Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/da2b7246-ae5c-3c12-9076-d96ce38ee025.roa
File:                     da2b7246-ae5c-3c12-9076-d96ce38ee025.roa (raw, json)
Hash identifier:          Iw3tDAEvWSBQ+CzknTGalkPoqGbv+Q+ptW4TOklE3Uo=
Subject key identifier:   5A:45:CC:D7:C1:10:CC:C5:9C:7A:16:21:21:66:89:0C:E9:82:5B:6D
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584CED40535920E22ED54EC32A40
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/da2b7246-ae5c-3c12-9076-d96ce38ee025.roa
Signing time:             Fri 20 Feb 2026 14:50:49 +0000
ROA not before:           Fri 20 Feb 2026 14:50:49 +0000
ROA not after:            Thu 21 May 2026 13:50:49 +0000
asID:                     247288
IP address blocks:        38.236.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:40:53:59:20:e2:2e:d5:4e:c3:2a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Feb 20 14:50:49 2026 GMT
            Not After : May 21 13:50:49 2026 GMT
        Subject: CN=8a67574d-722b-413b-95d9-81ffddb4e326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:dc:06:3c:2c:de:b7:f4:a9:a7:0f:c4:3e:e6:
                    fa:44:ed:22:8b:45:23:76:f6:cd:a6:ce:73:7c:11:
                    25:99:a9:36:49:15:6e:88:31:77:9f:15:aa:5f:05:
                    97:0c:cb:da:ab:22:65:30:cb:41:04:ce:0b:12:fe:
                    84:34:9a:57:99:62:f9:78:66:64:5c:80:dc:50:03:
                    3d:bd:d7:f2:51:fb:01:a0:26:af:de:26:04:38:ee:
                    d3:4c:fc:0b:9b:54:79:cc:1f:89:e1:8c:08:f1:ea:
                    28:f5:06:34:c3:7e:a5:7e:de:10:32:f9:00:f0:e1:
                    56:a5:66:31:e2:c6:ca:af:aa:c3:7e:9d:7d:7f:94:
                    78:3a:e6:29:c6:9e:3b:64:de:b2:54:6d:fd:7d:c3:
                    97:4f:42:95:8a:7f:ec:da:98:6e:60:fe:97:1d:a5:
                    41:5b:28:1a:8b:a5:d7:1a:b5:cf:4b:65:6c:b3:34:
                    d4:fe:0c:b4:12:6b:e7:76:39:00:d4:10:33:79:a6:
                    d1:e1:3e:55:bb:2d:58:99:aa:4f:09:71:a3:ab:1a:
                    f8:fd:87:d1:26:78:b7:f4:2f:df:03:3d:67:58:b4:
                    1c:cf:91:ac:2b:81:b2:0e:59:39:15:7e:b5:a3:9a:
                    3f:84:71:b0:b2:67:a9:b1:16:03:27:da:35:57:c8:
                    ea:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:45:CC:D7:C1:10:CC:C5:9C:7A:16:21:21:66:89:0C:E9:82:5B:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/da2b7246-ae5c-3c12-9076-d96ce38ee025.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.236.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:23:95:b2:50:fd:e7:3c:14:fa:59:b2:56:0f:90:ac:65:55:
         7e:3f:64:91:0d:eb:6f:44:9a:dc:da:ba:5f:5c:32:cd:b1:44:
         95:7d:99:75:17:cb:d3:fb:6d:25:e8:1b:14:13:66:5c:e2:dc:
         78:f9:0a:3e:49:e8:ef:7c:7f:30:11:9e:dd:e9:f1:e5:3a:6e:
         26:bd:34:7a:c0:08:3f:93:1c:a6:46:e9:cd:55:0f:d1:e4:f5:
         8d:f6:4e:82:0f:5a:eb:38:86:a8:fc:e6:1c:6c:62:54:8e:c2:
         fe:1e:c4:ec:d2:a9:48:26:0d:9c:9a:ab:9b:51:6d:1b:1e:78:
         3c:5b:e4:16:ef:98:a0:9e:f5:28:e6:d1:1f:8e:bd:6a:ce:9d:
         2c:83:15:da:86:21:bb:0d:8c:48:64:e6:6b:38:ca:f2:0f:0b:
         53:29:fc:53:47:c2:64:48:c7:61:af:c2:00:0a:45:b1:ce:50:
         34:e2:8a:79:f2:86:8a:a7:8c:fc:8e:4f:02:9a:14:7e:91:e4:
         4c:34:ca:b2:03:a7:e0:fd:f9:a0:3b:fd:46:b8:92:3d:7e:8a:
         29:80:11:09:c5:be:e9:5a:29:f9:18:13:f7:11:3f:f7:89:fe:
         4b:04:ff:3d:40:b8:1d:76:c5:76:4f:ce:49:96:27:39:8a:c8:
         97:a7:a3:f8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEztQFNZIOIu1U7DKkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDIyMDE0NTA0OVoXDTI2MDUyMTEzNTA0OVowLzEtMCsGA1UEAxMk
OGE2NzU3NGQtNzIyYi00MTNiLTk1ZDktODFmZmRkYjRlMzI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNwGPCzet/Sppw/EPub6RO0ii0UjdvbNps5z
fBElmak2SRVuiDF3nxWqXwWXDMvaqyJlMMtBBM4LEv6ENJpXmWL5eGZkXIDcUAM9
vdfyUfsBoCav3iYEOO7TTPwLm1R5zB+J4YwI8eoo9QY0w36lft4QMvkA8OFWpWYx
4sbKr6rDfp19f5R4OuYpxp47ZN6yVG39fcOXT0KVin/s2phuYP6XHaVBWygai6XX
GrXPS2VsszTU/gy0EmvndjkA1BAzeabR4T5Vuy1YmapPCXGjqxr4/YfRJni39C/f
Az1nWLQcz5GsK4GyDlk5FX61o5o/hHGwsmepsRYDJ9o1V8jqnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFpFzNfBEMzFnHoWISFmiQzpglttMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZGEyYjcyNDYtYWU1Yy0z
YzEyLTkwNzYtZDk2Y2UzOGVlMDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJuxwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE4jlbJQ/ec8FPpZslYPkKxlVX4/ZJEN629Emtzaul9cMs2xRJV9mXUX
y9P7bSXoGxQTZlzi3Hj5Cj5J6O98fzARnt3p8eU6bia9NHrACD+THKZG6c1VD9Hk
9Y32ToIPWus4hqj85hxsYlSOwv4exOzSqUgmDZyaq5tRbRseeDxb5BbvmKCe9Sjm
0R+OvWrOnSyDFdqGIbsNjEhk5ms4yvIPC1Mp/FNHwmRIx2GvwgAKRbHOUDTiinny
hoqnjPyOTwKaFH6R5Ew0yrIDp+D9+aA7/Ua4kj1+iimAEQnFvulaKfkYE/cRP/eJ
/ksE/z1AuB12xXZPzkmWJzmKyJeno/g=
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:32:56 2026 by rpki-client