Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ab27bb29-befe-3162-b463-1a67bff54f4a.roa
File:                     ab27bb29-befe-3162-b463-1a67bff54f4a.roa (raw, json)
Hash identifier:          P/KSS7Spg32rXXo/+vQ0/YOyl6BfqZz2rMgjBMbrArg=
Subject key identifier:   16:B5:97:F4:85:A2:E5:82:DC:7D:AF:C1:57:16:23:5A:49:9D:45:6F
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D59EAB05E07DC95B5DE42D480
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ab27bb29-befe-3162-b463-1a67bff54f4a.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     273207
IP address blocks:        38.66.206.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:b0:5e:07:dc:95:b5:de:42:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=dfe83951-26de-47eb-b86b-9acbc8d2a7f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:67:88:1c:84:5a:67:61:91:07:03:d4:18:f7:
                    73:e5:3a:d5:2f:9a:34:c2:eb:b3:e7:1c:1d:9b:79:
                    e8:2c:5c:8e:c8:d6:1c:41:ea:32:a0:ce:32:33:db:
                    24:92:bf:a1:df:0d:99:c9:a6:d8:70:96:75:57:41:
                    59:4d:e7:49:f5:f1:dc:34:3e:e4:e0:1a:76:60:41:
                    47:17:c4:16:d9:d8:3b:38:fb:4b:d3:c6:1f:7c:87:
                    a5:28:e9:07:4e:81:90:d5:61:d1:34:17:1c:66:0d:
                    8a:20:a0:da:09:16:26:86:b5:1a:ba:ef:53:88:7b:
                    15:23:52:24:cb:f4:c1:d8:4e:88:e1:67:37:94:2c:
                    6d:15:84:03:a8:62:6e:4e:77:54:b6:33:ff:36:24:
                    b2:d1:f8:76:a3:1f:60:11:e0:20:1e:fb:73:98:14:
                    f0:c9:1d:02:4f:06:9e:6f:ca:99:af:8a:1d:f3:db:
                    09:5b:f4:fa:82:96:88:ba:f5:bf:12:47:f3:b7:4b:
                    8a:b5:af:1b:a3:fc:f0:5b:74:dc:13:e4:62:60:0f:
                    a1:7e:47:5e:01:cd:1e:2d:70:c0:f4:e1:4e:f9:18:
                    22:25:66:1c:45:2a:80:b1:5b:31:50:44:1a:a1:8c:
                    d6:66:a2:a9:75:9f:18:ae:fb:a8:83:39:bb:fa:43:
                    66:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:B5:97:F4:85:A2:E5:82:DC:7D:AF:C1:57:16:23:5A:49:9D:45:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ab27bb29-befe-3162-b463-1a67bff54f4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.66.206.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:9c:52:7e:f3:8c:9d:a6:28:82:f9:fa:ed:2b:76:9f:a3:4d:
         ea:5a:36:0a:60:4a:8d:cb:84:40:94:bd:b9:f0:a7:5d:9c:03:
         83:88:6f:f1:3a:9d:05:97:bb:33:61:a4:4b:16:ed:b7:48:a2:
         bb:14:c0:1b:f5:e0:e2:ed:80:05:77:52:f8:40:a5:1f:32:69:
         62:03:9b:e1:f6:2e:a9:77:2c:45:de:f2:a4:d7:47:79:c9:e2:
         3b:d0:45:0a:51:41:3f:3a:c2:c0:84:a9:a3:99:45:07:da:7b:
         73:6c:71:90:90:c6:90:7c:50:1d:dc:09:3d:39:12:ee:4e:11:
         fc:f2:8c:7c:0b:df:24:db:23:84:c7:60:81:36:a6:e8:34:e3:
         f3:1a:84:0d:14:91:56:7f:3c:d2:70:38:66:c5:3a:10:62:4b:
         6c:b3:7e:1b:93:be:7d:af:73:e3:5e:9c:63:68:e8:51:74:4a:
         97:33:e5:ae:0d:72:fe:fe:6b:ae:d8:a4:72:ab:62:05:cc:eb:
         a7:9e:3c:d2:b1:3a:8e:6d:d8:26:ec:3c:58:ae:a3:e9:4a:40:
         14:b7:cf:68:c9:d1:75:a6:cf:7e:f7:21:6a:83:a6:d2:b0:73:
         75:6a:d8:26:43:b0:c6:3b:31:ab:0a:d8:75:23:a2:0e:e6:ff:
         7a:61:56:07
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6rBeB9yVtd5C1IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk
ZGZlODM5NTEtMjZkZS00N2ViLWI4NmItOWFjYmM4ZDJhN2YzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWeIHIRaZ2GRBwPUGPdz5TrVL5o0wuuz5xwd
m3noLFyOyNYcQeoyoM4yM9skkr+h3w2ZyabYcJZ1V0FZTedJ9fHcND7k4Bp2YEFH
F8QW2dg7OPtL08YffIelKOkHToGQ1WHRNBccZg2KIKDaCRYmhrUauu9TiHsVI1Ik
y/TB2E6I4Wc3lCxtFYQDqGJuTndUtjP/NiSy0fh2ox9gEeAgHvtzmBTwyR0CTwae
b8qZr4od89sJW/T6gpaIuvW/Ekfzt0uKta8bo/zwW3TcE+RiYA+hfkdeAc0eLXDA
9OFO+RgiJWYcRSqAsVsxUEQaoYzWZqKpdZ8Yrvuogzm7+kNm1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBa1l/SFouWC3H2vwVcWI1pJnUVvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYWIyN2JiMjktYmVmZS0z
MTYyLWI0NjMtMWE2N2JmZjU0ZjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJkLOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGWcUn7zjJ2mKIL5+u0rdp+jTepaNgpgSo3LhECUvbnwp12cA4OIb/E6
nQWXuzNhpEsW7bdIorsUwBv14OLtgAV3UvhApR8yaWIDm+H2Lql3LEXe8qTXR3nJ
4jvQRQpRQT86wsCEqaOZRQfae3NscZCQxpB8UB3cCT05Eu5OEfzyjHwL3yTbI4TH
YIE2pug04/MahA0UkVZ/PNJwOGbFOhBiS2yzfhuTvn2vc+NenGNo6FF0Spcz5a4N
cv7+a67YpHKrYgXM66eePNKxOo5t2CbsPFiuo+lKQBS3z2jJ0XWmz373IWqDptKw
c3Vq2CZDsMY7MasK2HUjog7m/3phVgc=
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:04:33 2026 by rpki-client