Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0fa937ac-ea58-3b36-b444-abe3eb1e0a27.roa
File:                     0fa937ac-ea58-3b36-b444-abe3eb1e0a27.roa (raw, json)
Hash identifier:          LGIwTm3w7PjgmZyi3c18QybmtC0/eHk90KkV6l0/sUo=
Subject key identifier:   CB:EF:73:2D:1C:F9:8F:DD:1C:BD:E9:1C:AE:03:E8:ED:C5:37:DA:0F
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584EA79999AABB6BF7CDBFE7E250
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0fa937ac-ea58-3b36-b444-abe3eb1e0a27.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     46783
IP address blocks:        38.20.184.0/21 maxlen: 24
                          38.45.232.0/21 maxlen: 24
                          38.57.234.0/23 maxlen: 24
                          38.64.56.0/21 maxlen: 24
                          38.65.88.0/21 maxlen: 24
                          38.71.18.0/24 maxlen: 24
                          38.114.88.0/21 maxlen: 24
                          38.123.112.0/21 maxlen: 24
                          38.146.29.0/24 maxlen: 24
                          38.146.30.0/24 maxlen: 24
                          38.255.16.0/23 maxlen: 24
                          154.50.110.0/24 maxlen: 24
                          154.51.40.0/23 maxlen: 24
                          154.53.74.0/23 maxlen: 24
                          209.146.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:99:99:aa:bb:6b:f7:cd:bf:e7:e2:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=143456ae-54af-4652-a1d9-2f237cda565e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:77:2e:92:4f:b9:80:98:d1:17:27:3d:61:79:
                    d4:9c:b3:2e:a3:5c:d4:a9:6b:9e:f4:1b:19:c2:ea:
                    b6:07:92:ff:3a:3c:1a:ba:27:90:54:1f:63:1e:21:
                    eb:4f:f6:bc:22:2d:67:3f:4a:a0:33:4e:55:f6:01:
                    e8:69:41:83:e9:6b:1a:41:33:8d:04:30:9c:3a:55:
                    7a:a0:da:a7:39:5e:45:67:8f:d3:44:2e:98:4f:70:
                    f3:1c:e5:1b:db:32:0b:c0:99:94:0a:38:df:57:22:
                    bb:3b:59:72:c2:10:87:30:5b:41:ad:25:4c:15:6f:
                    53:e5:d9:a6:6e:0a:0c:dc:12:b2:19:b9:79:6d:2e:
                    22:d1:f7:97:ce:c8:3b:e6:82:0b:a4:bd:80:02:46:
                    ad:2e:75:d7:36:d3:29:c1:8f:30:65:d8:4a:df:22:
                    99:fe:f2:5f:b2:e0:bf:54:92:77:17:ed:7a:db:98:
                    e4:f4:d4:a9:9f:7f:2b:b9:76:92:8b:26:df:b1:8d:
                    3c:4b:7a:98:55:11:5f:57:ed:57:75:aa:3d:12:01:
                    c4:b3:45:61:8b:6e:77:fa:21:fe:d6:1f:fc:0b:11:
                    e6:9d:c6:fc:0b:7c:fc:36:1e:4b:4b:4f:a8:f0:11:
                    b6:dc:4c:95:6e:d1:e0:a9:65:ab:24:7f:9b:10:a9:
                    31:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:EF:73:2D:1C:F9:8F:DD:1C:BD:E9:1C:AE:03:E8:ED:C5:37:DA:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0fa937ac-ea58-3b36-b444-abe3eb1e0a27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.20.184.0/21
