Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/bd622c8c-98c4-3319-a690-d52a27bc2f2b.roa
File:                     bd622c8c-98c4-3319-a690-d52a27bc2f2b.roa (raw, json)
Hash identifier:          2w5I2f5Mk+J9sybAA25E0q6AO+MY/8uugawKGvH3a9A=
Subject key identifier:   74:D1:A3:DD:CF:BC:56:0F:38:0E:32:6C:59:33:23:F9:9E:BE:B4:D3
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F4328584EA7882B2E0D17971F16559480
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/bd622c8c-98c4-3319-a690-d52a27bc2f2b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     237
IP address blocks:        35.38.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:2b:2e:0d:17:97:1f:16:55:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=fe53d567-eac1-44ca-8e29-dd7d27f6cafa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f9:f8:d1:58:31:0a:1c:85:96:0b:7b:ec:24:
                    07:06:91:97:92:fa:ab:51:c6:c5:7c:56:39:3e:58:
                    28:86:f7:18:15:15:91:6b:d5:c0:31:c1:42:4e:75:
                    68:67:31:b7:6e:3b:2f:5c:10:b3:b2:96:6a:9a:65:
                    85:1b:61:83:87:88:7c:f1:e4:5d:c6:b2:da:a8:37:
                    e6:f6:09:6e:75:84:b4:ba:86:05:a7:21:60:42:2a:
                    87:ec:b9:2f:ec:a5:20:db:a6:8b:d9:95:df:01:84:
                    cf:db:d4:6a:91:db:78:ca:38:1d:94:2c:ad:8c:ca:
                    58:e3:90:1c:fd:f3:ce:de:8c:fc:ff:8f:da:a5:25:
                    c7:da:49:ce:68:52:56:f1:76:f9:72:26:0d:d7:86:
                    70:6e:4e:c3:57:ab:6c:68:6c:d8:43:d3:99:a4:0b:
                    6c:a2:ec:25:e0:55:aa:93:ee:a3:95:3f:30:2b:13:
                    53:77:f4:6e:6d:6b:52:a3:90:55:04:2a:bf:94:20:
                    c7:f5:3b:59:71:a9:75:ab:84:5e:94:c2:46:2a:21:
                    3a:49:80:3e:ef:64:8d:1e:58:2d:30:4f:bb:36:9f:
                    d4:81:6c:e6:b1:5b:45:3f:1a:90:68:86:a8:4e:42:
                    be:6c:b4:07:c9:e3:43:7a:62:36:c7:1f:9e:6c:8e:
                    c1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:D1:A3:DD:CF:BC:56:0F:38:0E:32:6C:59:33:23:F9:9E:BE:B4:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/bd622c8c-98c4-3319-a690-d52a27bc2f2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.38.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:b0:ad:e2:fd:a7:97:d7:6f:9f:22:95:43:44:c2:8c:f6:ea:
         52:c7:32:a9:f8:50:44:50:7d:ea:06:75:9b:9c:04:00:e7:2b:
         3c:96:a0:28:48:3f:45:46:7b:3a:47:4d:b4:a4:65:d4:0d:94:
         1d:95:a2:09:f5:ec:ee:01:fb:46:8b:cb:b1:fe:4a:64:61:ff:
         35:c4:03:59:dc:05:60:38:9a:73:17:6e:33:2d:da:1f:d3:37:
         92:c2:50:b5:f6:de:99:fa:8c:46:8f:a1:7c:ee:15:0c:ec:91:
         e9:9d:0b:5e:20:96:1b:82:5f:b8:89:03:9b:db:d3:02:f4:19:
         5d:69:f1:d9:0c:00:53:1e:85:95:f4:f1:0b:06:ee:29:69:0a:
         8a:ee:b2:32:21:f8:6c:ad:09:22:d5:a6:e5:9c:f0:69:6b:40:
         f7:2c:f1:11:95:71:19:08:b7:7b:3a:22:01:e3:64:52:1c:be:
         38:6d:20:6e:6b:7d:fe:5e:3c:20:ac:a4:15:ea:21:bb:59:76:
         a3:2d:c0:d5:38:20:38:a9:3b:1e:4e:c2:2a:7d:49:71:f6:8c:
         4f:d0:c5:8a:42:f5:78:a9:73:f6:f8:58:7a:0a:e5:3e:9f:06:
         cc:b0:70:f5:0b:bf:96:7e:a3:2f:34:08:f0:4c:ed:d2:dd:0d:
         fe:e5:3f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 22:43:13 2026 by rpki-client