Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0ecb9baf-be24-3732-a6c5-b78ce28091fd.roa
File:                     0ecb9baf-be24-3732-a6c5-b78ce28091fd.roa (raw, json)
Hash identifier:          bTwUfnSB9qsuM7FO1mMKjg/YEi14fG7gyg59rk4PMdE=
Subject key identifier:   6C:A1:6A:06:A9:5F:28:89:34:3F:FF:48:D9:0E:8E:3A:80:BF:9D:62
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F8B0DA355BCEB619DCB459F40
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0ecb9baf-be24-3732-a6c5-b78ce28091fd.roa
Signing time:             Sun 18 Oct 2026 13:00:12 +0000
ROA not before:           Sun 18 Oct 2026 13:00:12 +0000
ROA not after:            Sat 16 Jan 2027 14:00:12 +0000
asID:                     137182
IP address blocks:        38.45.112.0/22 maxlen: 24
                          38.45.116.0/22 maxlen: 24
                          38.57.132.0/22 maxlen: 24
                          38.92.72.0/21 maxlen: 24
                          38.99.252.0/22 maxlen: 24
                          38.107.164.0/22 maxlen: 24
                          38.135.136.0/21 maxlen: 24
                          154.46.140.0/22 maxlen: 24
                          154.57.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8b:0d:a3:55:bc:eb:61:9d:cb:45:9f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct 18 13:00:12 2026 GMT
            Not After : Jan 16 14:00:12 2027 GMT
        Subject: CN=7ca45910-8814-4554-b3f6-702f2e0010ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c8:20:c8:9b:b3:22:6f:93:d3:9a:f4:cc:4f:
                    f5:79:63:5f:88:3c:45:7f:06:e0:77:7b:59:5e:fb:
                    3a:29:c8:c0:3a:12:4d:36:a7:34:42:d2:26:ea:1b:
                    72:c3:8e:fd:05:36:bf:c1:fa:27:8a:68:a4:88:a7:
                    75:5b:cd:23:cc:79:20:1e:be:da:84:6b:91:65:8a:
                    b6:c3:c7:45:bc:51:d1:76:53:15:ce:31:9a:2b:78:
                    f0:76:2b:a2:e0:ed:6e:ee:9b:d1:1e:94:d5:65:6f:
                    e5:36:73:46:34:12:06:72:7f:e6:38:d0:96:ca:1e:
                    e9:96:7e:c9:a6:dc:cb:31:b3:d0:57:68:32:74:d8:
                    91:1a:aa:f6:11:1a:a7:1e:a7:ac:9b:a1:2e:6f:27:
                    22:80:97:56:4c:fa:97:ad:bb:3c:ea:66:cc:c4:d1:
                    a3:06:11:62:45:32:84:59:49:3d:e7:f2:29:b8:c7:
                    0b:1d:d1:eb:1d:08:78:27:28:4f:da:a5:9e:8d:af:
                    52:52:c5:e6:31:31:c1:1f:03:80:f9:b9:76:ba:5c:
                    1e:6b:23:bb:e4:64:28:22:45:d0:7d:81:a3:6d:fb:
                    64:96:81:45:81:6f:49:c8:ed:59:e4:80:3a:50:5b:
                    f1:9b:32:2e:14:ad:75:77:b6:1e:44:3d:2c:5d:c0:
                    ab:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:A1:6A:06:A9:5F:28:89:34:3F:FF:48:D9:0E:8E:3A:80:BF:9D:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0ecb9baf-be24-3732-a6c5-b78ce28091fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.45.112.0/21
                  38.57.132.0/22
                  38.92.72.0/21
                  38.99.252.0/22
                  38.107.164.0/22
                  38.135.136.0/21
                  154.46.140.0/22
                  154.57.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:09:18:05:d5:cd:ab:0c:35:d3:23:b9:ca:da:06:74:e0:f2:
         8e:92:ef:d7:94:d5:86:1f:9a:39:55:b6:64:54:80:e9:6c:a2:
         a7:70:f0:d1:b1:db:6b:ac:65:c9:0b:33:cc:ff:0e:20:fb:9b:
         ed:77:71:eb:2f:65:9c:d0:fc:76:af:c2:1a:eb:5a:a4:60:2c:
         d6:9d:a9:a6:ef:e0:a1:2e:36:8f:6f:9d:ce:6c:86:e2:6b:87:
         2e:4a:93:be:2d:dc:83:b2:c1:7f:17:96:bf:b0:ce:b6:a0:4b:
         4a:c7:23:13:b5:9d:d4:88:81:de:32:0f:6e:e7:8f:9c:5a:d7:
         5b:49:82:eb:4c:a8:cc:95:c9:ae:b8:03:a1:d7:eb:ea:d1:42:
         51:49:a1:19:be:e2:8b:ce:e4:3f:cb:88:35:a0:43:c9:e6:b9:
         1f:fc:c2:03:da:7a:a1:5a:57:58:35:4e:ce:4d:e5:ce:59:74:
         04:6c:24:65:6d:6e:d7:b2:0a:82:e0:ee:b2:a3:50:c2:f7:4b:
         22:6c:80:f6:0b:11:a1:48:99:88:09:76:d5:ee:70:27:4e:4f:
         94:46:9d:99:ae:f4:0e:ba:30:21:82:96:c9:9c:9c:06:9d:a8:
         22:c1:17:ca:af:df:f2:54:2d:d1:48:df:b8:14:a0:dd:0f:97:
         a0:2f:43:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:37:27 2026 by rpki-client