Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4ef0dcf4-0a9b-350f-a35e-13b4595d2722.roa
File:                     4ef0dcf4-0a9b-350f-a35e-13b4595d2722.roa (raw, json)
Hash identifier:          nzVQMwUlRDTXNXPldwQJNGoHs7AxFQXnWAVE1pbOnlE=
Subject key identifier:   93:E8:7B:B0:26:CA:D8:E7:14:51:0C:12:57:93:AB:35:B9:BE:7A:82
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D730A69AB553DDA4782661CC0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4ef0dcf4-0a9b-350f-a35e-13b4595d2722.roa
Signing time:             Thu 09 Apr 2026 13:00:30 +0000
ROA not before:           Thu 09 Apr 2026 13:00:30 +0000
ROA not after:            Wed 08 Jul 2026 13:00:30 +0000
asID:                     272962
IP address blocks:        38.7.106.0/24 maxlen: 24
                          38.7.107.0/24 maxlen: 24
                          38.224.236.0/24 maxlen: 24
                          38.224.238.0/24 maxlen: 24
                          38.224.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:73:0a:69:ab:55:3d:da:47:82:66:1c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Apr  9 13:00:30 2026 GMT
            Not After : Jul  8 13:00:30 2026 GMT
        Subject: CN=e8748067-0e1f-44e5-beee-ac1cc1f77e2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e2:86:83:38:d5:70:e5:c3:68:00:4b:c4:9f:
                    f2:c0:87:83:d5:85:93:81:65:c8:94:22:a2:b9:2f:
                    96:2d:dd:e0:73:68:55:93:31:27:1a:3f:d2:fb:d7:
                    f9:22:88:b9:98:ec:69:4a:92:5f:77:c1:8d:ac:6b:
                    81:37:12:e5:cd:9e:b6:e8:25:51:df:ee:37:6b:3d:
                    8d:f3:51:3c:ba:f4:f5:6b:4d:2f:fc:79:35:98:21:
                    f1:2e:60:46:4b:2c:98:f3:ce:a8:c2:27:5e:88:90:
                    5f:4a:9b:e7:01:49:d6:19:be:de:9e:0b:1f:6f:06:
                    55:85:c0:c4:b6:fc:ec:5f:98:6b:d6:8e:57:17:f2:
                    cf:71:eb:13:62:c0:ea:54:ef:7c:de:01:69:70:c6:
                    0e:67:c2:0c:ed:23:dd:35:74:09:1d:62:11:2c:65:
                    7b:9b:bd:e7:6c:11:cb:db:7c:2b:ec:b1:09:93:45:
                    eb:d2:a7:58:99:d8:ed:90:d6:e8:98:3a:de:7a:b8:
                    0d:06:f7:fe:00:93:d3:67:97:2b:9d:ed:76:f4:6a:
                    4a:c7:f7:b2:09:42:bc:6a:11:83:e6:a5:a9:04:99:
                    60:e2:b9:af:3c:38:a0:6c:b5:e5:39:47:be:01:6a:
                    db:f4:95:7d:29:c7:b1:23:46:13:69:ed:74:b6:9a:
                    c1:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E8:7B:B0:26:CA:D8:E7:14:51:0C:12:57:93:AB:35:B9:BE:7A:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4ef0dcf4-0a9b-350f-a35e-13b4595d2722.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.7.106.0/23
                  38.224.236.0/24
                  38.224.238.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:cc:7d:bc:5a:52:4d:6f:fc:57:37:d2:eb:4a:ad:99:4f:d8:
         3a:74:23:2f:ea:94:a9:43:9d:b1:23:c9:75:31:fc:58:a3:45:
         47:80:9d:6e:e4:56:df:33:92:52:62:00:b0:f3:64:cc:a3:e0:
         f7:15:be:d8:d2:b2:c6:39:46:c8:1c:2f:73:65:b6:b3:d0:02:
         ae:5b:24:e8:e1:45:4f:5b:35:6d:fc:12:31:ce:94:f8:00:ad:
         c4:b7:bb:be:73:a8:74:66:44:3f:76:90:fb:8f:f1:a0:7e:65:
         30:1e:23:7b:7c:2b:9c:c9:62:29:81:d3:f9:23:b5:36:33:8f:
         4f:7e:d3:3a:e3:f3:90:69:a3:69:12:7f:c1:1a:71:3c:dc:4e:
         94:99:84:ff:2a:7e:e0:eb:bf:e3:60:d6:05:aa:40:2c:4d:e5:
         33:1d:59:94:4e:fd:4a:ee:0c:5f:c8:1c:ca:da:2b:89:89:94:
         00:fb:3c:1e:42:4a:45:13:fa:09:40:89:e2:27:fa:a3:ff:03:
         84:f4:2d:d4:94:84:48:27:b2:a7:37:75:06:4d:0b:05:db:46:
         45:30:ba:17:de:04:f9:c1:49:92:92:15:34:58:37:62:fc:ed:
         98:df:5e:69:00:55:7a:d5:fb:c7:da:1a:28:01:97:42:21:21:
         0c:52:5b:40
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE1zCmmrVT3aR4JmHMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDQwOTEzMDAzMFoXDTI2MDcwODEzMDAzMFowLzEtMCsGA1UEAxMk
ZTg3NDgwNjctMGUxZi00NGU1LWJlZWUtYWMxY2MxZjc3ZTJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseKGgzjVcOXDaABLxJ/ywIeD1YWTgWXIlCKi
uS+WLd3gc2hVkzEnGj/S+9f5Ioi5mOxpSpJfd8GNrGuBNxLlzZ626CVR3+43az2N
81E8uvT1a00v/Hk1mCHxLmBGSyyY886owideiJBfSpvnAUnWGb7engsfbwZVhcDE
tvzsX5hr1o5XF/LPcesTYsDqVO983gFpcMYOZ8IM7SPdNXQJHWIRLGV7m73nbBHL
23wr7LEJk0Xr0qdYmdjtkNbomDreergNBvf+AJPTZ5crne129GpKx/eyCUK8ahGD
5qWpBJlg4rmvPDigbLXlOUe+AWrb9JV9KcexI0YTae10tprBgwIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFJPoe7AmytjnFFEMEleTqzW5vnqCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNGVmMGRjZjQtMGE5Yi0z
NTBmLWEzNWUtMTNiNDU5NWQyNzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBJgdqAwQA
JuDsAwQBJuDuMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAEvMfbxaUk1v/Fc30utKrZlP2Dp0Iy/qlKlDnbEj
yXUx/FijRUeAnW7kVt8zklJiALDzZMyj4PcVvtjSssY5RsgcL3NltrPQAq5bJOjh
RU9bNW38EjHOlPgArcS3u75zqHRmRD92kPuP8aB+ZTAeI3t8K5zJYimB0/kjtTYz
j09+0zrj85Bpo2kSf8EacTzcTpSZhP8qfuDrv+Ng1gWqQCxN5TMdWZRO/UruDF/I
HMraK4mJlAD7PB5CSkUT+glAieIn+qP/A4T0LdSUhEgnsqc3dQZNCwXbRkUwuhfe
BPnBSZKSFTRYN2L87ZjfXmkAVXrV+8faGigBl0IhIQxSW0A=
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:04:45 2026 by rpki-client