Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f54b24c6-8163-3a6b-b686-74fead81a66c.roa
File:                     f54b24c6-8163-3a6b-b686-74fead81a66c.roa (raw, json)
Hash identifier:          bPKGmfE52z+R4ZX9PeeuTOhikUMjMjCeI/HfC/OS45E=
Subject key identifier:   31:5F:BA:27:1C:0F:F7:5C:D7:57:72:02:FC:0D:27:2B:97:8F:EF:7A
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D00B4B2D00BACDF75005C3F80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f54b24c6-8163-3a6b-b686-74fead81a66c.roa
Signing time:             Fri 27 Feb 2026 14:05:40 +0000
ROA not before:           Fri 27 Feb 2026 14:05:40 +0000
ROA not after:            Thu 28 May 2026 13:05:40 +0000
asID:                     272865
IP address blocks:        38.254.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b4:b2:d0:0b:ac:df:75:00:5c:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Feb 27 14:05:40 2026 GMT
            Not After : May 28 13:05:40 2026 GMT
        Subject: CN=e9868999-94ab-4a3d-9d30-3c4f09bd898a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:02:b2:b9:1b:8a:9d:73:2b:32:a0:5e:42:ae:
                    9f:29:13:b4:1b:37:50:49:81:95:39:36:85:90:16:
                    71:aa:c9:0b:1a:f7:3b:28:6f:d9:10:47:83:f3:2b:
                    e6:c3:ae:0b:f6:12:1e:97:88:77:a4:2a:ad:1f:15:
                    03:3c:a6:3d:ce:ee:52:a5:e1:56:24:66:41:d0:20:
                    44:9d:9c:62:44:23:90:b0:99:26:f9:2c:90:01:95:
                    71:4d:77:5a:70:b6:54:e1:c5:73:74:f2:17:43:d9:
                    50:98:c7:fe:5d:26:7e:e1:f5:67:bf:2e:65:80:9d:
                    ca:6f:cc:bd:b9:47:fa:08:26:54:40:e4:5b:c8:cd:
                    67:59:6e:c9:2c:a6:51:bd:62:12:2b:15:fe:37:7a:
                    32:af:e1:0c:21:b2:6a:5c:08:c2:ed:b7:7c:bf:14:
                    e0:bd:86:32:7a:37:bc:66:f3:99:83:fa:c9:4b:70:
                    17:a3:9e:81:58:cb:25:c4:e5:df:3a:5b:8c:6e:5c:
                    93:9c:c0:bb:f3:1a:1a:d4:78:eb:d5:8e:29:4a:d1:
                    e2:e9:6c:83:94:29:4b:c7:cf:5a:d6:5f:6d:81:e9:
                    ad:97:66:18:af:27:4a:a0:79:2b:bd:fa:13:16:3c:
                    78:32:4b:b6:6b:97:61:a5:90:06:19:1f:38:ce:65:
                    fb:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:5F:BA:27:1C:0F:F7:5C:D7:57:72:02:FC:0D:27:2B:97:8F:EF:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f54b24c6-8163-3a6b-b686-74fead81a66c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.254.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:a4:8a:f3:03:0d:69:c9:00:a3:5d:07:e8:71:c7:bc:36:ff:
         c6:df:1b:d1:6f:50:4c:43:1f:3f:b0:40:c5:e8:e9:7f:43:81:
         9e:6f:90:c1:61:63:7c:99:a2:0a:5e:ea:1d:d0:1c:35:09:38:
         4f:f0:52:3f:ff:f4:ae:30:0f:ae:6f:2f:ea:b0:4e:84:c6:4e:
         3f:6c:d6:d7:68:e7:84:c1:5f:db:b5:f8:b0:d9:5b:a8:ea:ec:
         14:48:40:99:ae:81:f3:57:5a:19:d1:b0:fe:36:b0:5b:98:33:
         75:48:3e:ac:f7:91:28:2b:c9:93:96:9f:ca:19:9e:63:f4:e0:
         14:98:88:b7:a1:17:f9:20:41:0d:ef:2b:d8:c3:be:51:a4:48:
         0b:04:cd:71:a7:e9:43:9c:0f:e2:76:1d:4f:23:87:41:3f:3e:
         69:72:ea:12:69:47:5a:9d:2e:4f:7a:c8:59:0e:29:17:7a:3b:
         75:ed:fb:dd:f0:f7:75:ea:5a:30:51:8d:99:a3:cc:90:02:f8:
         60:78:b0:84:8a:7a:3b:8d:95:78:35:7a:92:3c:fd:a4:47:bf:
         bd:03:11:66:6b:a6:02:36:da:67:57:6a:60:de:6d:d1:c1:ef:
         f0:c7:1c:88:57:fd:93:a1:8b:46:0f:91:7f:b1:63:7d:04:1e:
         d6:33:11:14
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0AtLLQC6zfdQBcP4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDIyNzE0MDU0MFoXDTI2MDUyODEzMDU0MFowLzEtMCsGA1UEAxMk
ZTk4Njg5OTktOTRhYi00YTNkLTlkMzAtM2M0ZjA5YmQ4OThhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAKyuRuKnXMrMqBeQq6fKRO0GzdQSYGVOTaF
kBZxqskLGvc7KG/ZEEeD8yvmw64L9hIel4h3pCqtHxUDPKY9zu5SpeFWJGZB0CBE
nZxiRCOQsJkm+SyQAZVxTXdacLZU4cVzdPIXQ9lQmMf+XSZ+4fVnvy5lgJ3Kb8y9
uUf6CCZUQORbyM1nWW7JLKZRvWISKxX+N3oyr+EMIbJqXAjC7bd8vxTgvYYyeje8
ZvOZg/rJS3AXo56BWMslxOXfOluMblyTnMC78xoa1Hjr1Y4pStHi6WyDlClLx89a
1l9tgemtl2YYrydKoHkrvfoTFjx4Mku2a5dhpZAGGR84zmX7/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDFfuiccD/dc11dyAvwNJyuXj+96MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZjU0YjI0YzYtODE2My0z
YTZiLWI2ODYtNzRmZWFkODFhNjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJv5oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMekivMDDWnJAKNdB+hxx7w2/8bfG9FvUExDHz+wQMXo6X9DgZ5vkMFh
Y3yZogpe6h3QHDUJOE/wUj//9K4wD65vL+qwToTGTj9s1tdo54TBX9u1+LDZW6jq
7BRIQJmugfNXWhnRsP42sFuYM3VIPqz3kSgryZOWn8oZnmP04BSYiLehF/kgQQ3v
K9jDvlGkSAsEzXGn6UOcD+J2HU8jh0E/Pmly6hJpR1qdLk96yFkOKRd6O3Xt+93w
93XqWjBRjZmjzJAC+GB4sISKejuNlXg1epI8/aRHv70DEWZrpgI22mdXamDebdHB
7/DHHIhX/ZOhi0YPkX+xY30EHtYzERQ=
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:30:19 2026 by rpki-client