Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/14dcb802-9548-373d-8638-610826d9e0fe.roa
File:                     14dcb802-9548-373d-8638-610826d9e0fe.roa (raw, json)
Hash identifier:          dqbgDcW5MBU78SzKO/7oDm6OMOzImwjzg25GIkoolII=
Subject key identifier:   43:CA:D2:C8:4D:64:93:48:10:D0:A0:D8:66:FE:8C:0A:8A:DD:98:C2
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F7BB2F4E64015EE0AC35F1E00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/14dcb802-9548-373d-8638-610826d9e0fe.roa
Signing time:             Tue 13 Oct 2026 01:00:14 +0000
ROA not before:           Tue 13 Oct 2026 01:00:14 +0000
ROA not after:            Mon 11 Jan 2027 02:00:14 +0000
asID:                     18859
IP address blocks:        38.67.32.0/19 maxlen: 19
                          38.128.176.0/20 maxlen: 20
                          38.175.224.0/19 maxlen: 19
                          38.248.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7b:b2:f4:e6:40:15:ee:0a:c3:5f:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct 13 01:00:14 2026 GMT
            Not After : Jan 11 02:00:14 2027 GMT
        Subject: CN=2e4b9a39-41f5-4b01-a80c-b054ae33a49f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d1:4d:32:bb:5b:7a:02:06:c4:c6:c0:ab:6d:
                    96:1e:63:10:99:57:da:8a:b7:c3:06:25:d6:d9:4b:
                    7c:0a:75:72:58:92:34:89:01:df:f9:1e:9a:ef:60:
                    e7:e7:f9:6c:ac:ea:92:b1:6b:31:5f:b0:ff:5b:c4:
                    44:a4:5a:15:5d:b5:6b:05:7e:40:5d:94:5f:08:a4:
                    3c:fb:d4:9e:78:bc:9a:51:cf:5e:47:57:39:5a:ee:
                    c0:fb:31:a9:7f:45:c1:44:21:1a:e2:81:96:a3:8f:
                    76:79:5b:5b:5b:54:9c:8c:f8:8b:e6:9a:d7:73:ac:
                    08:47:f2:b0:07:a3:51:40:22:28:a8:d4:7f:db:08:
                    07:89:9b:f1:7b:8f:a9:6b:3b:ee:27:53:75:db:e1:
                    dd:27:64:80:5e:fc:11:a1:b3:fc:0b:e1:9a:2e:07:
                    fe:c1:51:9e:57:cd:1e:ad:05:e0:63:26:ad:70:21:
                    2d:48:6c:83:d4:7b:2b:cf:bc:b2:a2:57:04:47:6e:
                    83:30:a9:d9:5b:1b:5b:ec:08:84:13:2a:ac:be:7d:
                    5b:b4:33:ae:bc:81:c1:c4:17:83:38:c6:2f:4e:32:
                    33:7a:4e:22:ff:3b:f6:e3:5b:88:82:a3:dd:5c:9b:
                    74:19:75:37:29:c5:23:da:90:45:2b:a3:3e:98:75:
                    8e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:CA:D2:C8:4D:64:93:48:10:D0:A0:D8:66:FE:8C:0A:8A:DD:98:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/14dcb802-9548-373d-8638-610826d9e0fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.67.32.0/19
                  38.128.176.0/20
                  38.175.224.0/19
                  38.248.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:ca:09:82:86:aa:cd:2f:8b:f5:56:2f:6d:c8:44:f8:65:4c:
         ef:90:a8:c7:99:0c:bd:31:43:80:e8:0c:8a:73:27:a3:55:ae:
         74:7b:81:d2:07:40:dd:3e:79:f7:1a:e6:7e:d2:06:2a:97:f3:
         b4:39:8f:91:7e:e8:ec:01:96:23:3e:b4:be:b3:cf:5a:8e:72:
         57:d8:66:c9:21:d6:68:6d:64:9d:76:ae:16:fb:bb:8e:83:19:
         d1:b1:2b:74:be:01:c1:23:2d:da:4a:65:a6:08:0c:54:10:12:
         29:82:50:b7:7b:24:a7:a9:25:d8:e4:e0:5a:22:a5:b8:fe:a6:
         60:a8:2f:a0:57:88:0d:64:7c:8d:e4:a1:61:d2:b7:d9:e4:7c:
         ac:94:60:c0:ca:f7:77:a6:93:2e:24:1a:f0:d5:fa:be:c0:84:
         74:0d:44:1a:4f:e4:2a:0d:54:1e:76:48:1d:21:4a:24:4f:92:
         0e:41:e6:21:f1:02:ab:a3:3b:ca:e8:d5:05:2a:21:f7:ee:8f:
         9a:dd:50:eb:be:d5:8c:71:6f:ff:4c:05:eb:8e:e5:d1:36:3f:
         f4:12:0d:31:93:ae:89:d8:cd:7b:63:a1:67:c1:a9:e2:f4:5f:
         79:39:c0:4b:12:a0:08:db:fb:f3:e4:a3:f5:50:9c:72:5f:18:
         0e:9e:ea:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:31:13 2026 by rpki-client