Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/b07b906e-1603-39e7-a468-674776625a7d.roa
File:                     b07b906e-1603-39e7-a468-674776625a7d.roa (raw, json)
Hash identifier:          YM9p00FFx1We3CXOlytyS2/XrgcOBwIUMzNBw0IZ7Aw=
Subject key identifier:   A1:DD:76:48:BF:63:1E:B2:E0:89:08:67:C4:47:6C:27:26:BD:BE:6B
Certificate issuer:       /CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Certificate serial:       010D0C9F4328584D773A72A7008D978D1EE54500
Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/b07b906e-1603-39e7-a468-674776625a7d.roa
Signing time:             Sat 11 Apr 2026 01:00:24 +0000
ROA not before:           Sat 11 Apr 2026 01:00:24 +0000
ROA not after:            Fri 10 Jul 2026 01:00:24 +0000
asID:                     33598
IP address blocks:        138.8.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Apr 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:77:3a:72:a7:00:8d:97:8d:1e:e5:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be
        Validity
            Not Before: Apr 11 01:00:24 2026 GMT
            Not After : Jul 10 01:00:24 2026 GMT
        Subject: CN=7a369279-bc5c-4b81-8887-af2cb2f5e307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e2:f9:2c:a7:03:c7:1f:38:af:8d:44:62:c8:
                    55:7a:60:d8:59:8b:f9:eb:52:1e:f6:dd:b6:8b:95:
                    4a:62:d7:47:ed:ea:52:99:b0:75:07:38:29:34:43:
                    cb:44:d5:81:8e:e1:0f:ea:de:b2:e3:a5:85:10:01:
                    6a:e3:fd:ca:e7:82:d9:b2:1e:d4:d7:ca:98:b4:53:
                    3e:85:25:27:b7:5b:bd:80:07:1f:6e:2a:83:a2:e2:
                    55:0b:4d:c1:a4:89:d9:89:6c:54:42:aa:18:be:4f:
                    2e:c3:de:4a:0c:aa:9b:18:0e:3f:25:96:33:6f:94:
                    9a:47:c2:91:2f:8f:ba:62:a4:78:29:25:02:7e:d2:
                    98:7e:b0:bb:4a:d7:4f:d5:cc:0e:52:ab:05:19:c6:
                    28:16:88:48:1d:4b:8e:dd:69:9b:e4:86:f4:77:d0:
                    13:e6:38:c8:e4:28:89:d1:74:af:89:e6:bf:49:0a:
                    76:89:bb:5c:38:73:b0:4d:fa:09:c8:77:a9:d5:01:
                    e8:56:04:80:9a:21:b8:5b:8d:ec:1b:c1:5d:82:e3:
                    90:0b:e5:32:09:9e:1e:28:37:07:eb:46:35:95:43:
                    c7:50:aa:b2:7b:e4:59:b9:f7:32:50:7e:b1:45:64:
                    c2:ca:30:4d:71:67:03:a6:f4:62:00:f5:2f:8c:4d:
                    2d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:DD:76:48:BF:63:1E:B2:E0:89:08:67:C4:47:6C:27:26:BD:BE:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/b07b906e-1603-39e7-a468-674776625a7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl

            X509v3 Authority Key Identifier:
                keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.8.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:b4:a6:33:c1:f2:cc:38:7a:2a:79:4f:99:a5:98:6a:6b:14:
         6c:5b:6b:29:c8:01:44:14:47:60:db:6c:03:6e:52:d9:05:4f:
         7e:9e:cb:a8:66:9b:16:94:fa:12:1a:8d:62:69:af:e8:51:62:
         eb:ed:e0:26:a8:2c:ab:ca:ea:e3:d3:67:bb:76:67:9c:ce:d2:
         c2:85:d8:d3:ca:af:91:58:68:a2:e2:f8:df:50:b7:41:68:dd:
         d8:8e:fc:fe:a2:76:c4:26:82:ba:c9:bb:63:c0:8f:15:6f:8f:
         01:8c:4d:b6:9c:7f:e9:a5:5c:ff:8f:72:b5:c5:04:9f:81:b5:
         95:7b:af:d0:bb:a7:c2:53:ad:2d:6f:cc:9e:d1:77:79:12:46:
         b5:f2:13:e9:fb:71:3b:a1:7d:76:42:1e:f3:5d:a9:6e:2f:cc:
         7a:28:72:76:0c:28:1c:5b:a5:bb:f1:1e:97:98:7c:bf:2e:94:
         8a:2a:8b:d6:94:80:98:e2:6a:c8:90:9c:0a:2c:bc:e9:76:cd:
         bf:0c:52:d5:9e:b8:ff:db:06:86:c7:e8:4e:f3:bc:d6:2b:5c:
         1f:8f:39:d3:b8:e9:2d:8d:d1:de:d7:b4:c9:5f:e3:28:18:fa:
         59:8d:e6:8c:a5:51:90:5c:5a:51:75:ed:a6:14:fb:fe:33:81:
         85:9b:c6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 11:36:14 2026 by rpki-client