Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b6a36d33-0ef1-3428-aaed-d1b236c70b91.roa
File:                     b6a36d33-0ef1-3428-aaed-d1b236c70b91.roa (raw, json)
Hash identifier:          4mXF+g8A+gmUKvC81czFtxAgfCxNBC/HsAYdTaiVrzc=
Subject key identifier:   28:D0:35:48:A2:22:E8:D0:30:45:C3:2E:38:33:D9:81:D6:8F:BE:D0
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D6E49CF13980B9B9DB80B23C0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b6a36d33-0ef1-3428-aaed-d1b236c70b91.roa
Signing time:             Tue 07 Apr 2026 20:09:13 +0000
ROA not before:           Tue 07 Apr 2026 20:09:13 +0000
ROA not after:            Mon 06 Jul 2026 20:09:13 +0000
asID:                     34702
IP address blocks:        38.180.10.0/24 maxlen: 24
                          38.180.44.0/23 maxlen: 24
                          38.180.163.0/24 maxlen: 24
                          38.180.164.0/24 maxlen: 24
                          38.180.216.0/24 maxlen: 24
                          38.180.230.0/24 maxlen: 24
                          38.180.248.0/24 maxlen: 24
                          38.244.154.0/23 maxlen: 24
                          38.244.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6e:49:cf:13:98:0b:9b:9d:b8:0b:23:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Apr  7 20:09:13 2026 GMT
            Not After : Jul  6 20:09:13 2026 GMT
        Subject: CN=86372808-da27-4a96-ac91-6cba5c4d32cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:8e:10:09:3b:8b:d0:85:c3:8a:25:e4:ad:e7:
                    04:7d:3c:bb:01:6d:14:f8:e7:ea:e9:a7:3f:fe:e8:
                    c4:c0:2b:7d:26:a6:25:15:51:23:e0:1b:ef:60:f0:
                    0b:e1:d4:12:58:7a:1b:2c:3c:1d:ae:44:e0:09:41:
                    3d:f6:a2:59:5b:46:d5:43:f3:60:95:29:31:3b:11:
                    9a:63:22:49:df:22:58:cd:b7:da:d4:a4:1b:9d:ea:
                    0f:72:68:a9:87:e5:d7:7c:fe:f1:00:b4:a6:5c:c2:
                    90:f5:cf:4a:79:25:41:b7:76:01:82:78:c7:bc:66:
                    af:c0:b5:1c:50:ad:29:d3:6b:89:a5:47:68:29:fe:
                    47:91:d2:57:fe:2d:34:39:5e:1a:70:d8:d6:69:a6:
                    20:c2:c7:51:23:f0:f9:d1:f5:a2:03:ac:49:ab:07:
                    64:9f:63:94:ee:7a:29:ca:77:bc:87:0f:cd:81:9a:
                    fa:ea:68:06:13:24:46:ba:c9:ee:95:82:56:0d:c5:
                    b3:57:fd:91:ef:40:cf:db:16:eb:66:62:99:27:e1:
                    0e:18:d5:a9:12:e7:a8:8c:cb:21:a5:09:90:75:02:
                    eb:52:e4:d9:08:70:3e:f4:95:a7:16:41:a9:2a:2a:
                    23:3e:9c:01:ed:63:a2:e4:a2:39:7b:3a:fc:5b:bd:
                    00:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:D0:35:48:A2:22:E8:D0:30:45:C3:2E:38:33:D9:81:D6:8F:BE:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b6a36d33-0ef1-3428-aaed-d1b236c70b91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.180.10.0/24
