Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1244254d-0342-3238-9dd8-69d6448ce527.roa
File:                     1244254d-0342-3238-9dd8-69d6448ce527.roa (raw, json)
Hash identifier:          RDQmJzQheH/LK/tJkIiqJ1ROWbsM//HJk64vWQkOGK8=
Subject key identifier:   50:F3:BE:EB:D0:66:2E:0C:41:7B:7C:8B:39:A1:93:07:68:83:F8:9C
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D57A665EEE7B4EC5395CD2E80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1244254d-0342-3238-9dd8-69d6448ce527.roa
Signing time:             Mon 30 Mar 2026 17:32:10 +0000
ROA not before:           Mon 30 Mar 2026 17:32:10 +0000
ROA not after:            Sun 28 Jun 2026 17:32:10 +0000
asID:                     275714
IP address blocks:        38.20.0.0/23 maxlen: 24
                          38.51.134.0/23 maxlen: 24
                          38.52.128.0/23 maxlen: 24
                          38.210.208.0/22 maxlen: 24
                          38.210.212.0/23 maxlen: 24
                          38.211.128.0/22 maxlen: 24
                          38.255.122.0/23 maxlen: 24
                          204.157.108.0/22 maxlen: 24
                          209.61.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:a6:65:ee:e7:b4:ec:53:95:cd:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Mar 30 17:32:10 2026 GMT
            Not After : Jun 28 17:32:10 2026 GMT
        Subject: CN=0cb4acea-d1a4-423e-b7a3-25637024e7c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:00:e7:ba:0e:bf:29:19:3d:80:fa:d4:ca:8a:
                    78:9e:5a:f9:a1:78:f8:5b:01:cc:88:8c:f2:de:74:
                    46:71:bd:8a:fb:b5:b9:71:ce:8f:d0:21:30:0e:0f:
                    56:18:34:12:68:8a:c1:bc:51:bf:1d:4d:8b:ae:69:
                    25:e1:16:29:fd:14:e6:ad:f3:4d:14:a6:d8:1a:0f:
                    18:b6:4c:f3:8f:01:e5:db:51:ef:89:a5:f0:df:cd:
                    86:cc:b4:ad:57:c2:9b:5c:98:e2:27:c3:e0:02:ea:
                    1d:96:96:69:64:ac:b8:df:07:4e:1c:eb:73:88:8d:
                    b0:fa:13:cc:6b:b0:6e:85:19:57:e2:cf:f2:7c:60:
                    2b:b6:59:a4:c8:bb:7b:7f:ce:45:d1:fd:2d:f6:28:
                    5f:12:be:43:23:67:39:28:6d:6e:06:79:75:92:fd:
                    d4:e4:75:9b:41:e7:4a:04:99:9d:2e:a3:3e:57:c5:
                    45:34:a9:1c:ab:8b:8f:9e:f7:9d:9d:72:ae:70:d6:
                    d7:d8:b5:35:71:ca:28:71:c0:78:5a:65:98:93:32:
                    74:3f:6c:c1:15:8a:49:d7:83:0f:69:cc:b2:31:b2:
                    95:ac:bb:89:bd:f4:b6:c1:5a:ae:c1:85:cc:51:cf:
                    81:50:9d:8c:22:ec:eb:2e:9b:fb:f4:02:71:1a:44:
                    f1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:F3:BE:EB:D0:66:2E:0C:41:7B:7C:8B:39:A1:93:07:68:83:F8:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1244254d-0342-3238-9dd8-69d6448ce527.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.20.0.0/23
