Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3ade609c-c053-3b4a-b79b-981989c277bc.roa
File:                     3ade609c-c053-3b4a-b79b-981989c277bc.roa (raw, json)
Hash identifier:          rXb8PPW/GSmfeuVlym5NkiRyeJDhl7PNo/Uxj8pKWqo=
Subject key identifier:   4A:ED:66:C9:41:35:EA:F1:53:A5:A7:C1:B5:A8:11:4F:C7:EB:7F:69
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584CC341F134FA712078DDC479C0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3ade609c-c053-3b4a-b79b-981989c277bc.roa
Signing time:             Wed 14 Jan 2026 15:09:47 +0000
ROA not before:           Wed 14 Jan 2026 15:09:47 +0000
ROA not after:            Tue 14 Apr 2026 14:09:47 +0000
asID:                     40662
IP address blocks:        38.58.238.0/24 maxlen: 24
                          154.18.154.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c3:41:f1:34:fa:71:20:78:dd:c4:79:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jan 14 15:09:47 2026 GMT
            Not After : Apr 14 14:09:47 2026 GMT
        Subject: CN=3b19beda-7652-491b-ae10-c445faa1872a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:cc:e5:74:b6:cc:5b:ba:08:d4:f9:7d:2a:f9:
                    cd:a9:01:b2:f1:29:9f:7a:b5:ab:49:ad:26:67:fd:
                    40:d1:e5:f6:47:58:62:6d:b1:42:94:47:63:af:16:
                    ea:68:41:37:ce:9d:1b:51:15:0d:ae:5a:44:d2:1e:
                    3b:4f:25:09:28:80:12:16:f0:c1:12:83:92:14:4c:
                    86:e7:55:80:04:06:2f:cc:0e:0a:fe:ad:fa:fa:c7:
                    dd:bc:2a:cc:9e:60:ff:cb:bf:42:a7:a3:4d:b7:2a:
                    f5:36:94:9f:01:08:af:a1:db:2a:56:ce:12:33:06:
                    14:bf:78:06:2e:4a:ab:d0:bc:88:aa:4b:36:b9:80:
                    f1:b8:d2:e2:13:e7:14:a8:77:87:d7:00:53:9b:95:
                    5e:63:78:d0:6d:db:e7:7d:55:26:1a:0f:68:df:8b:
                    1b:af:ed:85:8a:44:67:69:28:04:88:9e:9e:83:d0:
                    2f:3f:76:b0:6e:48:64:24:fe:45:58:ff:fa:2d:5f:
                    df:3e:79:c4:3d:8b:91:1d:3d:d4:ea:13:76:8c:a9:
                    4b:0b:ff:ae:02:3f:64:e9:6a:b4:95:a7:e2:fe:ef:
                    ea:98:4f:b8:5d:72:35:7c:37:98:d7:f1:d6:24:1a:
                    ef:02:22:da:9c:e7:89:62:ab:f0:a9:9d:6e:12:00:
                    e7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:ED:66:C9:41:35:EA:F1:53:A5:A7:C1:B5:A8:11:4F:C7:EB:7F:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3ade609c-c053-3b4a-b79b-981989c277bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.58.238.0/24
                  154.18.154.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:23:b1:6c:66:5b:56:aa:c9:a1:a6:42:0b:ba:dd:17:b5:ff:
         1f:09:96:8b:97:bb:de:b8:77:65:b8:bc:68:d6:78:ac:bc:a9:
         8f:84:53:72:64:67:ed:a8:5c:e1:21:d8:f8:00:e3:f2:88:e2:
         a0:a5:54:2a:8f:de:f3:57:b8:a3:16:69:33:73:7e:11:a6:31:
         43:9a:9a:1d:11:b2:da:24:63:f4:83:f7:26:b0:5f:ab:77:0e:
         56:d2:0f:dd:4d:b9:65:6a:a1:38:d7:dd:18:96:27:d6:b3:08:
         f2:f7:2e:b2:8c:cc:5c:2c:87:10:b3:cd:4e:a1:71:63:df:7b:
         4a:a9:0e:94:5d:cc:43:21:a0:ca:ba:d6:23:a3:19:b3:75:03:
         37:d5:ae:ed:53:89:f2:bc:21:f4:bd:96:e7:fe:ea:26:c6:3a:
         28:68:a6:0b:0c:7b:1b:39:24:7e:39:42:d5:41:31:55:da:51:
         0d:91:c9:a6:8c:c2:9e:de:4d:9a:39:79:cb:89:ff:99:24:4b:
         92:48:f7:3d:58:5b:e6:88:94:f6:df:6e:f1:f4:ea:e8:9d:93:
         a8:5d:f9:7d:16:1f:c7:aa:c3:8e:ee:55:9f:7a:ae:2c:3d:a6:
         ae:3a:e8:a7:cc:f9:7a:0f:9a:0a:03:28:28:2a:15:a6:27:c4:
         3e:ba:ae:38
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEzDQfE0+nEgeN3EecAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDExNDE1MDk0N1oXDTI2MDQxNDE0MDk0N1owLzEtMCsGA1UEAxMk
M2IxOWJlZGEtNzY1Mi00OTFiLWFlMTAtYzQ0NWZhYTE4NzJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8zldLbMW7oI1Pl9KvnNqQGy8SmferWrSa0m
Z/1A0eX2R1hibbFClEdjrxbqaEE3zp0bURUNrlpE0h47TyUJKIASFvDBEoOSFEyG
51WABAYvzA4K/q36+sfdvCrMnmD/y79Cp6NNtyr1NpSfAQivodsqVs4SMwYUv3gG
Lkqr0LyIqks2uYDxuNLiE+cUqHeH1wBTm5VeY3jQbdvnfVUmGg9o34sbr+2FikRn
aSgEiJ6eg9AvP3awbkhkJP5FWP/6LV/fPnnEPYuRHT3U6hN2jKlLC/+uAj9k6Wq0
lafi/u/qmE+4XXI1fDeY1/HWJBrvAiLanOeJYqvwqZ1uEgDniQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFErtZslBNerxU6WnwbWoEU/H639pMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvM2FkZTYwOWMtYzA1My0z
YjRhLWI3OWItOTgxOTg5YzI3N2JjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJjruAwQB
mhKaMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAFIjsWxmW1aqyaGmQgu63Re1/x8JlouXu964d2W4vGjWeKy8
qY+EU3JkZ+2oXOEh2PgA4/KI4qClVCqP3vNXuKMWaTNzfhGmMUOamh0RstokY/SD
9yawX6t3DlbSD91NuWVqoTjX3RiWJ9azCPL3LrKMzFwshxCzzU6hcWPfe0qpDpRd
zEMhoMq61iOjGbN1AzfVru1TifK8IfS9luf+6ibGOihopgsMexs5JH45QtVBMVXa
UQ2RyaaMwp7eTZo5ecuJ/5kkS5JI9z1YW+aIlPbfbvH06uidk6hd+X0WH8eqw47u
VZ96riw9pq466KfM+XoPmgoDKCgqFaYnxD66rjg=
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:36:01 2026 by rpki-client