYYRa+0pDrgze/+Le2h88Jpn2JJskn2MBgCuVXZPOGz2
Ui9nXc7wJyH5W8ccEWyBnh8SNhJfi5NY+r4/PJZKX9SMxxD87Z7GjOJuAeMUIq9T
jWcYlIQOrDLYMqGAd/RNM7gchlPzP7U=
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:44:04 2026 by rpki-client