Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2fb8e8c1-3a59-3021-8732-2821b447f1ed.roa
File:                     2fb8e8c1-3a59-3021-8732-2821b447f1ed.roa (raw, json)
Hash identifier:          pEk1N3JKPWufH2ae3OgDJ5vRUovZUjARrWCLJ9rFKZY=
Subject key identifier:   BF:C4:82:31:DB:D2:29:4D:4B:1B:3C:86:31:53:9D:79:97:05:80:91
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D186CFEEBEA256AB6CBCF1200
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2fb8e8c1-3a59-3021-8732-2821b447f1ed.roa
Signing time:             Sun 08 Mar 2026 02:00:31 +0000
ROA not before:           Sun 08 Mar 2026 02:00:31 +0000
ROA not after:            Sat 06 Jun 2026 01:00:31 +0000
asID:                     0
IP address blocks:        38.130.192.0/19 maxlen: 19
                          38.130.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:18:6c:fe:eb:ea:25:6a:b6:cb:cf:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Mar  8 02:00:31 2026 GMT
            Not After : Jun  6 01:00:31 2026 GMT
        Subject: CN=e98f185c-dab8-4206-a2fb-6b966a488895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:df:d5:80:bc:12:5e:01:03:6b:42:88:25:09:
                    ed:67:c7:16:94:a0:1a:52:44:2f:a9:3d:b9:a3:15:
                    30:8f:58:ee:5d:a9:82:f3:9e:85:6b:56:d7:15:48:
                    14:99:1d:1e:f4:4a:9a:e7:2e:db:b5:5d:a8:fd:b2:
                    ee:f9:7e:f0:87:90:07:c4:3b:41:e6:4c:f1:e9:2d:
                    21:50:4e:4e:20:09:9d:cf:85:6f:c6:cf:9d:ec:c8:
                    7f:ad:4b:c9:b6:0a:5d:7f:29:ed:b5:8e:e2:20:99:
                    eb:60:92:b0:fc:7d:45:43:14:b9:25:79:92:f4:38:
                    8e:76:24:87:29:9f:ce:5c:1e:1e:b3:bb:57:ba:fe:
                    00:ad:9b:1b:6d:08:21:68:38:57:4d:82:6e:f4:96:
                    61:f8:07:66:0b:04:8a:b6:d0:df:88:5e:5c:99:cb:
                    64:f6:eb:ad:20:f2:3a:b3:a9:f7:d2:03:64:54:53:
                    ee:8e:14:62:f9:f3:f4:2e:aa:36:a4:4b:3c:aa:c6:
                    4c:0e:ef:f6:cd:14:8e:dc:26:e8:41:5a:96:d4:15:
                    fa:43:cb:05:3b:69:04:a4:f4:5d:80:f4:25:71:ba:
                    7c:66:55:9d:2f:51:62:81:8a:13:6b:db:d6:d1:33:
                    de:13:c7:66:2f:50:a7:87:73:d8:9b:4f:68:2d:67:
                    28:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:C4:82:31:DB:D2:29:4D:4B:1B:3C:86:31:53:9D:79:97:05:80:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2fb8e8c1-3a59-3021-8732-2821b447f1ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.130.192.0-38.130.239.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:f3:94:0f:be:00:10:25:a2:7f:07:6d:4e:da:70:1b:53:e7:
         d2:f4:49:32:31:f6:4d:51:a2:a0:60:d5:6c:d2:b8:54:ee:9f:
         ed:3c:b9:cf:e4:23:f0:e4:37:30:74:8f:88:26:6f:84:7e:b0:
         af:0f:94:ae:13:8e:84:43:e5:91:da:3e:3a:bd:36:c9:d2:68:
         a4:b2:8c:23:b4:84:a7:e0:83:ad:a2:5e:01:62:fa:fe:77:dd:
         eb:96:79:83:6c:2c:c0:89:47:28:65:7d:59:20:a5:6a:e7:e7:
         8c:97:88:b5:43:b9:89:a3:da:f5:16:3b:b1:d9:c5:f6:58:7a:
         3e:92:50:54:61:61:24:fc:57:1b:35:f2:7e:0a:c1:e9:cd:a6:
         d8:7a:3c:7f:cb:f3:4e:0e:f1:b5:30:9d:02:d9:80:d2:d9:01:
         af:93:95:0b:be:fb:43:dd:15:f7:e4:77:e0:74:5c:fd:2f:a1:
         9f:0d:b4:5b:12:97:9f:57:b8:43:49:0a:07:a7:25:e3:35:70:
         0e:5a:a2:8a:fd:f6:c6:38:c9:49:c9:f9:90:cf:b0:f9:e2:2c:
         9c:c9:cf:06:e8:21:6f:f2:19:0d:d2:2a:4d:f0:91:7c:37:89:
         89:26:31:71:37:34:47:72:33:35:86:ae:9a:30:45:d8:04:8c:
         25:e6:4f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 18:21:42 2026 by rpki-client