                  38.180.44.0/23
                  38.180.163.0-38.180.164.255
                  38.180.216.0/24
                  38.180.230.0/24
                  38.180.248.0/24
                  38.244.154.0/23
                  38.244.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:64:d7:43:2a:82:81:6c:51:5f:04:b1:e2:6a:91:c2:7f:7e:
         01:7b:2a:de:93:0e:ba:ef:e7:6a:49:88:25:b7:6b:63:22:a1:
         5f:e9:7e:91:c8:62:3b:12:22:7f:9b:36:19:72:bc:f6:95:f2:
         92:92:53:12:fe:ba:2a:10:f1:2e:b3:d4:03:72:fd:e2:af:ef:
         0d:4c:b0:81:8b:82:12:6e:8a:3f:d8:66:3a:f1:56:9a:70:02:
         d4:aa:3e:9e:55:6f:50:9f:be:cb:ea:6a:60:ef:b0:60:e2:44:
         23:46:ea:62:16:e3:b8:a8:df:58:07:4b:92:bb:7e:5e:11:b5:
         e3:ec:05:c3:4b:76:20:cb:9a:0a:fc:3b:b4:46:b5:0a:59:81:
         cc:4d:9e:b4:ff:82:38:0b:c5:04:91:8b:b9:3c:af:2b:90:27:
         c0:81:07:7d:13:16:2a:1a:60:54:ae:3f:3a:73:34:20:17:9c:
         6d:65:10:dd:d8:2d:49:9c:06:97:74:95:4a:a1:13:69:e4:d7:
         ea:4a:94:9b:7a:31:bc:4c:2b:ad:2e:1f:8a:f9:cc:c9:36:0e:
         e2:c7:47:f9:d3:7c:d2:74:73:31:84:ba:61:79:5c:b8:4d:ff:
         ef:b8:48:ed:fb:fb:29:82:50:16:e4:f9:00:a3:53:45:69:9d:
         b1:23:99:60
-----BEGIN CERTIFICATE-----
MIIGdTCCBV2gAwIBAgIUAQ0Mn0MoWE1uSc8TmAubnbgLI8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDQwNzIwMDkxM1oXDTI2MDcwNjIwMDkxM1owLzEtMCsGA1UEAxMk
ODYzNzI4MDgtZGEyNy00YTk2LWFjOTEtNmNiYTVjNGQzMmNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi44QCTuL0IXDiiXkrecEfTy7AW0U+Ofq6ac/
/ujEwCt9JqYlFVEj4BvvYPAL4dQSWHobLDwdrkTgCUE99qJZW0bVQ/NglSkxOxGa
YyJJ3yJYzbfa1KQbneoPcmiph+XXfP7xALSmXMKQ9c9KeSVBt3YBgnjHvGavwLUc
UK0p02uJpUdoKf5HkdJX/i00OV4acNjWaaYgwsdRI/D50fWiA6xJqwdkn2OU7nop
yne8hw/NgZr66mgGEyRGusnulYJWDcWzV/2R70DP2xbrZmKZJ+EOGNWpEueojMsh
pQmQdQLrUuTZCHA+9JWnFkGpKiojPpwB7WOi5KI5ezr8W70AfQIDAQABo4IDhzCC
A4MwHQYDVR0OBBYEFCjQNUiiIujQMEXDLjgz2YHWj77QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYjZhMzZkMzMtMGVmMS0z
NDI4LWFhZWQtZDFiMjM2YzcwYjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQAJrQKAwQB
JrQsMAwDBAAmtKMDBAAmtKQDBAAmtNgDBAAmtOYDBAAmtPgDBAEm9JoDBAAm9Ngw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEATGTXQyqCgWxRXwSx4mqRwn9+AXsq3pMOuu/nakmIJbdrYyKhX+l+
kchiOxIif5s2GXK89pXykpJTEv66KhDxLrPUA3L94q/vDUywgYuCEm6KP9hmOvFW
mnAC1Ko+nlVvUJ++y+pqYO+wYOJEI0bqYhbjuKjfWAdLkrt+XhG14+wFw0t2IMua
Cvw7tEa1ClmBzE2etP+COAvFBJGLuTyvK5AnwIEHfRMWKhpgVK4/OnM0IBecbWUQ
3dgtSZwGl3SVSqETaeTX6kqUm3oxvEwrrS4fivnMyTYO4sdH+dN80nRzMYS6YXlc
uE3/77hI7fv7KYJQFuT5AKNTRWmdsSOZYA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:18:33 2026 by rpki-client