Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2fb8e8c1-3a59-3021-8732-2821b447f1ed.roa
File:                     2fb8e8c1-3a59-3021-8732-2821b447f1ed.roa (raw, json)
Hash identifier:          J8Qt1jZUMNU396NUYc7WWrM5qZbHBtBS67JhQy8VIyI=
Subject key identifier:   2A:6E:0E:05:17:58:07:B4:5D:7E:53:87:4C:39:B0:67:66:8B:7B:E2
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F49749966209114BECF6E2580
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2fb8e8c1-3a59-3021-8732-2821b447f1ed.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     0
IP address blocks:        38.130.192.0/19 maxlen: 19
                          38.130.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:99:66:20:91:14:be:cf:6e:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=e3ff1cbe-69af-4f29-97bb-a1c990de3de8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:bd:05:20:35:7b:90:54:b0:a3:6a:34:c4:1a:
                    a9:d9:a8:50:df:e8:c6:38:49:e8:45:48:88:9f:bc:
                    b2:94:fe:85:ae:4e:8d:83:5b:5b:a1:1d:21:17:05:
                    69:d4:2a:5b:75:cf:cc:6d:fd:5d:a2:08:1b:c9:4b:
                    1a:3f:c6:d5:5f:6b:9b:b1:95:d0:0c:13:93:22:97:
                    e6:dd:c1:2e:43:74:eb:67:35:3b:ec:6b:b8:6c:4b:
                    af:de:af:08:8e:e7:bd:a5:a2:0d:06:59:4f:e1:fa:
                    bf:0b:c0:f6:40:08:33:46:fa:33:2c:9d:99:7b:a0:
                    46:00:4b:4b:25:f1:0b:6a:46:41:dc:8f:07:13:2f:
                    c2:5a:11:cc:da:60:ab:02:e3:7a:5f:49:8b:ec:ba:
                    0e:fa:5e:b3:fb:22:de:80:4d:1d:83:fe:3f:fd:12:
                    2d:8d:cb:c6:e1:53:a2:d5:23:4e:91:a1:56:ba:e9:
                    3c:02:b5:b7:15:01:d6:19:06:ff:d4:04:75:c3:8f:
                    46:b0:96:c3:95:76:53:d0:a5:ed:c1:ed:ea:26:b9:
                    00:39:f8:d8:e4:87:51:56:b4:4d:37:a4:9b:a7:41:
                    b0:0e:b7:2c:36:e6:f5:e1:1d:35:f7:d8:50:1f:9d:
                    8b:67:58:dd:06:da:d8:da:48:7c:16:10:3e:1a:73:
                    2f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:6E:0E:05:17:58:07:B4:5D:7E:53:87:4C:39:B0:67:66:8B:7B:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2fb8e8c1-3a59-3021-8732-2821b447f1ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.130.192.0-38.130.239.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:37:83:00:c0:bc:f5:97:f2:ee:51:28:97:4b:9c:8d:1a:ba:
         46:9e:36:9c:0e:74:8b:4d:ea:f9:de:d9:18:23:1a:36:00:4d:
         b3:ed:0e:01:af:bc:1b:d7:18:7a:e7:b7:0f:01:01:bf:77:48:
         94:0e:42:c5:68:5f:f4:1c:51:96:d5:d9:74:5d:ee:8e:eb:0f:
         0a:fb:2e:26:0c:60:19:93:3c:8e:a4:5e:31:db:c0:87:b8:ae:
         52:98:f5:35:cf:4c:e2:03:a0:5b:6d:4a:4b:14:7b:94:77:b2:
         a8:87:80:0e:1a:79:fe:70:81:99:3e:5e:f0:d8:53:04:57:4e:
         34:7c:87:64:eb:c6:c6:e1:26:58:8a:fd:e2:df:26:2e:15:ba:
         df:59:9f:5b:a9:7b:05:35:9c:b6:e9:34:6f:92:7d:6f:46:5e:
         9f:cc:fd:a9:23:bd:cf:a3:29:dd:6f:c2:dd:0d:aa:4c:7d:dd:
         76:62:8f:09:d9:3d:4f:70:82:ed:92:ff:6f:5d:62:2e:91:65:
         bf:28:db:e3:45:5c:4c:6c:7a:54:6c:2e:4f:d3:54:ad:aa:fa:
         2c:f8:43:b0:d0:d3:3b:c0:2d:0b:25:cd:96:ca:cf:b4:0c:cd:
         fe:ae:02:d9:a7:ce:3c:5b:81:df:ca:e4:db:22:43:d9:05:02:
         e8:d7:5e:fb
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE9JdJlmIJEUvs9uJYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZTNmZjFjYmUtNjlhZi00ZjI5LTk3YmItYTFjOTkwZGUzZGU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn70FIDV7kFSwo2o0xBqp2ahQ3+jGOEnoRUiI
n7yylP6Frk6Ng1tboR0hFwVp1Cpbdc/Mbf1doggbyUsaP8bVX2ubsZXQDBOTIpfm
3cEuQ3TrZzU77Gu4bEuv3q8Ijue9paINBllP4fq/C8D2QAgzRvozLJ2Ze6BGAEtL
JfELakZB3I8HEy/CWhHM2mCrAuN6X0mL7LoO+l6z+yLegE0dg/4//RItjcvG4VOi
1SNOkaFWuuk8ArW3FQHWGQb/1AR1w49GsJbDlXZT0KXtwe3qJrkAOfjY5IdRVrRN
N6Sbp0GwDrcsNub14R0199hQH52LZ1jdBtrY2kh8FhA+GnMvCQIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFCpuDgUXWAe0XX5Th0w5sGdmi3viMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMmZiOGU4YzEtM2E1OS0z
MDIxLTg3MzItMjgyMWI0NDdmMWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAYmgsAD
BAQmguAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAjzeDAMC89Zfy7lEol0ucjRq6Rp42nA50i03q+d7ZGCMa
NgBNs+0OAa+8G9cYeue3DwEBv3dIlA5CxWhf9BxRltXZdF3ujusPCvsuJgxgGZM8
jqReMdvAh7iuUpj1Nc9M4gOgW21KSxR7lHeyqIeADhp5/nCBmT5e8NhTBFdONHyH
ZOvGxuEmWIr94t8mLhW631mfW6l7BTWctuk0b5J9b0Zen8z9qSO9z6Mp3W/C3Q2q
TH3ddmKPCdk9T3CC7ZL/b11iLpFlvyjb40VcTGx6VGwuT9NUrar6LPhDsNDTO8At
CyXNlsrPtAzN/q4C2afOPFuB38rk2yJD2QUC6Nde+w==
-----END CERTIFICATE-----
Generated at Tue Oct 27 15:03:28 2026 by rpki-client