Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/29546ab9-bfd5-3ae6-8d07-6a950d7769fb.roa
File:                     29546ab9-bfd5-3ae6-8d07-6a950d7769fb.roa (raw, json)
Hash identifier:          CudAgHx/vPMJbicE/8hqSt8BgocFI2KiEZoaPUVeEM0=
Subject key identifier:   88:83:55:40:1F:25:B9:93:60:9F:EA:BB:77:CA:CA:11:D6:B0:2C:74
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584EDF5C8C1BF0501F2F36FC9BC0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/29546ab9-bfd5-3ae6-8d07-6a950d7769fb.roa
Signing time:             Tue 18 Aug 2026 01:00:12 +0000
ROA not before:           Tue 18 Aug 2026 01:00:12 +0000
ROA not after:            Mon 16 Nov 2026 02:00:12 +0000
asID:                     140224
IP address blocks:        38.54.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:df:5c:8c:1b:f0:50:1f:2f:36:fc:9b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Aug 18 01:00:12 2026 GMT
            Not After : Nov 16 02:00:12 2026 GMT
        Subject: CN=bda0b02b-ce26-4e00-bf49-d68ede9446b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0f:d7:ef:1e:c7:ff:a7:d9:56:2e:05:b7:c8:
                    05:c5:f5:ae:68:52:b5:20:a1:64:48:57:3b:00:28:
                    40:61:78:05:14:a9:20:a6:86:02:3a:bf:db:39:be:
                    05:d4:94:1c:28:00:0d:5c:9c:a7:d3:8f:05:7d:0b:
                    f1:b5:61:b2:e5:93:e9:3a:d4:50:9e:a1:a8:d1:0c:
                    30:e7:d7:14:4c:2a:07:e3:25:22:19:31:b4:60:43:
                    db:ed:b8:d8:01:65:0e:e6:2f:41:7b:7a:c9:b6:9b:
                    61:6b:49:ef:df:04:bc:f7:a3:e3:2c:9e:24:78:10:
                    dd:94:08:eb:e9:6d:5d:e2:df:df:cb:00:2d:25:70:
                    1d:f6:17:6b:a9:b0:ed:0a:26:26:f3:6d:55:15:2a:
                    58:01:2a:95:ad:c2:87:48:95:c8:a4:32:de:00:f4:
                    68:6f:82:68:59:38:75:6c:f2:5e:3c:c3:04:65:08:
                    10:68:cb:45:c6:ef:ad:13:16:e9:25:19:76:f4:97:
                    8e:cd:4d:8f:80:39:95:e5:6e:61:ee:8b:58:7a:7f:
                    f1:bb:52:fd:1c:63:ec:7a:30:8c:1c:66:86:53:45:
                    47:68:09:22:a9:92:54:5e:4e:61:22:d6:60:5c:bb:
                    00:4e:95:d7:1e:5c:95:da:d6:4a:53:53:85:3e:87:
                    53:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:83:55:40:1F:25:B9:93:60:9F:EA:BB:77:CA:CA:11:D6:B0:2C:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/29546ab9-bfd5-3ae6-8d07-6a950d7769fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.54.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:c2:3a:86:cc:4e:eb:78:4a:2f:c7:88:72:4d:28:d0:18:de:
         26:0e:cf:b9:94:92:c5:08:d6:71:ea:2c:1a:91:d6:ff:d5:cb:
         90:ec:9d:01:66:25:71:dc:91:66:61:98:48:38:c9:68:73:5e:
         70:71:a8:da:5e:4f:34:03:3c:c0:28:42:d2:72:47:6f:1c:bb:
         d0:13:09:68:3f:72:14:4e:cb:e8:eb:e8:2c:95:7b:04:f0:7c:
         68:d4:8e:b5:17:33:57:2a:d3:5c:29:dd:96:6c:51:d6:06:d4:
         60:dc:cd:35:22:62:f4:27:a4:0b:2a:0b:87:0d:41:81:d9:7f:
         12:7d:17:17:83:ba:c2:3f:8c:31:0a:7f:67:c2:6a:d8:70:09:
         b8:76:ec:06:ef:30:ae:2a:15:c3:cc:b4:95:31:21:98:6b:2b:
         db:72:bc:39:56:f9:da:16:2b:a8:0d:8f:ac:c6:f1:73:3e:93:
         5a:21:bd:36:9d:62:48:93:fe:d6:6c:da:88:72:2a:a2:ab:97:
         3f:eb:73:e4:6b:ad:0d:f0:58:2f:38:2f:ca:23:e6:60:96:34:
         22:e8:9c:5c:42:3a:a2:84:39:e7:2e:58:80:0e:61:96:75:7d:
         8b:21:d6:44:29:04:45:e9:b2:a9:bd:7f:1f:85:30:3c:ce:d4:
         08:7d:aa:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:19:14 2026 by rpki-client