Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d3a745f8-f563-31b0-883f-e1beeece202f.roa
File:                     d3a745f8-f563-31b0-883f-e1beeece202f.roa (raw, json)
Hash identifier:          3WF8tfPq8LJfxoxwMSKh7HaqFRiDldeTjcKVjYN9syk=
Subject key identifier:   03:5D:F4:FC:F3:04:25:C6:07:97:87:C5:0D:8D:59:61:F0:A7:B2:ED
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E6E9E2391D5D06A4B3D6C0600
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d3a745f8-f563-31b0-883f-e1beeece202f.roa
Signing time:             Wed 08 Jul 2026 15:46:04 +0000
ROA not before:           Wed 08 Jul 2026 15:46:04 +0000
ROA not after:            Tue 06 Oct 2026 15:46:04 +0000
asID:                     139415
IP address blocks:        38.106.171.0/24 maxlen: 24
                          38.111.14.0/24 maxlen: 24
                          38.111.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6e:9e:23:91:d5:d0:6a:4b:3d:6c:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jul  8 15:46:04 2026 GMT
            Not After : Oct  6 15:46:04 2026 GMT
        Subject: CN=6551a5a7-11cb-4263-854d-4fe98bad9ab4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:11:f8:e2:92:bf:7d:ca:a7:36:74:67:03:13:
                    5d:6a:58:e1:3d:99:c3:76:02:0d:1a:a9:67:c5:18:
                    a0:da:1c:c5:1e:af:69:92:05:25:e9:d5:bb:2b:85:
                    4b:47:a4:b9:db:6a:5d:c0:e5:d6:92:c8:08:7c:49:
                    4d:a5:2a:6e:4e:66:ad:ea:50:42:45:1b:c9:58:14:
                    c8:70:ee:74:dd:7b:bb:16:0f:92:8e:9b:69:28:2c:
                    99:cf:68:8d:c7:49:66:bc:df:30:b8:7c:7d:b5:61:
                    a9:c8:11:4a:7c:6d:80:03:50:e2:4a:f2:6c:9b:b8:
                    fb:3b:c4:87:df:e6:ed:d0:36:d8:ec:94:b7:9c:43:
                    ff:2d:dc:e6:ea:27:32:28:67:60:53:76:d2:08:e7:
                    78:f3:4b:78:2c:68:58:ad:b3:9a:03:d7:f8:a7:80:
                    fa:26:32:41:1c:d7:6f:8c:85:ed:9b:ec:1a:78:df:
                    cc:37:80:00:24:85:58:d9:54:5b:bd:18:d2:c3:ab:
                    61:41:ef:a7:67:8d:ae:5e:d9:98:92:8e:62:cc:da:
                    ce:08:8c:1f:6d:56:d2:0c:bc:d9:58:da:b5:68:4c:
                    eb:ac:e6:5e:15:53:5b:1d:3a:c1:ad:69:70:28:13:
                    f8:27:75:87:cf:46:d5:df:16:60:c7:d0:cf:12:7c:
                    7a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:5D:F4:FC:F3:04:25:C6:07:97:87:C5:0D:8D:59:61:F0:A7:B2:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d3a745f8-f563-31b0-883f-e1beeece202f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.106.171.0/24
                  38.111.14.0/24
                  38.111.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:e4:a7:37:09:74:45:3d:7c:17:a7:96:83:f5:a6:65:07:45:
         0a:d7:c7:d1:43:eb:c5:a6:77:21:53:6f:a6:af:d4:5d:8c:24:
         20:10:6b:c7:d9:8c:97:16:fd:1e:6e:ad:28:b1:ea:f9:3b:d2:
         7a:b4:e2:12:c9:57:bf:e7:50:ac:eb:d3:8a:62:37:43:80:07:
         41:23:42:e0:20:a9:75:fc:6b:4c:19:93:e7:64:3c:10:c3:37:
         59:f5:87:41:c7:9b:2b:7a:c4:9b:6d:cd:fa:51:58:b3:cb:34:
         e9:ed:06:ae:5f:72:f1:af:5a:88:f3:71:dc:3d:0b:df:7e:cb:
         b3:77:14:ff:57:1f:1b:96:e6:14:14:67:b1:f4:83:65:0f:8f:
         f3:a0:51:2b:87:d7:81:32:52:1c:46:c7:6f:92:1c:eb:73:40:
         09:f1:b6:49:d1:21:77:49:8d:1e:f6:8d:ee:b7:94:e7:5f:af:
         91:f1:c4:c6:19:94:22:47:0a:7d:88:a0:ba:d5:86:df:f5:97:
         d0:ba:14:42:c3:a1:65:ee:07:19:e4:c8:b2:78:0e:01:2e:6a:
         44:9d:7e:92:a7:ac:9e:67:8a:ea:02:bf:9e:a0:3c:e3:45:e4:
         82:5a:70:f8:7b:44:e7:21:5d:ca:f9:c1:53:99:38:4e:16:0c:
         f1:25:f3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 22:56:22 2026 by rpki-client