                  38.51.134.0/23
                  38.52.128.0/23
                  38.210.208.0-38.210.213.255
                  38.211.128.0/22
                  38.255.122.0/23
                  204.157.108.0/22
                  209.61.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:1a:fb:97:49:85:f8:8e:dd:32:76:bd:24:9f:80:c0:0a:05:
         1e:a8:cf:94:7f:ca:b2:90:0c:93:6a:0c:9b:aa:9a:db:a2:53:
         21:3f:ca:d3:34:da:d7:9f:a9:1a:d1:e6:b9:fe:aa:cf:5b:b0:
         ed:1b:2b:3e:b2:b4:f2:b7:91:ac:ee:f5:ae:44:7b:dd:27:3a:
         f0:43:8e:cf:97:34:c4:32:2a:db:6c:e0:14:90:8e:b3:cb:0e:
         d3:15:4f:a5:ea:97:f3:3f:57:1e:ca:08:31:fa:92:63:04:3d:
         b7:13:2a:e3:68:cb:a1:af:32:ee:66:08:66:e1:38:8e:21:a2:
         0e:6d:17:5a:5b:4d:ad:2d:ce:dc:e8:71:4d:c9:86:19:bf:e1:
         1f:0b:14:b6:b6:d1:3e:a8:88:6e:7f:05:e2:ea:99:46:78:f8:
         72:22:44:c0:d8:32:bb:7d:81:3a:ae:34:00:1e:7f:f6:4a:2b:
         70:4c:e0:82:ce:60:22:1e:57:7a:08:4a:f0:e8:58:05:cb:a6:
         f7:82:22:a3:11:ad:a7:85:58:b9:88:75:05:8d:ac:51:f7:bd:
         96:d6:6f:c6:d3:7f:3f:65:07:c2:78:b5:0a:61:9f:ba:53:50:
         bf:db:6d:6a:62:41:7e:59:8a:99:9a:76:e0:3d:89:ad:bf:98:
         06:8f:b9:e0
-----BEGIN CERTIFICATE-----
MIIGdTCCBV2gAwIBAgIUAQ0Mn0MoWE1XpmXu57TsU5XNLoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDMzMDE3MzIxMFoXDTI2MDYyODE3MzIxMFowLzEtMCsGA1UEAxMk
MGNiNGFjZWEtZDFhNC00MjNlLWI3YTMtMjU2MzcwMjRlN2M5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuADnug6/KRk9gPrUyop4nlr5oXj4WwHMiIzy
3nRGcb2K+7W5cc6P0CEwDg9WGDQSaIrBvFG/HU2Lrmkl4RYp/RTmrfNNFKbYGg8Y
tkzzjwHl21HviaXw382GzLStV8KbXJjiJ8PgAuodlpZpZKy43wdOHOtziI2w+hPM
a7BuhRlX4s/yfGArtlmkyLt7f85F0f0t9ihfEr5DI2c5KG1uBnl1kv3U5HWbQedK
BJmdLqM+V8VFNKkcq4uPnvednXKucNbX2LU1ccooccB4WmWYkzJ0P2zBFYpJ14MP
acyyMbKVrLuJvfS2wVquwYXMUc+BUJ2MIuzrLpv79AJxGkTxnwIDAQABo4IDhzCC
A4MwHQYDVR0OBBYEFFDzvuvQZi4MQXt8izmhkwdog/icMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMTI0NDI1NGQtMDM0Mi0z
MjM4LTlkZDgtNjlkNjQ0OGNlNTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQBJhQAAwQB
JjOGAwQBJjSAMAwDBAQm0tADBAEm0tQDBAIm04ADBAEm/3oDBALMnWwDBALRPSQw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAfRr7l0mF+I7dMna9JJ+AwAoFHqjPlH/KspAMk2oMm6qa26JTIT/K
0zTa15+pGtHmuf6qz1uw7RsrPrK08reRrO71rkR73Sc68EOOz5c0xDIq22zgFJCO
s8sO0xVPpeqX8z9XHsoIMfqSYwQ9txMq42jLoa8y7mYIZuE4jiGiDm0XWltNrS3O
3OhxTcmGGb/hHwsUtrbRPqiIbn8F4uqZRnj4ciJEwNgyu32BOq40AB5/9korcEzg
gs5gIh5XeghK8OhYBcum94IioxGtp4VYuYh1BY2sUfe9ltZvxtN/P2UHwni1CmGf
ulNQv9ttamJBflmKmZp24D2Jrb+YBo+54A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:56:30 2026 by rpki-client