Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/2d645b1b-c695-3b2e-a452-15cdbb302b6f.roa
File:                     2d645b1b-c695-3b2e-a452-15cdbb302b6f.roa (raw, json)
Hash identifier:          82bK6ndTX/Y7baY63erOlNe5DJEIuotJHjLlHWg/2Hg=
Subject key identifier:   69:AC:63:57:46:18:45:F9:EE:06:6A:AB:9F:B8:39:3F:9F:55:03:A4
Certificate issuer:       /CN=38a96a9a-6257-4a63-a149-21f6ad67ae15
Certificate serial:       010D0C9F4328584D703FD1CC2582BDD0A22E8380
Authority key identifier: 16:2E:10:44:7C:D5:AA:CF:BA:36:28:03:AB:44:E3:EA:0E:AD:49:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/2d645b1b-c695-3b2e-a452-15cdbb302b6f.roa
Signing time:             Wed 08 Apr 2026 13:00:33 +0000
ROA not before:           Wed 08 Apr 2026 13:00:33 +0000
ROA not after:            Tue 07 Jul 2026 13:00:33 +0000
asID:                     399717
IP address blocks:        23.179.176.0/24 maxlen: 24
                          64.112.106.0/24 maxlen: 24
                          2602:fc7e::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:3f:d1:cc:25:82:bd:d0:a2:2e:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38a96a9a-6257-4a63-a149-21f6ad67ae15
        Validity
            Not Before: Apr  8 13:00:33 2026 GMT
            Not After : Jul  7 13:00:33 2026 GMT
        Subject: CN=818fddf6-62cd-40d2-b5c4-b08157ea49a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8b:01:9f:ef:91:ac:8c:9a:22:dd:d6:0c:3e:
                    1f:cc:93:36:9d:53:a9:1d:f5:8f:e8:6c:f3:ec:fc:
                    39:79:6a:f5:9c:0c:e7:f8:29:bc:9d:1b:54:7c:73:
                    18:46:e8:5e:1a:99:03:84:42:50:3e:ee:a0:9d:c3:
                    5d:fc:9f:90:a3:f7:36:4d:9a:d7:a6:db:6c:08:f1:
                    a8:79:50:30:e2:37:2b:01:1b:9f:73:dd:08:7a:25:
                    77:06:80:e4:d6:14:d3:54:b7:b2:34:0b:ec:b6:dc:
                    61:eb:77:9f:e7:3e:9b:24:24:8a:04:4e:a4:f2:71:
                    86:1f:03:19:e0:7d:f4:46:f3:10:ca:83:a5:82:b8:
                    98:f2:73:6f:2e:0d:a5:96:ab:b7:bc:06:aa:ef:90:
                    77:92:db:36:41:be:a0:dc:10:08:00:3b:c3:de:f4:
                    8b:5d:49:d0:39:0d:75:ef:75:4c:b2:99:34:30:f1:
                    23:3c:ff:4f:b3:bf:09:a4:b7:32:9f:b6:c8:37:f6:
                    cf:d9:e5:3a:2c:a0:cf:78:8e:88:53:71:4f:a6:95:
                    ca:d3:f0:ad:7b:91:7a:20:62:0a:2c:96:bf:bf:bb:
                    e3:a1:58:13:5d:88:1f:32:01:83:5f:49:7e:e2:cb:
                    ba:4b:6f:81:7d:79:c8:41:93:8b:ba:e7:1a:12:34:
                    ae:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:AC:63:57:46:18:45:F9:EE:06:6A:AB:9F:B8:39:3F:9F:55:03:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/2d645b1b-c695-3b2e-a452-15cdbb302b6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.crl

            X509v3 Authority Key Identifier:
                keyid:16:2E:10:44:7C:D5:AA:CF:BA:36:28:03:AB:44:E3:EA:0E:AD:49:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.179.176.0/24
