Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3bbcbae8-30d2-35aa-8071-973a41ab78ae.roa
File:                     3bbcbae8-30d2-35aa-8071-973a41ab78ae.roa (raw, json)
Hash identifier:          K9Muz3rk88TlakunDjhL2D2yBWGX/CrKIydUNw9Cpj4=
Subject key identifier:   E0:A7:C0:55:5C:AF:9C:34:13:66:CD:47:6D:9C:AC:3B:10:1C:48:0C
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D94A7C3D02388DB289A19C060
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3bbcbae8-30d2-35aa-8071-973a41ab78ae.roa
Signing time:             Tue 21 Apr 2026 13:59:14 +0000
ROA not before:           Tue 21 Apr 2026 13:59:14 +0000
ROA not after:            Mon 20 Jul 2026 13:59:14 +0000
asID:                     267205
IP address blocks:        38.199.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:94:a7:c3:d0:23:88:db:28:9a:19:c0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Apr 21 13:59:14 2026 GMT
            Not After : Jul 20 13:59:14 2026 GMT
        Subject: CN=34bf6cc8-e536-46bb-a7c4-787a85a079ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:1e:0c:33:32:97:66:cd:5d:a0:6c:94:31:2f:
                    48:69:22:74:a4:ff:06:27:4b:17:cf:7c:11:e4:d8:
                    25:f8:f5:44:02:a6:41:95:b6:db:17:a3:8c:7e:1b:
                    30:98:8a:39:a5:19:96:5b:db:f9:3c:73:e7:eb:34:
                    2f:30:09:9d:02:4f:68:e6:1e:20:5a:94:96:b1:02:
                    52:c0:e2:25:f3:9b:74:fd:1c:b9:9a:95:f7:1e:58:
                    2e:b6:23:a1:a5:20:d5:8c:d7:4b:cd:d9:52:19:0a:
                    e0:20:db:02:2e:52:a1:83:45:44:b0:14:73:3e:db:
                    08:4f:ac:28:1e:25:73:07:23:35:b8:d9:92:9c:c6:
                    3b:57:c7:d8:54:76:ac:07:c1:8f:25:1c:9d:27:77:
                    c4:4f:f5:cf:a7:2c:1a:0f:74:00:81:d4:43:8b:4c:
                    b7:58:1f:be:de:fb:c2:46:60:78:44:5e:2b:72:65:
                    de:4a:a1:5a:37:6a:f9:7f:f1:77:13:79:ed:b1:86:
                    ab:ad:d2:4e:9f:84:cc:8d:16:4b:b3:0f:19:73:9f:
                    bb:4e:18:25:ab:7c:bc:0d:2a:e1:df:72:71:2b:16:
                    f7:7d:cc:22:fb:11:94:74:bc:3e:ac:78:f3:27:c1:
                    25:de:6e:a4:37:33:34:42:85:ad:b7:9a:f1:d8:4f:
                    7f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:A7:C0:55:5C:AF:9C:34:13:66:CD:47:6D:9C:AC:3B:10:1C:48:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3bbcbae8-30d2-35aa-8071-973a41ab78ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.199.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:fa:a3:44:c4:14:34:68:ad:f1:73:5b:02:f0:6a:51:f1:9c:
         cc:f0:bc:34:73:cf:26:95:bd:f2:84:3c:df:8e:37:8b:ee:e9:
         f8:34:12:ea:aa:aa:8d:71:bf:91:72:f6:c3:16:0d:a8:0b:a2:
         e9:5d:cd:a4:3e:54:5f:60:62:af:c8:88:ac:dc:aa:a2:ed:78:
         66:5f:e6:fe:8f:eb:2c:a1:5d:7a:0c:47:92:26:c9:ad:d7:1c:
         b0:09:09:61:fb:06:c8:b3:86:86:e7:0d:4f:c0:bf:5e:8f:e5:
         0e:9e:24:eb:7d:7a:0f:9f:0b:b6:a4:23:e0:17:05:3c:b0:a6:
         9b:d4:12:19:e4:bb:85:8c:a7:8a:ba:6e:b9:ab:4f:6a:2e:7e:
         af:fa:eb:38:3a:d5:ca:66:8d:26:5d:fc:96:8a:bd:9f:ec:4b:
         fd:b8:bf:bd:ec:40:f8:4f:dc:61:d6:de:bc:6c:ea:5b:0f:0b:
         f4:0c:c2:6a:25:63:bf:01:5d:be:3b:28:31:20:6d:04:54:4e:
         7c:8f:73:ff:e0:01:e1:27:10:c3:6c:d2:4e:1f:a7:9c:66:ff:
         91:e7:6e:af:54:44:83:a1:9d:d7:17:f3:a9:0b:f9:df:68:15:
         b4:b3:4e:55:6c:f7:3c:d2:f1:ef:f0:37:00:b7:c1:d0:5c:72:
         70:92:80:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 21:11:45 2026 by rpki-client