Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3b5dea06-2052-30b0-9c33-31fdaef347fb.roa
File:                     3b5dea06-2052-30b0-9c33-31fdaef347fb.roa (raw, json)
Hash identifier:          zOyTBPetwcKCzqwnV+IuPLRtjIB1bTdnZEEySnt+Sck=
Subject key identifier:   F0:B2:99:F5:47:12:52:5A:95:B6:1C:C3:78:E1:D5:60:E9:B2:5C:37
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D93256668F4E98DB029ABC500
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3b5dea06-2052-30b0-9c33-31fdaef347fb.roa
Signing time:             Tue 21 Apr 2026 01:00:24 +0000
ROA not before:           Tue 21 Apr 2026 01:00:24 +0000
ROA not after:            Mon 20 Jul 2026 01:00:24 +0000
asID:                     400164
IP address blocks:        38.212.196.0/22 maxlen: 24
                          38.212.200.0/22 maxlen: 24
                          38.212.204.0/22 maxlen: 24
                          38.212.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:93:25:66:68:f4:e9:8d:b0:29:ab:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Apr 21 01:00:24 2026 GMT
            Not After : Jul 20 01:00:24 2026 GMT
        Subject: CN=5d2cd39b-8b9d-4f0c-b322-aca4900c3bca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d5:3f:97:44:81:2d:2d:4a:4b:35:4f:b9:d3:
                    05:31:8a:f6:ba:43:a7:a6:16:5a:df:23:25:60:95:
                    7e:dd:e9:aa:69:fc:ca:70:dd:de:7e:a4:0f:e9:10:
                    7e:d2:0a:35:9f:a0:1c:5d:f9:cf:77:f5:78:7d:52:
                    46:cf:1d:58:40:ee:a4:ff:46:8a:93:56:89:61:09:
                    b6:fc:27:2d:fd:90:9b:96:58:40:ea:9f:cd:d6:19:
                    9d:52:d1:b8:ba:75:4f:b8:44:a4:f1:21:1d:0e:d9:
                    ed:39:41:17:69:a3:6e:ee:2e:88:37:54:be:eb:52:
                    00:f0:2c:52:01:bd:e9:64:fa:f3:df:e8:63:f8:f4:
                    e3:05:b6:e4:fe:c0:df:3e:a7:67:9f:36:a2:cd:15:
                    c0:c3:5b:6f:e2:61:28:f1:8c:d2:67:e8:e5:ca:96:
                    cd:91:e7:1d:4e:5d:66:2e:db:bd:f6:b2:20:3b:00:
                    7e:30:fd:1e:b7:3e:58:dd:3c:8b:7a:a5:dd:10:12:
                    91:4c:d5:0d:3a:49:22:19:49:d7:b3:7a:30:b1:86:
                    e1:04:6c:95:78:44:71:e9:78:0c:6b:6e:73:7e:15:
                    83:10:bc:81:61:7f:b4:21:4b:28:ac:93:45:f2:72:
                    2e:4f:9a:e9:99:04:1c:70:a8:b1:8a:ee:1b:a9:4b:
                    9b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:B2:99:F5:47:12:52:5A:95:B6:1C:C3:78:E1:D5:60:E9:B2:5C:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3b5dea06-2052-30b0-9c33-31fdaef347fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.212.196.0-38.212.211.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:7c:23:d9:4c:fc:16:8a:f7:ff:7f:79:73:90:7b:c8:23:5f:
         42:01:d8:d6:99:40:4c:d7:56:9e:ed:6c:8b:32:5f:a7:41:d6:
         2b:31:87:cc:bf:84:cb:74:e6:3c:bf:c3:05:17:2d:e9:f5:90:
         01:66:8b:3c:01:fe:02:90:8c:23:65:c6:ec:c0:ae:12:6d:a5:
         c7:37:a8:3f:e0:4b:e7:e4:9d:db:34:91:c5:de:a2:52:bd:66:
         20:a4:9a:68:da:19:9e:dd:eb:a0:31:9f:c9:b8:85:8c:8e:c8:
         48:aa:6f:dd:fe:ab:2b:42:d9:fe:9d:45:98:7d:d1:ea:8a:fa:
         2b:80:74:e5:fc:27:70:35:fe:62:63:7a:99:fb:26:ca:96:68:
         12:b0:04:dd:79:22:5a:1b:4a:af:54:99:5e:15:62:fc:bc:7a:
         73:3d:f8:ba:de:73:4d:00:eb:a8:26:7a:b9:00:38:1c:d3:55:
         f2:24:28:5d:9d:4f:9f:09:0e:81:4c:12:8c:0c:22:6f:a6:4d:
         cd:36:14:51:29:40:77:57:b6:cc:d0:68:ba:5d:55:b3:31:de:
         46:7c:11:7b:83:64:48:02:ac:60:24:bf:3c:2b:8c:94:af:0c:
         14:2a:02:35:dd:35:61:8e:b4:e1:0b:54:e3:6a:da:ee:fe:82:
         83:c0:a0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 21:13:25 2026 by rpki-client