                  64.112.106.0/24
                IPv6:
                  2602:fc7e::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:f4:25:be:ea:96:d2:1a:b1:4d:50:1b:8d:cf:20:2a:62:70:
         33:6d:c6:35:59:5d:5b:ef:d0:48:a5:57:ad:33:ea:00:76:ef:
         68:b5:34:63:7e:05:d5:d9:c1:14:08:91:96:85:eb:9f:61:a2:
         38:1a:f9:75:a6:3f:a8:85:ea:1d:e6:93:2b:dc:3f:df:da:06:
         e5:42:05:ce:e2:f6:3f:dd:6e:65:50:24:ca:65:ef:48:b8:67:
         1c:6b:d9:e5:0b:a8:3f:0c:f1:d2:1f:e8:e6:56:05:94:f2:6b:
         a7:88:98:3a:99:94:b5:9a:2d:42:6f:c1:54:60:4b:0e:ee:9d:
         c9:89:6b:9d:d9:64:21:79:e5:ac:bc:e4:0a:99:d4:42:e4:f9:
         02:8f:a0:87:d6:b1:7b:39:3e:de:52:fb:b9:46:a9:6d:e4:4b:
         85:2a:09:e5:a5:22:39:1c:4e:42:c1:de:a4:f4:c6:4b:c4:74:
         e0:f7:67:9e:e5:90:2a:df:fa:b3:d3:af:85:cd:1f:d8:d3:41:
         82:59:c1:b9:9e:51:f8:b5:70:c7:36:0a:94:b8:8b:50:2e:9e:
         d2:d4:3a:d7:4b:0a:79:9e:81:99:58:10:42:e7:2f:38:56:d9:
         ff:90:29:23:c8:4c:cd:69:08:ac:f1:a7:89:50:65:c5:00:23:
         56:49:2a:72
-----BEGIN CERTIFICATE-----
MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWE1wP9HMJYK90KIug4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzhhOTZhOWEtNjI1Ny00YTYzLWExNDktMjFmNmFkNjdh
ZTE1MB4XDTI2MDQwODEzMDAzM1oXDTI2MDcwNzEzMDAzM1owLzEtMCsGA1UEAxMk
ODE4ZmRkZjYtNjJjZC00MGQyLWI1YzQtYjA4MTU3ZWE0OWEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYsBn++RrIyaIt3WDD4fzJM2nVOpHfWP6Gzz
7Pw5eWr1nAzn+Cm8nRtUfHMYRuheGpkDhEJQPu6gncNd/J+Qo/c2TZrXpttsCPGo
eVAw4jcrARufc90IeiV3BoDk1hTTVLeyNAvsttxh63ef5z6bJCSKBE6k8nGGHwMZ
4H30RvMQyoOlgriY8nNvLg2llqu3vAaq75B3kts2Qb6g3BAIADvD3vSLXUnQOQ11
73VMspk0MPEjPP9Ps78JpLcyn7bIN/bP2eU6LKDPeI6IU3FPppXK0/Cte5F6IGIK
LJa/v7vjoVgTXYgfMgGDX0l+4su6S2+BfXnIQZOLuucaEjSuhwIDAQABo4IDazCC
A2cwHQYDVR0OBBYEFGmsY1dGGEX57gZqq5+4OT+fVQOkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zOGE5
NmE5YS02MjU3LTRhNjMtYTE0OS0yMWY2YWQ2N2FlMTUvMmQ2NDViMWItYzY5NS0z
YjJlLWE0NTItMTVjZGJiMzAyYjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzhhOTZhOWEtNjI1Ny00YTYzLWEx
NDktMjFmNmFkNjdhZTE1LzM4YTk2YTlhLTYyNTctNGE2My1hMTQ5LTIxZjZhZDY3
YWUxNS5jcmwwHwYDVR0jBBgwFoAUFi4QRHzVqs+6NigDq0Tj6g6tSVwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8zOGE5NmE5YS02MjU3LTRhNjMtYTE0OS0yMWY2
YWQ2N2FlMTUuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF7OwAwQA
QHBqMA4EAgACMAgDBgAmAvx+ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBy9CW+6pbSGrFNUBuNzyAqYnAz
bcY1WV1b79BIpVetM+oAdu9otTRjfgXV2cEUCJGWheufYaI4Gvl1pj+oheod5pMr
3D/f2gblQgXO4vY/3W5lUCTKZe9IuGcca9nlC6g/DPHSH+jmVgWU8muniJg6mZS1
mi1Cb8FUYEsO7p3JiWud2WQheeWsvOQKmdRC5PkCj6CH1rF7OT7eUvu5Rqlt5EuF
KgnlpSI5HE5Cwd6k9MZLxHTg92ee5ZAq3/qz06+FzR/Y00GCWcG5nlH4tXDHNgqU
uItQLp7S1DrXSwp5noGZWBBC5y84Vtn/kCkjyEzNaQis8aeJUGXFACNWSSpy
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:09:15 2026 by rpki-client