Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/311a88de-2cdd-364b-86de-991a81a95792.roa
File:                     311a88de-2cdd-364b-86de-991a81a95792.roa (raw, json)
Hash identifier:          aGbZ0reBc4G/f2jF1TBSUROwNBeFFSH6b3unAVb/nfg=
Subject key identifier:   DF:7C:F6:38:34:DD:8E:89:49:6B:E6:C2:4F:24:23:9C:51:E6:01:B4
Certificate issuer:       /CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Certificate serial:       010D0C9F4328584EF9E213DA4F97AA3FB47AB880
Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/311a88de-2cdd-364b-86de-991a81a95792.roa
Signing time:             Thu 27 Aug 2026 13:00:12 +0000
ROA not before:           Thu 27 Aug 2026 13:00:12 +0000
ROA not after:            Wed 25 Nov 2026 14:00:12 +0000
asID:                     33598
IP address blocks:        138.8.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f9:e2:13:da:4f:97:aa:3f:b4:7a:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be
        Validity
            Not Before: Aug 27 13:00:12 2026 GMT
            Not After : Nov 25 14:00:12 2026 GMT
        Subject: CN=ce5b186a-60c0-45b6-ad8d-9a26c46ead3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:88:75:9d:26:95:41:e6:90:d5:6e:33:cc:62:
                    9a:45:83:8a:ab:17:26:80:79:fc:d8:a6:18:37:4d:
                    fa:97:14:1f:76:2e:0d:d8:e9:32:b8:22:f6:e0:0c:
                    22:90:82:54:b1:42:40:3e:1c:92:9a:e1:0c:b2:25:
                    f7:4a:2b:06:0a:81:b3:87:1b:0b:5b:8b:d4:14:c0:
                    25:58:6a:2b:96:1b:07:16:6d:52:65:f6:ae:99:ad:
                    01:4e:a9:e3:1e:7a:0b:4f:4b:56:9c:3c:b4:66:66:
                    85:b1:2d:1d:5b:cb:b4:1e:9b:9e:c2:9c:af:36:08:
                    68:35:72:d7:7a:54:f5:a0:a0:6a:b2:93:3b:5f:25:
                    6e:33:e3:38:10:1b:ae:07:c0:8b:ed:fd:c5:56:13:
                    e2:e8:d8:ab:60:2d:76:ca:9e:11:cd:91:b4:61:17:
                    f9:07:d0:2f:5e:4a:02:20:2c:84:88:ca:23:ff:7c:
                    45:bd:94:08:ef:2e:3d:00:3b:2a:53:60:da:e6:bc:
                    69:c3:42:ad:17:3c:94:c5:29:6c:79:dc:aa:f9:a5:
                    5d:07:f2:ca:a3:99:d4:41:00:1d:c6:da:de:09:66:
                    7c:82:a6:31:67:62:34:bc:70:66:c7:6a:12:42:fe:
                    99:9d:00:5d:57:12:7b:da:72:03:15:e4:38:b2:8f:
                    13:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:7C:F6:38:34:DD:8E:89:49:6B:E6:C2:4F:24:23:9C:51:E6:01:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/311a88de-2cdd-364b-86de-991a81a95792.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl

            X509v3 Authority Key Identifier:
                keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.8.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:dd:27:b3:3c:31:23:59:99:63:1b:80:8c:13:ef:fc:6d:2a:
         89:92:5c:28:ed:da:94:01:19:ef:11:8a:35:19:a9:5e:f8:df:
         cc:94:50:78:25:e1:c2:73:14:c0:fb:76:a4:10:5f:5f:72:5b:
         9c:71:2d:ec:ec:76:cf:7d:e1:fa:fd:0f:b5:75:d0:1c:89:92:
         7a:f4:30:2f:60:0c:f0:c2:ae:0e:ac:84:2e:22:f6:76:b2:dd:
         52:3a:7b:3b:3a:d1:f2:b5:41:f0:12:a6:fb:da:5f:fd:3d:1f:
         13:4b:e3:17:1e:5f:c3:f7:33:67:da:a8:6c:90:92:65:e1:23:
         42:4d:fa:49:80:43:75:65:f3:35:15:b6:46:35:72:fb:19:43:
         bd:e5:f1:7e:da:d1:49:c7:8b:99:79:24:38:a6:ae:ac:1c:11:
         07:d4:bb:dc:a4:dc:6f:ff:b5:97:c5:fe:93:80:ce:6a:27:fe:
         cd:fb:63:cb:e6:bb:8d:a5:da:be:cb:5d:ac:6e:ee:93:d1:db:
         f8:69:6f:87:db:97:02:93:80:ac:23:ed:4d:d9:89:81:c9:ac:
         6b:d1:c1:7f:b4:b6:56:8e:2f:4a:04:ed:46:07:27:4d:c7:25:
         0f:c2:a9:bf:3d:b4:4d:8c:54:91:5d:59:75:92:13:d6:c1:33:
         0c:14:80:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 12:35:17 2026 by rpki-client