Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/87cd9966-48b9-36a7-afbd-d25ebc5944ca.roa
File:                     87cd9966-48b9-36a7-afbd-d25ebc5944ca.roa (raw, json)
Hash identifier:          5P81gD4IQ/5MA/DfAAN9becSAPyF08jAxujzz+R3zsM=
Subject key identifier:   9E:C8:C8:A0:72:48:8F:8D:53:12:FF:18:A7:A7:1F:62:35:9C:6A:56
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D5CB4F0CC3ABA593DC1B39640
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/87cd9966-48b9-36a7-afbd-d25ebc5944ca.roa
Signing time:             Wed 01 Apr 2026 13:00:30 +0000
ROA not before:           Wed 01 Apr 2026 13:00:30 +0000
ROA not after:            Tue 30 Jun 2026 13:00:30 +0000
asID:                     204170
IP address blocks:        38.10.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5c:b4:f0:cc:3a:ba:59:3d:c1:b3:96:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Apr  1 13:00:30 2026 GMT
            Not After : Jun 30 13:00:30 2026 GMT
        Subject: CN=d55a5505-e026-44db-b21b-b7b221747ae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:83:20:17:e2:e0:91:03:98:6a:fb:17:df:6f:
                    ef:bc:33:21:e5:2c:d7:03:98:b5:d7:60:84:ba:91:
                    c3:95:c8:ec:f7:fc:01:1f:ca:45:8c:cd:78:08:33:
                    3b:f6:80:fb:7d:76:6e:0c:42:cb:ea:c6:5f:f7:2b:
                    0c:3b:d1:7a:63:2d:93:48:6c:ef:6b:49:d1:29:b0:
                    9e:8f:54:38:6b:e7:3a:b1:97:66:77:86:71:3b:a3:
                    33:32:dd:67:59:15:7b:da:d3:37:65:bd:3a:93:26:
                    91:a8:51:62:be:71:21:e7:fb:30:4c:00:c3:07:29:
                    ed:df:8c:18:37:b7:dd:74:eb:ce:04:58:b6:37:6f:
                    ab:12:e4:59:f0:c9:e2:d6:94:e7:87:54:3b:b4:73:
                    d7:32:99:18:c7:b1:0d:d2:9a:1e:e2:ae:7c:32:6c:
                    c2:8c:26:89:02:b3:ab:9a:ea:7b:d4:3c:1e:b4:86:
                    ab:10:76:89:60:0a:f0:b0:e6:4f:9b:ac:8d:f4:5a:
                    25:85:eb:87:ee:e6:fa:e4:36:28:6a:e1:45:9d:a3:
                    75:fd:2f:fa:77:88:9b:06:01:bf:4b:e9:53:cd:32:
                    03:d5:e3:30:7f:ed:85:b0:0d:79:fe:94:89:11:70:
                    11:cf:68:b3:b7:84:7a:3d:68:81:9f:5e:50:fd:e3:
                    d1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:C8:C8:A0:72:48:8F:8D:53:12:FF:18:A7:A7:1F:62:35:9C:6A:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/87cd9966-48b9-36a7-afbd-d25ebc5944ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.10.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:91:7c:b6:db:7f:b4:c3:25:30:ed:ed:b1:4a:81:34:46:3d:
         6f:96:06:5e:66:b6:74:3b:94:df:30:ae:5c:49:aa:16:93:34:
         cc:d4:21:c1:de:41:1f:31:fd:8f:37:11:e3:68:d3:79:d7:12:
         ed:03:24:41:38:3f:9d:91:63:0c:d8:9a:78:fb:27:71:ab:25:
         dc:42:e2:f8:93:57:6e:19:49:6e:c4:75:73:30:f9:8d:ed:72:
         8e:f4:0e:b1:1e:49:56:b4:6e:a3:8c:f8:c1:7e:19:2d:1e:0d:
         f9:48:94:d8:a0:cd:4a:e7:60:9b:61:5c:03:02:3d:ab:d8:48:
         93:b4:ad:52:7e:25:1a:4e:3a:a9:0b:27:76:4f:72:e5:c4:0d:
         55:66:5b:48:5c:76:2e:d8:61:95:2e:80:2a:f9:9c:9e:b4:47:
         81:10:18:f2:e2:5d:fe:fb:7e:67:d1:8b:42:00:f6:2a:0d:92:
         1d:d0:2d:8e:b4:33:b2:e1:ba:3f:0c:fa:b9:26:6b:94:7b:31:
         90:1f:4b:f3:92:24:fe:39:ec:50:ad:c3:c9:af:4c:65:cc:0f:
         f1:67:c0:2e:5a:42:9b:0e:f9:04:89:0a:cd:2e:57:f6:23:51:
         ad:cb:d5:29:f3:d1:8a:bb:05:45:3e:48:d5:07:e9:1e:c8:5f:
         cf:54:9a:50
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1ctPDMOrpZPcGzlkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDQwMTEzMDAzMFoXDTI2MDYzMDEzMDAzMFowLzEtMCsGA1UEAxMk
ZDU1YTU1MDUtZTAyNi00NGRiLWIyMWItYjdiMjIxNzQ3YWU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoMgF+LgkQOYavsX32/vvDMh5SzXA5i112CE
upHDlcjs9/wBH8pFjM14CDM79oD7fXZuDELL6sZf9ysMO9F6Yy2TSGzva0nRKbCe
j1Q4a+c6sZdmd4ZxO6MzMt1nWRV72tM3Zb06kyaRqFFivnEh5/swTADDBynt34wY
N7fddOvOBFi2N2+rEuRZ8Mni1pTnh1Q7tHPXMpkYx7EN0poe4q58MmzCjCaJArOr
mup71DwetIarEHaJYArwsOZPm6yN9FolheuH7ub65DYoauFFnaN1/S/6d4ibBgG/
S+lTzTID1eMwf+2FsA15/pSJEXARz2izt4R6PWiBn15Q/ePRnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ7IyKBySI+NUxL/GKenH2I1nGpWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvODdjZDk5NjYtNDhiOS0z
NmE3LWFmYmQtZDI1ZWJjNTk0NGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEJgrgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGORfLbbf7TDJTDt7bFKgTRGPW+WBl5mtnQ7lN8wrlxJqhaTNMzUIcHe
QR8x/Y83EeNo03nXEu0DJEE4P52RYwzYmnj7J3GrJdxC4viTV24ZSW7EdXMw+Y3t
co70DrEeSVa0bqOM+MF+GS0eDflIlNigzUrnYJthXAMCPavYSJO0rVJ+JRpOOqkL
J3ZPcuXEDVVmW0hcdi7YYZUugCr5nJ60R4EQGPLiXf77fmfRi0IA9ioNkh3QLY60
M7Lhuj8M+rkma5R7MZAfS/OSJP457FCtw8mvTGXMD/FnwC5aQpsO+QSJCs0uV/Yj
Ua3L1Snz0Yq7BUU+SNUH6R7IX89UmlA=
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:59:30 2026 by rpki-client