Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/08c38ee5-0778-3387-b269-d2bf971a7e16.roa
File:                     08c38ee5-0778-3387-b269-d2bf971a7e16.roa (raw, json)
Hash identifier:          88UhLnF10Go0tY8/VnH8ODz9IZXrPGxlSmWhAcLntIg=
Subject key identifier:   1A:92:90:24:61:9F:0E:BF:A0:6C:2D:77:39:7C:95:A2:87:16:E4:60
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D221EF8DBA403030F01E3E100
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/08c38ee5-0778-3387-b269-d2bf971a7e16.roa
Signing time:             Wed 11 Mar 2026 13:21:28 +0000
ROA not before:           Wed 11 Mar 2026 13:21:28 +0000
ROA not after:            Tue 09 Jun 2026 13:21:28 +0000
asID:                     213338
IP address blocks:        149.12.108.0/23 maxlen: 24
                          149.12.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:22:1e:f8:db:a4:03:03:0f:01:e3:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Mar 11 13:21:28 2026 GMT
            Not After : Jun  9 13:21:28 2026 GMT
        Subject: CN=493952c5-058f-4d14-8f7b-e7436eda2047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:4b:db:8a:ce:72:79:5c:2c:2c:55:9b:3c:77:
                    c4:4d:57:f8:78:09:a5:1f:e6:73:d6:cb:f2:d7:55:
                    27:57:58:3b:b2:23:f6:7d:a8:f2:59:a3:b8:ec:b3:
                    c2:56:2c:10:79:58:d5:65:cb:4f:44:3a:ec:e6:70:
                    6a:8a:c8:83:90:73:6e:8f:97:e1:e4:9e:15:fc:93:
                    f7:0b:c0:33:70:f7:84:81:e5:e3:e1:7f:71:b7:2e:
                    32:57:f2:48:03:b0:e4:3e:4f:05:ae:0f:33:c9:5a:
                    27:93:d7:c0:43:d6:f0:3a:dc:56:23:a3:55:a6:d7:
                    41:8a:7f:d9:07:ae:08:02:b6:53:c7:0b:bd:fe:cf:
                    ce:da:1d:b1:3b:1d:7f:5f:24:4c:1c:0f:56:0b:e4:
                    57:48:f6:21:df:2f:81:52:84:86:a4:6d:0b:b9:c1:
                    f6:73:a0:a5:fe:54:cd:e5:38:00:07:d4:49:df:81:
                    99:e5:18:ac:cb:db:41:5d:4b:73:5b:b8:b1:9c:e8:
                    3a:c9:e6:c8:62:6d:b7:cd:7f:c5:09:bc:9e:1a:9b:
                    89:74:bb:c2:1d:31:0e:58:16:59:3a:32:dc:2f:6e:
                    49:84:7b:b6:85:3a:b2:43:d9:9f:0d:cc:9d:1f:a4:
                    af:eb:97:75:40:45:27:c1:29:ae:dc:a7:61:58:db:
                    b8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:92:90:24:61:9F:0E:BF:A0:6C:2D:77:39:7C:95:A2:87:16:E4:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/08c38ee5-0778-3387-b269-d2bf971a7e16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.12.108.0-149.12.110.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:e9:11:00:db:46:32:42:66:a7:af:6c:dd:2e:4e:94:7d:be:
         18:f8:96:5e:e1:49:e1:71:70:52:4e:0a:9f:30:c6:dc:dd:5a:
         50:b4:d4:d4:bf:3e:16:ce:cc:f2:e4:c8:b0:d4:bf:c6:6c:da:
         33:37:7c:0d:0d:5a:bc:60:6c:1c:94:26:f0:3d:4d:4c:2f:34:
         75:e1:f8:4c:dd:8d:cc:71:5b:83:48:73:42:df:95:62:ae:c1:
         56:c4:8e:9b:48:c1:05:7a:bb:e0:3c:11:e1:93:3a:f3:2f:2e:
         32:db:2c:fc:06:ec:24:4c:b5:50:33:e0:00:1b:f7:97:66:ba:
         7c:9e:b8:4d:ee:9b:ec:c1:0f:53:eb:ab:e4:14:98:c2:ee:fa:
         a3:fa:18:ea:84:0e:3c:36:01:ad:94:cb:30:99:52:da:fd:33:
         06:f3:34:81:9a:8e:d5:6e:12:0b:8b:d3:b9:66:c8:71:32:e7:
         9a:88:2e:18:9a:b7:9f:71:af:e9:ef:db:f7:fa:ea:7d:10:91:
         fb:a1:76:44:24:0c:cc:05:d4:2e:f6:13:fc:0e:68:74:7e:58:
         6a:54:8f:fc:e9:9c:8a:1c:eb:ae:ec:15:68:82:5e:ea:97:c7:
         3b:96:78:44:89:1d:56:83:a9:52:70:55:97:e6:bf:5d:14:05:
         9a:bf:5e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 18:25:42 2026 by rpki-client