Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f340cbb9-1d0c-33e0-a2d8-25d7278e8995.roa
File:                     f340cbb9-1d0c-33e0-a2d8-25d7278e8995.roa (raw, json)
Hash identifier:          qahimSK7hi41IdMUlEDQym8sibMj3QhVwAXNW+TGz4g=
Subject key identifier:   AC:F9:C0:51:BD:BB:68:DF:AC:83:38:D0:DA:C2:82:C4:8A:4A:0A:26
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584B9B4AFDF27EFE72C82B963EC0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f340cbb9-1d0c-33e0-a2d8-25d7278e8995.roa
Signing time:             Wed 22 Oct 2025 13:29:06 +0000
ROA not before:           Wed 22 Oct 2025 13:29:06 +0000
ROA not after:            Tue 20 Jan 2026 14:29:06 +0000
asID:                     138915
IP address blocks:        38.54.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9b:4a:fd:f2:7e:fe:72:c8:2b:96:3e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct 22 13:29:06 2025 GMT
            Not After : Jan 20 14:29:06 2026 GMT
        Subject: CN=d96baae9-b366-4767-83cb-22a5f9f52077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f2:44:ae:13:e8:b6:00:c7:77:75:bb:c5:0a:
                    dd:71:f4:b2:fa:db:a3:54:58:bf:b5:13:d7:ba:8d:
                    41:8e:09:1a:fb:50:59:77:a1:10:be:6c:aa:bd:0e:
                    f5:7e:61:28:eb:6a:e8:2a:9b:1c:ff:cf:1b:28:91:
                    03:2b:b9:58:06:b4:6f:4c:f5:33:f6:18:63:e7:02:
                    8f:2b:7b:51:2b:33:88:0d:ab:b9:ae:84:c6:94:22:
                    67:38:75:75:d1:7f:1a:ff:be:09:68:33:93:65:20:
                    0c:47:57:9e:a7:1f:02:34:8a:40:eb:91:c8:23:42:
                    aa:a5:dc:23:59:30:5e:f3:47:22:9d:71:66:c3:3e:
                    71:fc:c7:c0:20:f6:53:b3:8d:de:d5:11:c3:80:af:
                    fa:ec:95:9c:1a:76:25:86:b0:bd:85:14:0f:6a:b0:
                    94:03:c2:63:72:ae:75:81:d4:38:00:f6:b1:1b:f9:
                    f2:95:ea:83:db:b8:c7:c1:9b:76:8e:85:86:59:a4:
                    c3:5c:10:92:90:a8:71:28:29:bb:b4:0e:99:0c:ba:
                    03:9e:d7:6b:09:c4:5a:20:81:eb:d1:c4:47:b1:a8:
                    4a:02:fe:3a:e8:68:73:ae:dd:52:75:c8:75:4d:21:
                    83:d8:53:ec:a2:f8:1c:1e:d1:6e:4a:ad:7d:59:47:
                    42:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:F9:C0:51:BD:BB:68:DF:AC:83:38:D0:DA:C2:82:C4:8A:4A:0A:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f340cbb9-1d0c-33e0-a2d8-25d7278e8995.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.54.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:e0:37:11:31:a7:f0:b9:7f:c1:d3:96:1a:bc:76:63:47:bf:
         ec:d8:81:ce:24:4a:b2:2e:a4:87:ac:09:48:e1:05:8f:12:e7:
         06:bb:48:86:df:76:13:97:51:c7:f9:f2:3b:b7:b7:54:ff:d1:
         a5:9e:27:6b:ad:5d:1b:d2:e1:5b:95:b4:54:26:67:2c:2d:a0:
         fb:d8:9b:80:ce:02:e0:06:5c:ad:da:3b:14:f2:5e:9d:89:15:
         b3:9e:c4:10:4a:0a:61:23:27:d0:6c:01:42:44:40:83:ed:ff:
         83:e9:5d:34:22:1b:b7:6e:91:e1:9a:ab:de:18:c7:19:8c:40:
         8d:03:49:9a:2e:64:7a:0a:04:9c:fe:df:f6:15:65:cd:90:c7:
         69:c7:29:2a:ab:b1:4c:0b:74:b1:87:90:4f:ea:ec:1e:3c:9f:
         6f:26:a3:6a:9a:e5:f0:77:2f:48:34:73:31:e6:c5:28:db:c2:
         01:3e:fb:a2:cd:78:ff:90:30:8a:02:85:fd:98:61:44:3c:d2:
         52:de:13:ee:a5:5d:ee:82:8c:0a:8e:4f:de:05:ac:42:bb:05:
         70:74:fb:be:af:ff:45:7b:0a:d1:d1:d7:38:19:ec:bc:01:d6:
         b6:4a:aa:4f:5e:f3:f0:22:e6:8a:10:d3:29:bc:4b:9a:88:d7:
         ac:fc:c9:72
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubSv3yfv5yyCuWPsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI1MTAyMjEzMjkwNloXDTI2MDEyMDE0MjkwNlowLzEtMCsGA1UEAxMk
ZDk2YmFhZTktYjM2Ni00NzY3LTgzY2ItMjJhNWY5ZjUyMDc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvJErhPotgDHd3W7xQrdcfSy+tujVFi/tRPX
uo1Bjgka+1BZd6EQvmyqvQ71fmEo62roKpsc/88bKJEDK7lYBrRvTPUz9hhj5wKP
K3tRKzOIDau5roTGlCJnOHV10X8a/74JaDOTZSAMR1eepx8CNIpA65HII0Kqpdwj
WTBe80cinXFmwz5x/MfAIPZTs43e1RHDgK/67JWcGnYlhrC9hRQParCUA8Jjcq51
gdQ4APaxG/nyleqD27jHwZt2joWGWaTDXBCSkKhxKCm7tA6ZDLoDntdrCcRaIIHr
0cRHsahKAv466Ghzrt1Sdch1TSGD2FPsovgcHtFuSq19WUdCawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKz5wFG9u2jfrIM40NrCgsSKSgomMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZjM0MGNiYjktMWQwYy0z
M2UwLWEyZDgtMjVkNzI3OGU4OTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJjZcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKLgNxExp/C5f8HTlhq8dmNHv+zYgc4kSrIupIesCUjhBY8S5wa7SIbf
dhOXUcf58ju3t1T/0aWeJ2utXRvS4VuVtFQmZywtoPvYm4DOAuAGXK3aOxTyXp2J
FbOexBBKCmEjJ9BsAUJEQIPt/4PpXTQiG7dukeGaq94YxxmMQI0DSZouZHoKBJz+
3/YVZc2Qx2nHKSqrsUwLdLGHkE/q7B48n28mo2qa5fB3L0g0czHmxSjbwgE++6LN
eP+QMIoChf2YYUQ80lLeE+6lXe6CjAqOT94FrEK7BXB0+76v/0V7CtHR1zgZ7LwB
1rZKqk9e8/Ai5ooQ0ym8S5qI16z8yXI=
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:07:50 2025 by rpki-client