Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/18da0ffd-f430-3c3c-8203-8e0d79456a03.roa
File:                     18da0ffd-f430-3c3c-8203-8e0d79456a03.roa (raw, json)
Hash identifier:          44p4dZ/fFPZ6Stv1hs0Q+meUs3oEdqAiu90hTcxtYoQ=
Subject key identifier:   AC:9F:0E:02:54:09:C1:82:EB:93:E8:BE:F2:85:BF:D4:81:73:CB:0A
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F721773B16210782D5792DF28
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/18da0ffd-f430-3c3c-8203-8e0d79456a03.roa
Signing time:             Fri 09 Oct 2026 14:24:51 +0000
ROA not before:           Fri 09 Oct 2026 14:24:51 +0000
ROA not after:            Thu 07 Jan 2027 15:24:51 +0000
asID:                     270209
IP address blocks:        38.45.248.0/23 maxlen: 24
                          38.94.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:72:17:73:b1:62:10:78:2d:57:92:df:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct  9 14:24:51 2026 GMT
            Not After : Jan  7 15:24:51 2027 GMT
        Subject: CN=516c86e9-5f7e-49df-9503-e35fa5e47d60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:76:2e:ae:07:5b:24:29:d7:1f:f4:4b:51:9c:
                    65:42:1f:b6:10:6c:7f:ff:ec:1d:f5:22:13:c8:79:
                    77:fd:6f:8d:4d:5d:18:46:3a:bf:43:79:9f:a7:31:
                    a0:7c:9c:59:e2:db:a6:e9:17:5a:cf:fe:0c:4f:80:
                    53:ae:b0:48:cf:e0:f8:2e:66:0e:42:15:0d:48:60:
                    6d:da:30:a1:bf:e8:11:39:89:18:83:99:48:fe:a9:
                    d4:9e:d8:33:eb:f4:15:d6:76:8d:a3:85:71:03:40:
                    ed:af:c7:95:f0:99:61:1f:40:f9:b3:ce:82:c1:3e:
                    59:87:c2:40:85:f2:18:93:fc:02:3d:9e:d5:e9:c8:
                    37:7b:69:65:02:3c:9f:94:78:c6:5e:a9:65:29:7b:
                    f3:81:90:e3:bc:f8:a1:2d:5b:f1:bb:62:2d:9c:ef:
                    56:c8:01:a7:17:4a:90:61:3d:de:41:28:8a:56:c1:
                    d3:b2:1c:a2:88:df:40:94:39:35:34:39:db:4f:92:
                    36:ea:2f:68:3d:bb:e5:22:a0:5b:60:8f:51:91:f8:
                    51:62:9d:bd:13:f5:b4:3e:e5:32:1c:c5:97:d6:3e:
                    29:cc:ed:7b:f0:95:4b:82:ff:f2:c2:69:f9:77:95:
                    d7:20:7d:81:2a:94:57:7d:92:d1:a9:69:7c:81:ff:
                    af:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:9F:0E:02:54:09:C1:82:EB:93:E8:BE:F2:85:BF:D4:81:73:CB:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/18da0ffd-f430-3c3c-8203-8e0d79456a03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.45.248.0/23
                  38.94.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:1c:96:2e:5e:92:01:dc:06:c8:fc:33:70:1f:f3:2a:14:16:
         67:16:d6:07:1c:99:47:5f:9d:c6:d8:42:7c:68:88:cc:bd:0d:
         12:83:06:12:51:c1:9e:b1:6b:fc:28:17:40:eb:69:54:f8:9e:
         34:de:a1:a6:76:cf:ef:d6:c9:01:06:52:39:95:79:6f:fe:38:
         73:64:26:98:b9:be:1c:30:09:84:0c:35:b1:a6:9a:48:9b:98:
         93:7d:63:38:12:3a:3c:0e:15:45:a5:73:6b:98:2b:8d:5d:dd:
         84:09:ab:d5:36:6b:39:e6:4d:d6:d8:62:38:5f:3e:85:4e:2b:
         6c:90:72:fa:2c:31:50:ed:f7:9d:3b:42:62:b5:58:55:3f:bb:
         67:80:9c:6f:03:86:b2:6c:90:ab:7e:5f:23:49:0f:99:c6:df:
         94:6c:f6:b9:7f:c5:d8:96:e8:b4:4f:9c:8c:b1:90:d2:6d:f2:
         33:30:f6:2e:83:f8:b3:b6:f8:9f:0a:a6:a2:f5:90:cb:b7:9f:
         e1:95:22:82:22:23:4f:e7:39:6b:e6:7a:1f:ce:57:e3:d4:4a:
         a2:84:bc:85:66:97:5f:06:2b:d2:98:ff:4f:6e:07:25:aa:5e:
         a6:b7:8a:e5:45:8a:f8:e3:e8:ab:56:f4:4f:dc:cc:5e:82:fb:
         a8:cb:f7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 20:50:17 2026 by rpki-client