                  38.45.232.0/21
                  38.57.234.0/23
                  38.64.56.0/21
                  38.65.88.0/21
                  38.71.18.0/24
                  38.114.88.0/21
                  38.123.112.0/21
                  38.146.29.0-38.146.30.255
                  38.255.16.0/23
                  154.50.110.0/24
                  154.51.40.0/23
                  154.53.74.0/23
                  209.146.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:06:f5:42:bb:af:b7:2a:63:8f:74:30:df:f2:8c:a6:b1:8c:
         7b:ba:2c:09:6c:d1:e3:47:15:c5:b3:09:fe:19:c6:a4:08:9d:
         ed:e9:68:55:b5:13:4b:3d:9b:c2:69:11:a7:5b:b7:e1:31:c0:
         2e:f6:c8:34:ba:35:13:0b:48:0b:0e:01:e5:26:b1:0f:67:fa:
         dd:d1:c1:a6:a3:48:24:24:2c:85:a0:39:5e:3b:5d:3d:67:c6:
         91:95:3f:95:f7:db:17:a5:8f:42:f1:44:03:fa:49:0c:73:9b:
         d1:d1:a5:73:9c:ab:77:a2:66:28:94:14:4e:78:2a:17:c6:5b:
         c3:3c:6e:ca:00:7c:f3:04:55:67:d4:8f:cc:da:23:8c:17:15:
         04:53:88:c3:13:e0:3c:a1:71:66:15:8c:23:4e:f0:06:47:a2:
         b0:98:90:97:e0:4a:45:55:48:b7:0e:5a:fe:4d:35:b6:60:b5:
         e9:12:69:34:7a:ac:62:38:cd:26:04:99:10:f2:ca:ae:32:b4:
         5d:77:8f:91:79:76:21:12:69:23:91:0b:b5:49:30:cf:b6:24:
         82:9a:1f:07:40:a8:46:8b:ce:da:ae:ee:fc:e2:83:37:ae:c1:
         dd:4d:ca:3b:2e:31:dc:30:0a:94:d7:a3:78:39:99:93:37:23:
         0d:49:4e:f9
-----BEGIN CERTIFICATE-----
MIIGmTCCBYGgAwIBAgIUAQ0Mn0MoWE6nmZmqu2v3zb/n4lAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MTQzNDU2YWUtNTRhZi00NjUyLWExZDktMmYyMzdjZGE1NjVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXcukk+5gJjRFyc9YXnUnLMuo1zUqWue9BsZ
wuq2B5L/OjwauieQVB9jHiHrT/a8Ii1nP0qgM05V9gHoaUGD6WsaQTONBDCcOlV6
oNqnOV5FZ4/TRC6YT3DzHOUb2zILwJmUCjjfVyK7O1lywhCHMFtBrSVMFW9T5dmm
bgoM3BKyGbl5bS4i0feXzsg75oILpL2AAkatLnXXNtMpwY8wZdhK3yKZ/vJfsuC/
VJJ3F+1625jk9NSpn38ruXaSiybfsY08S3qYVRFfV+1Xdao9EgHEs0Vhi253+iH+
1h/8CxHmncb8C3z8Nh5LS0+o8BG23EyVbtHgqWWrJH+bEKkxZwIDAQABo4IDqzCC
A6cwHQYDVR0OBBYEFMvvcy0c+Y/dHL3pHK4D6O3FN9oPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMGZhOTM3YWMtZWE1OC0z
YjM2LWI0NDQtYWJlM2ViMWUwYTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMHUGCCsGAQUFBwEHAQH/BGYwZDBiBAIAATBcAwQDJhS4AwQD
Ji3oAwQBJjnqAwQDJkA4AwQDJkFYAwQAJkcSAwQDJnJYAwQDJntwMAwDBAAmkh0D
BAAmkh4DBAEm/xADBACaMm4DBAGaMygDBAGaNUoDBADRknQwVAYDVR0gAQH/BEow
SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l
dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAKAb1
Qruvtypjj3Qw3/KMprGMe7osCWzR40cVxbMJ/hnGpAid7eloVbUTSz2bwmkRp1u3
4THALvbINLo1EwtICw4B5SaxD2f63dHBpqNIJCQshaA5XjtdPWfGkZU/lffbF6WP
QvFEA/pJDHOb0dGlc5yrd6JmKJQUTngqF8ZbwzxuygB88wRVZ9SPzNojjBcVBFOI
wxPgPKFxZhWMI07wBkeisJiQl+BKRVVItw5a/k01tmC16RJpNHqsYjjNJgSZEPLK
rjK0XXePkXl2IRJpI5ELtUkwz7YkgpofB0CoRovO2q7u/OKDN67B3U3KOy4x3DAK
lNejeDmZkzcjDUlO+Q==
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:23:41 2026 by rpki-client