Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/37f84443-7d81-3d89-b28b-75eeab4b8991.roa
File:                     37f84443-7d81-3d89-b28b-75eeab4b8991.roa (raw, json)
Hash identifier:          UtWsElVDUy8asiAbo5+6ssK8fIJaTAN61c4WHNKsueI=
Subject key identifier:   07:7E:18:9E:5F:88:36:80:E1:BF:BE:F8:E9:DC:52:C9:FD:C0:20:97
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E5E3C39E36FBC97D4433E3680
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/37f84443-7d81-3d89-b28b-75eeab4b8991.roa
Signing time:             Thu 02 Jul 2026 18:55:51 +0000
ROA not before:           Thu 02 Jul 2026 18:55:51 +0000
ROA not after:            Wed 30 Sep 2026 18:55:51 +0000
asID:                     0
IP address blocks:        38.103.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5e:3c:39:e3:6f:bc:97:d4:43:3e:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jul  2 18:55:51 2026 GMT
            Not After : Sep 30 18:55:51 2026 GMT
        Subject: CN=1cde1228-70df-4c28-9e08-b28867701164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:de:fd:e0:7e:b5:c5:75:ad:d8:35:0c:e1:b6:
                    90:e8:88:79:2f:ba:c0:bd:2f:9a:17:01:6e:3c:d2:
                    9f:86:28:a7:2f:49:39:25:86:91:28:bd:dd:f0:17:
                    97:ee:15:85:b1:26:b3:2c:17:62:22:d0:61:cb:3b:
                    71:55:75:f5:b0:70:6f:b7:26:b9:82:4e:e9:16:8e:
                    32:db:83:13:cd:90:c7:c2:27:ad:16:49:30:33:e0:
                    96:6c:68:c8:09:c4:c7:e1:3f:81:a8:15:c9:2c:21:
                    d9:15:30:34:d1:6d:c5:47:08:54:95:d6:3c:24:1b:
                    34:06:8a:05:8a:7c:7b:9c:d7:7d:85:79:8c:fd:15:
                    a7:64:d6:44:2f:32:f2:48:6c:a9:9e:4b:70:42:b9:
                    63:47:a6:88:a2:ab:61:58:31:e7:61:c9:1b:c4:60:
                    db:24:07:c7:35:3a:c6:3d:eb:45:bc:6e:c7:05:46:
                    3b:cc:2d:8d:77:87:80:5d:bf:b4:a5:da:63:6a:1b:
                    a0:78:b7:a3:28:e4:0e:90:8c:79:c6:cd:d8:e2:51:
                    d7:cc:fe:f8:70:fa:1c:59:d7:a7:2a:34:00:80:83:
                    a7:6c:60:79:e0:1f:16:24:ea:29:f2:5f:72:dc:21:
                    7f:57:12:7a:3d:78:7c:46:0d:2d:95:fd:61:76:f4:
                    3f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:7E:18:9E:5F:88:36:80:E1:BF:BE:F8:E9:DC:52:C9:FD:C0:20:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/37f84443-7d81-3d89-b28b-75eeab4b8991.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.103.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:69:8d:cf:b7:68:67:08:e6:be:05:91:65:be:da:f6:44:47:
         9e:da:24:c1:c2:89:93:a2:b5:d4:66:73:cd:be:7d:18:63:9d:
         e9:98:6b:c1:43:a5:5a:a6:17:22:a3:44:6d:4b:2c:1c:26:2a:
         91:f3:c1:94:37:39:33:76:50:16:58:01:a2:1c:0f:c1:71:7e:
         76:a0:25:33:a5:15:46:77:9e:cf:88:52:06:73:ec:53:04:4f:
         61:40:49:8e:10:3b:3e:37:7b:03:b4:12:b6:24:91:85:b1:7b:
         c4:57:99:23:dd:9e:17:fd:d4:22:df:3b:86:97:11:1e:37:f6:
         11:24:bc:c6:c4:c2:ff:8c:7f:fd:4e:64:8a:73:61:3e:e1:df:
         43:4e:2f:d2:c0:92:86:26:f0:88:c4:3d:4d:e2:06:c7:22:77:
         cf:31:f2:05:8d:8d:3c:98:82:5f:9f:74:f6:95:f1:d7:13:9c:
         1b:b0:98:80:5f:c4:77:82:88:84:5a:11:7e:70:fe:cb:8f:e4:
         97:5d:e6:6e:15:d9:e0:42:20:1b:b2:63:22:af:71:8b:d6:c7:
         29:57:bb:02:61:07:ba:07:be:62:c6:25:6a:64:c0:ac:42:44:
         65:71:40:e3:55:14:83:b0:e0:45:02:c1:41:25:71:dc:38:00:
         16:c2:1b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 09:43:31 2026 by rpki-client