Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/13abd614-aafe-3255-80e6-96617ce57b27.roa
File:                     13abd614-aafe-3255-80e6-96617ce57b27.roa (raw, json)
Hash identifier:          S4k0X70hiS2ddGgTuRoLIFRhnIG/aLjY4hw2VGy7woo=
Subject key identifier:   32:BC:CA:1B:12:C7:C9:DA:C2:6F:03:DC:81:B4:8D:8C:2F:E6:16:DB
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584CB6B70DEA0B25B457D6644608
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/13abd614-aafe-3255-80e6-96617ce57b27.roa
Signing time:             Sun 01 Feb 2026 02:00:32 +0000
ROA not before:           Sun 01 Feb 2026 02:00:32 +0000
ROA not after:            Sat 02 May 2026 01:00:32 +0000
asID:                     265973
IP address blocks:        38.199.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b6:b7:0d:ea:0b:25:b4:57:d6:64:46:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Feb  1 02:00:32 2026 GMT
            Not After : May  2 01:00:32 2026 GMT
        Subject: CN=e8711f82-7858-4434-8174-511036b5da5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:16:85:98:f3:59:e3:b4:e9:5e:a0:f3:1d:48:
                    a4:ab:ef:7c:f4:66:0d:68:01:19:ab:c5:70:81:34:
                    71:0d:fe:bd:45:3d:ed:00:eb:6e:26:5b:9e:ba:0b:
                    1c:d8:ae:10:00:aa:18:bb:44:fa:76:11:12:31:36:
                    78:dd:16:9a:13:f1:e7:4f:ad:e3:e9:17:2a:15:25:
                    20:20:18:d7:9c:0f:4f:aa:88:7f:4e:97:df:43:27:
                    ff:e6:28:65:6b:12:ff:17:10:78:16:3f:94:23:b4:
                    46:22:6e:5f:23:5a:7e:2d:2e:4a:46:7a:8b:2b:5c:
                    41:fb:55:09:d4:89:28:77:a6:13:b2:a6:9d:66:a4:
                    41:83:b2:f8:ce:1c:e4:86:ef:9e:6e:31:b9:72:e0:
                    53:1a:f7:4f:00:63:cd:01:f5:b0:de:fd:95:c6:02:
                    5e:15:64:5a:3d:ec:79:b6:14:eb:2e:d7:18:0c:ae:
                    93:29:6b:fe:a7:58:7b:08:19:e6:bc:44:53:a4:59:
                    c8:d3:18:3c:3d:94:71:24:ff:87:df:00:26:66:a5:
                    65:d6:66:8b:8f:2b:6f:cb:42:03:96:35:0e:d4:f9:
                    c7:8f:c7:44:84:3f:7f:f7:c0:a9:61:4b:50:5c:53:
                    4b:6e:1a:54:0a:e2:1a:fd:c4:a1:08:4c:0d:3b:71:
                    3b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:BC:CA:1B:12:C7:C9:DA:C2:6F:03:DC:81:B4:8D:8C:2F:E6:16:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/13abd614-aafe-3255-80e6-96617ce57b27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.199.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:67:a9:91:13:2a:19:52:61:04:28:c1:c5:3c:11:21:dd:10:
         0f:a7:55:59:47:23:b4:c3:52:7b:91:38:8f:94:42:06:8f:e8:
         fc:68:6d:b9:fd:af:ee:cd:c8:06:b9:5f:d4:62:6b:55:fa:b8:
         f3:a5:e2:9d:35:7e:91:05:c5:24:60:fe:67:e0:e7:a5:21:6f:
         c0:c4:21:4a:cf:8a:1d:bf:a9:52:6f:00:46:49:70:6c:aa:f0:
         17:49:0e:81:02:c1:21:2c:33:95:c5:e9:91:e8:e5:54:95:dc:
         e5:20:6f:8d:d7:33:e3:b1:43:c7:85:95:cb:96:4b:fb:73:a3:
         d0:7a:cd:a2:46:d6:3c:f7:c6:c3:3d:6c:02:14:95:72:12:69:
         56:6f:9a:a7:33:b6:c8:67:89:05:e3:ba:f4:2c:2d:1c:04:7b:
         04:ad:cd:b9:8b:9a:67:50:a9:7e:1e:8d:6c:b1:e2:b4:52:c8:
         b5:83:a6:c2:69:e9:65:37:77:b0:28:9f:b5:d8:e7:93:2f:22:
         90:c5:b3:89:8c:c8:83:17:f8:82:77:ce:d7:f5:2b:05:22:40:
         d6:5c:fc:b4:6c:3e:84:9d:b3:f9:2f:58:be:e0:5b:02:14:cc:
         8b:76:ee:23:19:3a:b1:48:ec:b8:e3:f2:71:25:da:38:79:4e:
         66:6c:04:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy2tw3qCyW0V9ZkRggwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDIwMTAyMDAzMloXDTI2MDUwMjAxMDAzMlowLzEtMCsGA1UEAxMk
ZTg3MTFmODItNzg1OC00NDM0LTgxNzQtNTExMDM2YjVkYTVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxaFmPNZ47TpXqDzHUikq+989GYNaAEZq8Vw
gTRxDf69RT3tAOtuJlueugsc2K4QAKoYu0T6dhESMTZ43RaaE/HnT63j6RcqFSUg
IBjXnA9Pqoh/TpffQyf/5ihlaxL/FxB4Fj+UI7RGIm5fI1p+LS5KRnqLK1xB+1UJ
1Ikod6YTsqadZqRBg7L4zhzkhu+ebjG5cuBTGvdPAGPNAfWw3v2VxgJeFWRaPex5
thTrLtcYDK6TKWv+p1h7CBnmvERTpFnI0xg8PZRxJP+H3wAmZqVl1maLjytvy0ID
ljUO1PnHj8dEhD9/98CpYUtQXFNLbhpUCuIa/cShCEwNO3E7FQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDK8yhsSx8nawm8D3IG0jYwv5hbbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMTNhYmQ2MTQtYWFmZS0z
MjU1LTgwZTYtOTY2MTdjZTU3YjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJsdgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMZnqZETKhlSYQQowcU8ESHdEA+nVVlHI7TDUnuROI+UQgaP6Pxobbn9
r+7NyAa5X9Ria1X6uPOl4p01fpEFxSRg/mfg56Uhb8DEIUrPih2/qVJvAEZJcGyq
8BdJDoECwSEsM5XF6ZHo5VSV3OUgb43XM+OxQ8eFlcuWS/tzo9B6zaJG1jz3xsM9
bAIUlXISaVZvmqcztshniQXjuvQsLRwEewStzbmLmmdQqX4ejWyx4rRSyLWDpsJp
6WU3d7Aon7XY55MvIpDFs4mMyIMX+IJ3ztf1KwUiQNZc/LRsPoSds/kvWL7gWwIU
zIt27iMZOrFI7Ljj8nEl2jh5TmZsBPI=
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:23:37 2026 by rpki-client