Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/41a6c06d-31fc-338a-a700-a53de96667a0.roa
File:                     41a6c06d-31fc-338a-a700-a53de96667a0.roa (raw, json)
Hash identifier:          M3zaxDoBZN8TYwkp/xOMLdSn3tl9b8gDUYYJG1qfGfE=
Subject key identifier:   47:29:FA:0F:23:51:D2:EA:DA:13:1D:8C:32:AB:51:A1:3F:FC:DD:16
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584DFEA074C0D2DE245E1041D700
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/41a6c06d-31fc-338a-a700-a53de96667a0.roa
Signing time:             Fri 29 May 2026 13:00:10 +0000
ROA not before:           Fri 29 May 2026 13:00:10 +0000
ROA not after:            Thu 27 Aug 2026 13:00:10 +0000
asID:                     214337
IP address blocks:        38.99.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fe:a0:74:c0:d2:de:24:5e:10:41:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: May 29 13:00:10 2026 GMT
            Not After : Aug 27 13:00:10 2026 GMT
        Subject: CN=c06e606d-fe3e-4915-9a3b-05e5d61438f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:27:8a:53:1d:a0:1c:7d:86:a0:c5:ea:ca:70:
                    b8:f0:f0:19:ad:22:75:25:2f:b1:85:35:76:93:b7:
                    3b:07:de:c2:dc:19:34:b9:a0:f1:88:0d:6f:7b:18:
                    10:92:77:82:8b:12:8b:12:b7:8d:e0:4f:fc:c7:7a:
                    a4:aa:49:5b:4d:f1:c4:91:f3:94:e5:66:e2:ba:d5:
                    40:a1:2d:5d:3c:f2:01:56:f1:81:f4:61:1e:bd:d6:
                    45:49:cf:3d:8d:ec:e0:53:80:05:5f:89:6d:b9:31:
                    f6:27:73:02:5b:57:6c:72:65:7d:d8:47:d4:b1:f3:
                    ee:3b:ff:6d:50:91:03:71:5f:bc:7a:38:b7:34:84:
                    ac:70:93:8b:38:13:b4:d3:23:16:b7:fc:83:35:f0:
                    b5:68:70:cd:64:fd:bb:f6:f0:1c:05:84:de:1a:b5:
                    53:eb:4f:ce:4e:fc:1d:14:5c:5b:a8:2a:86:74:84:
                    8e:97:a9:96:4f:b7:17:21:52:41:48:ec:68:03:30:
                    f9:16:82:8f:5a:e9:ed:bb:d9:1d:8a:84:ca:73:a5:
                    80:2c:a7:fd:87:62:4e:40:66:37:65:40:f5:8e:be:
                    e5:f6:13:4e:7a:69:ef:36:2b:09:84:5b:63:c9:9a:
                    d0:54:ad:45:ef:21:7a:1f:43:9e:aa:d9:fc:7b:68:
                    42:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:29:FA:0F:23:51:D2:EA:DA:13:1D:8C:32:AB:51:A1:3F:FC:DD:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/41a6c06d-31fc-338a-a700-a53de96667a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.99.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:14:96:52:01:c8:9b:c1:44:d9:7d:dc:bc:a0:c6:2b:f9:2f:
         69:5f:ae:03:04:37:fe:31:d0:1c:fa:30:92:40:37:2b:a3:ca:
         35:5b:22:5a:09:6a:f2:93:5d:5a:87:6e:cb:c9:f5:6f:c4:1f:
         05:34:ae:ef:4c:24:6c:47:e2:ff:ac:3a:02:57:af:70:97:4f:
         b4:28:6f:d9:44:86:42:98:31:3b:c9:f6:2a:c7:ab:c2:0e:6b:
         17:2a:e2:1e:ac:0d:e2:07:7c:a5:02:49:fb:3e:0d:df:07:7d:
         ec:fd:dd:ef:45:fc:ed:41:c2:ba:e1:8d:23:f2:a2:05:e3:46:
         2c:d4:bc:fb:02:8a:c9:3d:af:0d:f1:b8:f0:ed:33:1d:05:62:
         b1:3f:08:29:72:9a:0a:c9:fc:c9:45:f7:10:0c:6e:d3:10:aa:
         e1:d0:37:bf:ba:4d:83:fd:50:42:08:47:0d:8c:ed:04:3f:df:
         0c:52:18:ab:87:a8:8d:fd:e1:a5:dd:53:90:e6:f9:3b:a0:09:
         46:1e:23:a6:02:a3:fc:85:14:94:73:29:c4:80:71:fc:17:ca:
         4f:1a:0f:