Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/467c3a27-e5a7-3964-a1d3-fb81783dd2db.roa
File:                     467c3a27-e5a7-3964-a1d3-fb81783dd2db.roa (raw, json)
Hash identifier:          SPb2jyPfT2cGISE5YwCcQerPEXy1CSxCYFxiT5K8Hzc=
Subject key identifier:   1B:CD:01:AC:0D:D9:96:90:B7:EB:C3:78:3B:07:52:8A:A1:DB:5F:06
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584EFB476187C347DB66F67FDDC0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/467c3a27-e5a7-3964-a1d3-fb81783dd2db.roa
Signing time:             Fri 28 Aug 2026 01:00:12 +0000
ROA not before:           Fri 28 Aug 2026 01:00:12 +0000
ROA not after:            Thu 26 Nov 2026 02:00:12 +0000
asID:                     0
IP address blocks:        38.152.0.0/17 maxlen: 17
                          38.152.128.0/17 maxlen: 17
                          38.153.0.0/17 maxlen: 17
                          38.153.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fb:47:61:87:c3:47:db:66:f6:7f:dd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Aug 28 01:00:12 2026 GMT
            Not After : Nov 26 02:00:12 2026 GMT
        Subject: CN=708c7853-dc4c-40ed-86bd-dca66773617e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:05:9c:fb:cf:dc:4b:5d:cb:1a:46:c4:33:6d:
                    60:02:56:42:3e:bf:b2:c7:25:6c:fe:e6:90:9a:69:
                    f9:c3:d9:80:f5:bb:5a:6c:8c:09:5a:b9:e4:2e:b0:
                    33:77:17:f3:19:a2:ab:f2:de:45:76:08:82:73:5b:
                    9c:1e:6c:0b:61:8d:58:ac:0c:f8:45:15:7f:0f:34:
                    31:ee:13:42:c4:3f:64:a0:4b:27:2a:7e:a0:99:aa:
                    e9:59:b1:cc:ef:4d:cd:9c:ce:6e:93:71:31:3a:20:
                    ec:ee:29:b4:f7:80:92:a7:58:ce:07:fe:a4:cd:ab:
                    84:db:8f:cf:52:85:55:2f:13:54:8f:e8:d9:53:78:
                    17:6e:47:cd:d0:c8:53:f3:bf:74:6f:fe:7a:18:23:
                    76:1b:c0:a4:3a:8d:c4:88:23:81:c5:3e:f5:8a:38:
                    c4:94:a1:f7:d6:36:de:29:63:7d:c1:f8:cc:e0:f5:
                    91:18:d7:a0:57:11:4c:76:c9:62:12:27:a2:c6:89:
                    0a:65:86:80:d0:04:e3:05:55:2c:4d:a8:5b:c3:4f:
                    32:cf:79:ce:9d:2c:cd:26:5d:23:f9:f7:f7:d1:98:
                    ee:12:a3:0d:d0:56:19:c6:7f:7b:af:ca:a8:ed:99:
                    59:99:f2:35:8c:1f:5f:27:31:77:fb:d8:5d:ab:fc:
                    f7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:CD:01:AC:0D:D9:96:90:B7:EB:C3:78:3B:07:52:8A:A1:DB:5F:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/467c3a27-e5a7-3964-a1d3-fb81783dd2db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.152.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:db:df:6c:6e:10:79:e6:b1:a5:ef:06:53:80:3f:47:7c:75:
         58:62:9f:ec:22:75:5b:26:bc:44:49:7e:d4:cb:9c:8e:49:b3:
         8f:37:fe:f7:75:66:ee:e9:f2:8e:40:e5:d9:c6:12:ed:b5:59:
         d0:4d:0e:60:26:30:99:f0:1e:28:ab:4b:f7:2e:77:30:e9:c9:
         9e:e5:38:1c:84:b0:ca:13:d4:f7:bd:62:70:e9:4d:50:31:9c:
         4d:9d:71:80:e2:ec:82:8d:86:6a:13:ed:1e:ec:41:48:f2:0f:
         33:2a:de:b0:c7:7b:7e:85:f0:f2:c7:78:d5:03:53:73:52:4f:
         d4:be:4b:a6:76:78:2d:44:db:82:05:5e:29:4a:97:3f:ec:9c:
         13:fe:a1:27:79:47:3f:40:19:31:14:93:0f:8a:3a:fe:82:18:
         eb:99:54:21:39:1c:27:8c:51:42:e2:f7:5a:c2:a7:8c:fd:08:
         ef:73:a7:88:b1:14:5b:df:e7:48:4c:c7:b3:b8:3f:dd:71:26:
         cc:cd:00:80:c6:26:bd:26:b3:28:c7:de:4a:73:b6:49:4f:de:
         d5:9d:7c:82:31:1c:e5:58:15:ee:db:25:2f:17:17:18:bc:58:
         09:0a:2a:30:f1:33:95:c5:39:ba:f9:5d:76:aa:7b:a8:ad:29:
         4d:15:66:1c
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE77R2GHw0fbZvZ/3cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDgyODAxMDAxMloXDTI2MTEyNjAyMDAxMlowLzEtMCsGA1UEAxMk
NzA4Yzc4NTMtZGM0Yy00MGVkLTg2YmQtZGNhNjY3NzM2MTdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAWc+8/cS13LGkbEM21gAlZCPr+yxyVs/uaQ
mmn5w9mA9btabIwJWrnkLrAzdxfzGaKr8t5FdgiCc1ucHmwLYY1YrAz4RRV/DzQx
7hNCxD9koEsnKn6gmarpWbHM703NnM5uk3ExOiDs7im094CSp1jOB/6kzauE24/P
UoVVLxNUj+jZU3gXbkfN0MhT8790b/56GCN2G8CkOo3EiCOBxT71ijjElKH31jbe
KWN9wfjM4PWRGNegVxFMdsliEieixokKZYaA0ATjBVUsTahbw08yz3nOnSzNJl0j
+ff30ZjuEqMN0FYZxn97r8qo7ZlZmfI1jB9fJzF3+9hdq/z36wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFBvNAawN2ZaQt+vDeDsHUoqh218GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNDY3YzNhMjctZTVhNy0z
OTY0LWExZDMtZmI4MTc4M2RkMmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBJpgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAmNvfbG4Qeeaxpe8GU4A/R3x1WGKf7CJ1Wya8REl+1Mucjkmzjzf+93Vm
7unyjkDl2cYS7bVZ0E0OYCYwmfAeKKtL9y53MOnJnuU4HISwyhPU971icOlNUDGc
TZ1xgOLsgo2GahPtHuxBSPIPMyresMd7foXw8sd41QNTc1JP1L5LpnZ4LUTbggVe
KUqXP+ycE/6hJ3lHP0AZMRSTD4o6/oIY65lUITkcJ4xRQuL3WsKnjP0I73OniLEU
W9/nSEzHs7g/3XEmzM0AgMYmvSazKMfeSnO2SU/e1Z18gjEc5VgV7tslLxcXGLxY
CQoqMPEzlcU5uvlddqp7qK0pTRVmHA==
-----END CERTIFICATE-----
Generated at Sun Sep 20 14:32:17 2026 by rpki-client