Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/febc75ab-2c2a-3ef6-baba-3be5106b6799.roa
File:                     febc75ab-2c2a-3ef6-baba-3be5106b6799.roa (raw, json)
Hash identifier:          Z9GqEXAOZr6OQp+6V7EvMxgtkYmBkiMscdkomaw1Nes=
Subject key identifier:   6B:29:50:07:68:27:C3:E1:BC:0E:37:0B:4E:3D:8E:A9:20:1F:54:4C
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D5234FCFF74D80C1EE6798600
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/febc75ab-2c2a-3ef6-baba-3be5106b6799.roa
Signing time:             Sat 28 Mar 2026 18:44:37 +0000
ROA not before:           Sat 28 Mar 2026 18:44:37 +0000
ROA not after:            Mon 11 May 2026 01:00:31 +0000
asID:                     58087
IP address blocks:        38.87.116.0/23 maxlen: 24
                          38.97.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:34:fc:ff:74:d8:0c:1e:e6:79:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Mar 28 18:44:37 2026 GMT
            Not After : May 11 01:00:31 2026 GMT
        Subject: CN=e1c2e455-9122-42b7-9eb4-3b1a19c05615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:5c:fa:6e:39:60:56:e8:cb:42:b2:db:ed:09:
                    4f:f9:82:f7:ca:71:b5:b6:0d:32:d3:63:ea:8e:d3:
                    6c:a4:0a:93:04:49:1b:a7:c7:da:64:2f:93:2e:2d:
                    20:7e:a4:98:7d:99:9a:33:ea:12:78:13:32:fc:26:
                    87:03:85:50:96:c8:4b:c7:63:14:ff:e5:d5:96:5a:
                    70:36:6f:d0:34:8f:70:3a:c6:7f:d6:f1:98:c5:4d:
                    3a:73:c4:ad:37:a4:9a:b2:1f:f1:82:14:90:e5:00:
                    a8:ff:55:fb:f3:5d:97:67:4e:3c:53:4f:47:85:64:
                    5a:52:d1:0b:4a:1f:20:55:59:15:ee:85:e5:42:3d:
                    fe:19:7a:d6:f9:63:e3:a4:c0:ec:61:0e:91:08:e0:
                    42:d3:6f:5b:63:8b:29:25:17:5f:59:89:26:b3:01:
                    5e:55:04:6a:3f:45:d5:a2:8b:f0:d0:e0:a1:83:29:
                    2a:9d:49:91:a2:38:9f:19:8a:9e:ad:8d:b2:11:dc:
                    49:77:77:01:7f:b8:4b:3b:fd:2f:2e:44:b1:db:2d:
                    34:29:17:75:94:b5:cc:5a:93:ab:55:9f:4b:5c:be:
                    e6:e3:64:bc:c8:fb:04:c6:41:20:51:03:72:31:52:
                    18:87:95:c5:57:ff:e5:b2:67:fa:6e:7f:7c:e3:d0:
                    e5:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:29:50:07:68:27:C3:E1:BC:0E:37:0B:4E:3D:8E:A9:20:1F:54:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/febc75ab-2c2a-3ef6-baba-3be5106b6799.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.87.116.0/23
                  38.97.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:81:e3:74:4e:50:4c:1f:db:5e:b9:27:d2:6a:27:0e:c7:ce:
         45:1c:9d:cc:69:38:3f:af:ad:47:99:2b:98:43:a1:94:08:4b:
         ad:95:97:b9:17:7b:0c:3f:af:3a:c8:6e:ef:2c:dd:a8:98:91:
         da:27:73:cb:ff:98:9a:2a:10:74:bf:51:c7:6e:21:34:77:3c:
         b2:22:c1:11:a2:60:45:9c:9c:3e:65:93:cc:08:70:b9:7b:ed:
         61:6a:9f:cc:91:16:85:4b:2f:07:46:f8:ba:b3:7d:9a:04:15:
         08:be:09:72:68:bd:01:4b:bc:05:b4:2d:82:e6:53:a1:cf:fb:
         c1:d5:4e:da:36:7c:64:1b:f0:ea:80:02:4f:a5:9f:c9:32:0e:
         b6:1c:c8:3b:af:1f:a8:f4:fe:d8:ca:04:00:0f:16:b3:67:c7:
         45:fd:c5:8b:cf:1d:54:ae:37:07:d2:8d:09:71:10:17:d9:45:
         98:84:a1:1b:a8:1e:34:a0:76:e8:d2:c5:4c:c0:cf:69:51:b0:
         21:2a:57:13:1f:19:59:d6:67:5a:f4:d9:b4:53:66:ef:68:35:
         0f:6d:bc:6e:91:2d:ce:39:08:58:6f:f9:c6:41:64:33:d4:5d:
         23:79:ac:a7:77:c2:31:ad:fa:09:e7:7e:a2:18:51:d1:c8:64:
         8f:6e:4d:77
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE1SNPz/dNgMHuZ5hgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDMyODE4NDQzN1oXDTI2MDUxMTAxMDAzMVowLzEtMCsGA1UEAxMk
ZTFjMmU0NTUtOTEyMi00MmI3LTllYjQtM2IxYTE5YzA1NjE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFz6bjlgVujLQrLb7QlP+YL3ynG1tg0y02Pq
jtNspAqTBEkbp8faZC+TLi0gfqSYfZmaM+oSeBMy/CaHA4VQlshLx2MU/+XVllpw
Nm/QNI9wOsZ/1vGYxU06c8StN6Sash/xghSQ5QCo/1X7812XZ048U09HhWRaUtEL
Sh8gVVkV7oXlQj3+GXrW+WPjpMDsYQ6RCOBC029bY4spJRdfWYkmswFeVQRqP0XV
oovw0OChgykqnUmRojifGYqerY2yEdxJd3cBf7hLO/0vLkSx2y00KRd1lLXMWpOr
VZ9LXL7m42S8yPsExkEgUQNyMVIYh5XFV//lsmf6bn9849DlBQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFGspUAdoJ8PhvA43C049jqkgH1RMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZmViYzc1YWItMmMyYS0z
ZWY2LWJhYmEtM2JlNTEwNmI2Nzk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBJld0AwQA
JmE4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAKaB43ROUEwf2165J9JqJw7HzkUcncxpOD+vrUeZK5hDoZQI
S62Vl7kXeww/rzrIbu8s3aiYkdonc8v/mJoqEHS/UcduITR3PLIiwRGiYEWcnD5l
k8wIcLl77WFqn8yRFoVLLwdG+LqzfZoEFQi+CXJovQFLvAW0LYLmU6HP+8HVTto2
fGQb8OqAAk+ln8kyDrYcyDuvH6j0/tjKBAAPFrNnx0X9xYvPHVSuNwfSjQlxEBfZ
RZiEoRuoHjSgdujSxUzAz2lRsCEqVxMfGVnWZ1r02bRTZu9oNQ9tvG6RLc45CFhv
+cZBZDPUXSN5rKd3wjGt+gnnfqIYUdHIZI9uTXc=
-----END CERTIFICATE-----
Generated at Sun Apr 19 13:01:45 2026 by rpki-client