Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0df1ec43-2bda-3649-88e1-cfaf620330a0.roa
File:                     0df1ec43-2bda-3649-88e1-cfaf620330a0.roa (raw, json)
Hash identifier:          tDgtQSIOkym0QclMa4O5gyCrlZFnN4kHG4yHtBMqiKU=
Subject key identifier:   18:18:F5:E9:86:91:6E:1B:80:3B:C3:7F:52:06:04:F0:9B:7F:87:70
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F74B8246470600E1E0A88CD00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0df1ec43-2bda-3649-88e1-cfaf620330a0.roa
Signing time:             Sat 10 Oct 2026 13:00:13 +0000
ROA not before:           Sat 10 Oct 2026 13:00:13 +0000
ROA not after:            Fri 08 Jan 2027 14:00:13 +0000
asID:                     273919
IP address blocks:        38.130.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:74:b8:24:64:70:60:0e:1e:0a:88:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct 10 13:00:13 2026 GMT
            Not After : Jan  8 14:00:13 2027 GMT
        Subject: CN=3e2a655f-3958-4f07-b95d-445e28c56c71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:12:54:c1:3a:67:ad:99:3f:1f:57:7b:73:db:
                    c8:7f:ed:92:bf:a0:e6:b6:ad:6f:4b:53:2c:25:6c:
                    6c:2d:f3:ce:fd:d3:c5:07:1d:33:4b:81:7f:fd:8a:
                    6c:f1:56:2a:1e:30:a0:10:00:9d:19:ef:5b:30:fd:
                    4f:70:f1:9b:36:39:b0:07:b7:11:0c:69:fe:1b:3a:
                    c6:13:5c:23:b3:9d:ac:59:84:50:c7:5e:3d:1d:aa:
                    f6:50:0d:df:31:e6:d2:40:31:05:cf:27:be:2e:6c:
                    f0:77:ef:58:fe:21:41:ca:b4:72:57:fe:95:41:ee:
                    3c:54:e7:17:e6:28:8d:f9:0f:3c:36:fc:bb:56:cc:
                    db:f4:f2:3e:1f:c0:cf:e2:8a:fd:20:9a:2f:00:87:
                    bb:66:6e:d9:db:c5:9c:2a:2c:69:1e:7b:33:6b:21:
                    79:3d:59:22:7a:94:24:ab:8a:d1:1a:23:c4:07:24:
                    84:e0:d6:17:d8:67:64:32:41:3b:da:a9:15:5d:ef:
                    91:b5:da:48:81:13:92:0a:aa:76:51:a9:de:d1:7d:
                    0e:b9:d8:02:3a:ad:f3:e1:e5:e5:2e:80:51:0a:4c:
                    0a:02:4f:8d:15:12:e7:1b:73:e9:fa:1a:d9:cc:7e:
                    4c:13:b4:e2:da:78:6f:ba:4d:d9:0e:c7:b8:8c:da:
                    8f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:18:F5:E9:86:91:6E:1B:80:3B:C3:7F:52:06:04:F0:9B:7F:87:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0df1ec43-2bda-3649-88e1-cfaf620330a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.130.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:77:93:1d:0f:e7:55:03:94:8c:d2:94:8e:00:d1:8c:44:d5:
         fb:66:20:b9:dc:0a:38:21:50:d3:0a:fb:f8:99:33:65:67:99:
         51:f3:9f:27:c8:05:a4:68:bf:8a:8a:17:45:c3:4a:0e:13:a8:
         a5:36:15:a7:1a:5a:70:d3:d9:db:11:47:01:0d:ac:1b:fb:59:
         8d:e1:90:33:1a:33:ed:c4:4e:87:8b:7f:38:0b:b8:01:1c:a2:
         bf:6d:ac:4e:79:36:e9:e5:a6:04:19:f9:d2:f4:09:f8:08:a9:
         53:86:cb:fc:a1:73:78:27:fe:52:64:88:db:04:40:15:4a:94:
         ca:08:ec:68:41:7d:bf:6e:d5:2a:d6:77:6d:10:31:b3:3c:e6:
         6b:07:68:85:b0:8b:df:92:07:01:02:8f:f1:21:00:fa:d3:7e:
         5f:d1:fe:fe:82:30:0c:4b:d0:15:2c:ef:13:8c:e2:f2:05:22:
         20:04:93:5b:bc:e5:02:20:74:09:2a:df:e8:e2:8a:7f:48:e9:
         c7:78:b6:d6:3f:b3:f7:29:c3:7f:f8:f4:b5:8a:48:f4:aa:8e:
         9a:c5:b0:b2:6b:d7:1f:97:01:8a:01:cf:67:69:00:8d:33:85:
         bc:c8:6e:e4:14:b6:52:86:f4:55:db:22:e9:b6:1a:8c:02:d5:
         5a:b1:e2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 02:27:14 2026 by rpki-client