Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2499c957-1a9c-37ca-9b89-cf88f61ee915.roa
File:                     2499c957-1a9c-37ca-9b89-cf88f61ee915.roa (raw, json)
Hash identifier:          z5+2dwKGynobXmuiPwAQ4QCYsx+MKazJGNAKyczwsA4=
Subject key identifier:   04:BF:86:A2:CD:33:85:AF:95:9E:72:3E:8A:25:14:1C:57:DE:15:38
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E00063821DB8E088EE868CDFA
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2499c957-1a9c-37ca-9b89-cf88f61ee915.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     398576
IP address blocks:        38.57.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:06:38:21:db:8e:08:8e:e8:68:cd:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=3e23d11c-78be-493f-bc95-5b3f5ed46228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:aa:ce:b9:d0:bd:0e:af:fa:ab:f1:44:da:f8:
                    7d:13:34:18:66:4e:c8:23:3d:59:0c:f3:e7:e8:53:
                    1f:65:6f:d3:7f:d3:b5:3d:2f:aa:aa:84:64:41:a8:
                    30:da:6c:b7:28:b9:63:b4:66:13:6b:e0:56:b1:f2:
                    cc:1f:84:1d:c6:79:2a:2c:74:be:ed:54:e5:84:82:
                    d2:ee:f6:68:44:a5:7f:ae:8d:99:75:6e:80:3f:38:
                    2c:06:fc:36:08:62:4a:68:e1:1c:ae:bb:08:61:08:
                    39:3f:0f:e2:7d:56:de:85:60:88:7e:8a:72:c4:74:
                    71:89:7b:60:70:79:61:8a:00:8a:04:ee:ca:79:01:
                    b6:fe:21:c2:ea:9b:e8:aa:aa:3e:2a:47:b8:df:ea:
                    f1:04:54:d9:84:4a:92:8d:7f:ca:0f:70:17:d3:1c:
                    07:53:1d:34:00:f1:9a:6f:1f:6c:ef:84:c9:79:bf:
                    ee:44:80:b3:19:86:31:08:1d:13:17:ed:ca:7d:b5:
                    35:9d:59:9e:8e:a3:3f:ef:06:19:24:9c:64:4a:e5:
                    51:09:9b:df:ce:e0:11:35:80:78:cf:37:ee:49:d3:
                    d0:99:c9:7e:ec:d8:ba:ae:01:3b:ff:a2:90:fc:e1:
                    94:4e:45:07:01:db:b9:b5:3c:d9:d4:3e:ca:85:b4:
                    e8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:BF:86:A2:CD:33:85:AF:95:9E:72:3E:8A:25:14:1C:57:DE:15:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2499c957-1a9c-37ca-9b89-cf88f61ee915.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.57.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:dd:1a:9c:7b:94:d5:a7:15:b9:bc:ec:79:21:08:91:c6:8c:
         96:f9:ab:49:26:3a:b9:94:2d:de:71:e7:6c:8d:bd:bd:a3:cf:
         03:a8:36:42:f3:af:c4:fc:b6:39:26:75:df:80:70:13:8a:57:
         d9:59:c8:f0:eb:42:65:64:04:f8:11:f1:f9:62:8d:43:22:30:
         f2:ac:e3:0a:7a:bc:0d:e0:fe:8f:29:95:7c:e6:41:2e:c6:6d:
         f7:01:e6:46:1f:a7:33:97:12:e4:2e:fd:08:2f:b8:2a:70:57:
         6f:a1:bf:14:0f:80:30:69:ea:59:6e:61:78:bf:11:38:8d:9b:
         c2:49:01:c4:01:3b:20:76:a8:04:01:8e:3b:d2:cc:db:6e:62:
         38:53:4a:f0:3d:4d:ae:8f:fe:be:60:61:b6:ca:5a:40:e0:03:
         73:22:0a:23:55:da:33:41:4c:71:d9:82:12:58:f6:7e:34:ab:
         39:36:e8:7b:60:9a:90:e0:ae:10:75:f1:45:5f:06:59:e7:0b:
         93:bf:25:0a:fa:39:34:02:ea:81:05:b6:08:b1:d6:b3:fa:cd:
         80:f2:4f:e1:0f:89:72:15:95:bc:a1:fd:b9:87:5e:f4:65:0e:
         c4:e7:7d:64:70:0c:01:27:90:82:07:ba:c1:de:22:0c:ba:4c:
         54:aa:ed:f6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ABjgh244IjuhozfowDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk
M2UyM2QxMWMtNzhiZS00OTNmLWJjOTUtNWIzZjVlZDQ2MjI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6rOudC9Dq/6q/FE2vh9EzQYZk7IIz1ZDPPn
6FMfZW/Tf9O1PS+qqoRkQagw2my3KLljtGYTa+BWsfLMH4QdxnkqLHS+7VTlhILS
7vZoRKV/ro2ZdW6APzgsBvw2CGJKaOEcrrsIYQg5Pw/ifVbehWCIfopyxHRxiXtg
cHlhigCKBO7KeQG2/iHC6pvoqqo+Kke43+rxBFTZhEqSjX/KD3AX0xwHUx00APGa
bx9s74TJeb/uRICzGYYxCB0TF+3KfbU1nVmejqM/7wYZJJxkSuVRCZvfzuARNYB4
zzfuSdPQmcl+7Ni6rgE7/6KQ/OGUTkUHAdu5tTzZ1D7KhbTolQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAS/hqLNM4WvlZ5yPoolFBxX3hU4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMjQ5OWM5NTctMWE5Yy0z
N2NhLTliODktY2Y4OGY2MWVlOTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJjn4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB/dGpx7lNWnFbm87HkhCJHGjJb5q0kmOrmULd5x52yNvb2jzwOoNkLz
r8T8tjkmdd+AcBOKV9lZyPDrQmVkBPgR8flijUMiMPKs4wp6vA3g/o8plXzmQS7G
bfcB5kYfpzOXEuQu/QgvuCpwV2+hvxQPgDBp6lluYXi/ETiNm8JJAcQBOyB2qAQB
jjvSzNtuYjhTSvA9Ta6P/r5gYbbKWkDgA3MiCiNV2jNBTHHZghJY9n40qzk26Htg
mpDgrhB18UVfBlnnC5O/JQr6OTQC6oEFtgix1rP6zYDyT+EPiXIVlbyh/bmHXvRl
DsTnfWRwDAEnkIIHusHeIgy6TFSq7fY=
-----END CERTIFICATE-----
Generated at Fri Jun 12 22:40:08 2026 by rpki-client