Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1992d582-1056-390d-b210-75e8a154886c.roa
File:                     1992d582-1056-390d-b210-75e8a154886c.roa (raw, json)
Hash identifier:          02jf4ASP1jTjN86hVpL4ldDUNenGPwq/wumJlv7Mtps=
Subject key identifier:   91:6E:79:E1:4C:C6:08:57:75:9A:A4:E8:67:AF:68:55:68:54:CF:F4
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584BA100598AF8BA45357FA80A80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1992d582-1056-390d-b210-75e8a154886c.roa
Signing time:             Fri 24 Oct 2025 14:33:33 +0000
ROA not before:           Fri 24 Oct 2025 14:33:33 +0000
ROA not after:            Thu 22 Jan 2026 15:33:33 +0000
asID:                     133661
IP address blocks:        38.137.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a1:00:59:8a:f8:ba:45:35:7f:a8:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct 24 14:33:33 2025 GMT
            Not After : Jan 22 15:33:33 2026 GMT
        Subject: CN=7538a432-a46a-4bb8-af89-4c1d8c35cde1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0f:bc:8c:72:f3:61:29:99:6f:37:39:0d:4d:
                    ea:b6:95:d5:5d:95:0c:e9:1d:e9:3e:08:fb:35:9d:
                    c8:2b:7f:06:57:65:20:bb:19:0f:3f:5d:c9:3f:39:
                    b7:d0:28:ff:45:5c:45:d1:d3:23:10:1d:5d:c0:c5:
                    2d:89:79:f2:b4:fb:ab:b4:16:fc:db:70:69:56:95:
                    2c:9d:99:b2:85:13:2b:69:c9:e5:6c:f2:10:71:db:
                    8e:d7:a8:24:45:fb:4d:60:0d:6a:3f:4f:6b:4d:47:
                    e4:bd:84:51:33:b8:f8:d1:3a:f8:47:84:e2:ff:8e:
                    31:35:94:f2:c9:ce:47:9b:04:d3:6e:f0:3f:02:58:
                    70:e6:a0:79:60:52:36:65:08:c4:d6:db:07:11:53:
                    35:cc:44:77:db:71:09:19:67:2e:c1:e7:79:4d:58:
                    c2:6a:7d:57:42:d6:4d:c7:66:0c:9d:b3:80:07:56:
                    61:a9:d9:28:d0:2b:c8:b7:6b:94:ae:ba:9f:09:d0:
                    da:16:ff:a2:fc:ae:d8:c5:d8:b5:1d:8e:89:0c:79:
                    6f:9c:65:13:bf:22:9e:11:26:88:74:e1:2b:05:1f:
                    67:07:75:d2:29:4c:af:99:05:54:12:29:ae:81:33:
                    65:97:52:9c:77:a3:47:6d:1d:7e:74:d6:07:56:28:
                    55:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:6E:79:E1:4C:C6:08:57:75:9A:A4:E8:67:AF:68:55:68:54:CF:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1992d582-1056-390d-b210-75e8a154886c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.137.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:2c:2e:75:41:84:13:78:d0:9b:c9:8a:58:e4:3a:db:93:9d:
         9d:d7:c5:1c:a2:dd:42:2f:94:a5:97:b3:e5:19:8f:87:d1:3e:
         ba:26:36:ad:2d:c6:ca:5b:ec:bc:91:bf:69:e3:b0:3a:47:46:
         05:99:8d:6d:b0:a7:29:17:cf:84:72:9e:26:3b:1b:13:51:c5:
         51:66:6d:85:14:6e:58:86:c0:85:eb:94:1e:60:f5:9c:78:01:
         22:ce:20:c7:4f:87:8a:33:2f:58:d2:c6:ad:00:29:4b:c4:75:
         5c:df:d1:d1:c2:85:5e:28:1d:f7:98:e5:48:87:f1:89:a5:60:
         f0:71:c7:05:46:ee:51:3f:ea:d8:dd:7c:50:ba:a6:00:e9:99:
         2d:26:c7:ba:44:07:27:43:9c:c8:b1:84:7a:a3:e6:e8:a3:98:
         c2:db:24:de:b8:f5:29:f5:2a:e4:e0:1f:65:61:fb:c8:f2:4c:
         35:68:f5:0a:9a:13:82:a7:d0:e2:c3:e1:ea:8f:f0:00:2c:68:
         59:f1:06:6f:74:3d:29:16:02:3b:3c:d8:13:d4:b6:5f:e0:ca:
         f0:0f:eb:3c:a6:d1:79:fe:bd:5e:c9:38:7d:21:bc:c2:9b:e6:
         53:fc:8e:65:06:f6:52:0a:07:ae:83:b1:45:59:4a:a3:35:3e:
         e6:59:2a:2a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuhAFmK+LpFNX+oCoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI1MTAyNDE0MzMzM1oXDTI2MDEyMjE1MzMzM1owLzEtMCsGA1UEAxMk
NzUzOGE0MzItYTQ2YS00YmI4LWFmODktNGMxZDhjMzVjZGUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuw+8jHLzYSmZbzc5DU3qtpXVXZUM6R3pPgj7
NZ3IK38GV2UguxkPP13JPzm30Cj/RVxF0dMjEB1dwMUtiXnytPurtBb823BpVpUs
nZmyhRMracnlbPIQcduO16gkRftNYA1qP09rTUfkvYRRM7j40Tr4R4Ti/44xNZTy
yc5HmwTTbvA/Alhw5qB5YFI2ZQjE1tsHEVM1zER323EJGWcuwed5TVjCan1XQtZN
x2YMnbOAB1Zhqdko0CvIt2uUrrqfCdDaFv+i/K7Yxdi1HY6JDHlvnGUTvyKeESaI
dOErBR9nB3XSKUyvmQVUEimugTNll1Kcd6NHbR1+dNYHVihV2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJFueeFMxghXdZqk6GevaFVoVM/0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMTk5MmQ1ODItMTA1Ni0z
OTBkLWIyMTAtNzVlOGExNTQ4ODZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGJokAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFssLnVBhBN40JvJiljkOtuTnZ3XxRyi3UIvlKWXs+UZj4fRPromNq0t
xspb7LyRv2njsDpHRgWZjW2wpykXz4RyniY7GxNRxVFmbYUUbliGwIXrlB5g9Zx4
ASLOIMdPh4ozL1jSxq0AKUvEdVzf0dHChV4oHfeY5UiH8YmlYPBxxwVG7lE/6tjd
fFC6pgDpmS0mx7pEBydDnMixhHqj5uijmMLbJN649Sn1KuTgH2Vh+8jyTDVo9Qqa
E4Kn0OLD4eqP8AAsaFnxBm90PSkWAjs82BPUtl/gyvAP6zym0Xn+vV7JOH0hvMKb
5lP8jmUG9lIKB66DsUVZSqM1PuZZKio=
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:07:05 2025 by rpki-client