Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2030b98b-fe76-32d8-adcf-d0ea4cf168c4.roa
File:                     2030b98b-fe76-32d8-adcf-d0ea4cf168c4.roa (raw, json)
Hash identifier:          SZKwU0S4eFA57VpJmzGbmNdOwcwJXa0Jpfv0mw71A9I=
Subject key identifier:   4F:32:EC:42:8A:E3:C0:0D:A4:2E:67:21:41:FB:31:D3:F7:FD:B9:21
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F94D335D977F742A8A35FF780
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2030b98b-fe76-32d8-adcf-d0ea4cf168c4.roa
Signing time:             Thu 22 Oct 2026 01:00:12 +0000
ROA not before:           Thu 22 Oct 2026 01:00:12 +0000
ROA not after:            Wed 20 Jan 2027 02:00:12 +0000
asID:                     61625
IP address blocks:        38.93.48.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:94:d3:35:d9:77:f7:42:a8:a3:5f:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct 22 01:00:12 2026 GMT
            Not After : Jan 20 02:00:12 2027 GMT
        Subject: CN=f3a9c0ed-07cb-41ea-8d22-729d85a8b788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b0:99:8b:45:60:b9:05:53:69:83:be:7c:3c:
                    aa:36:80:78:76:9a:17:7e:a2:c9:3d:33:4c:cf:f1:
                    b5:b5:73:5f:d9:b4:3e:24:28:24:42:61:12:f1:7b:
                    13:a4:68:74:39:87:b6:b0:71:83:c8:bb:d5:cd:48:
                    9d:da:ab:8b:e9:ac:ac:8a:e2:80:39:48:90:25:ab:
                    76:d2:c7:31:83:9d:f2:03:d5:ab:d0:5e:4e:71:0a:
                    4a:72:d7:bf:3b:06:1c:08:85:a2:80:8e:33:f7:e4:
                    13:f4:41:55:7c:70:2f:a1:3d:9f:56:80:10:97:6b:
                    7c:92:19:94:4b:56:d5:0c:f2:20:10:11:27:43:f5:
                    4a:3b:43:f2:4e:94:ab:d0:61:19:4e:c5:43:c9:ea:
                    fe:8a:1d:ab:7b:a9:09:3c:4f:7d:b5:68:f0:7b:27:
                    74:5c:0f:98:4b:61:04:c6:0d:7e:c7:74:af:c1:06:
                    da:c6:7f:a2:aa:0a:04:8f:dd:d9:52:23:12:ee:19:
                    05:c8:1b:3a:f2:14:f1:cc:7c:5d:bf:3a:0a:33:fa:
                    ec:fa:08:55:83:1c:cc:d9:18:8d:9b:06:d4:ae:5c:
                    ea:c8:da:ec:75:49:1e:b3:39:96:9a:56:db:4e:8c:
                    c2:67:ab:c9:41:d0:19:b3:64:e4:a5:90:4a:7e:7d:
                    2b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:32:EC:42:8A:E3:C0:0D:A4:2E:67:21:41:FB:31:D3:F7:FD:B9:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2030b98b-fe76-32d8-adcf-d0ea4cf168c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.93.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:56:63:e0:bf:97:48:61:d9:f9:e8:2b:e0:74:56:fa:a6:db:
         29:fe:71:52:aa:ab:6d:96:79:91:c7:21:8e:9c:72:d3:dd:0c:
         52:8d:7c:4a:b3:73:16:14:94:d2:b2:d2:b5:7d:63:10:43:6d:
         c4:70:e9:55:50:8b:b1:01:11:70:54:d9:88:9f:32:4a:7c:bd:
         94:03:f8:cd:87:b2:03:36:e4:b8:c7:1f:50:a8:63:e0:d2:fc:
         ba:85:f7:8f:88:75:a6:58:26:1c:e4:38:72:1a:e9:47:38:70:
         97:4d:76:4d:f0:c1:37:4c:56:de:6b:a1:ea:b8:dd:4f:82:9a:
         44:e1:f2:2e:0e:49:8e:cb:bd:cd:81:dc:a2:d1:7a:8e:23:86:
         58:b6:ff:2b:bd:b7:2f:29:a2:f1:f3:e4:06:b4:e4:2f:5d:d3:
         8c:6c:ee:d4:9c:8c:13:30:37:ee:02:4e:22:57:02:dc:18:ca:
         d6:f7:d8:5e:2c:d8:6f:3a:f0:da:32:5d:8c:7c:83:db:33:57:
         d4:9d:5a:ca:2a:e4:7e:72:e3:c0:f0:45:36:1d:52:0b:5e:3c:
         4b:ff:26:4d:20:63:44:52:ab:ab:94:8b:d8:e3:03:19:0b:65:
         7e:8b:63:25:33:f4:03:63:be:4d:8a:9d:e1:96:05:6d:14:1f:
         b9:c6:6f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:43:38 2026 by rpki-client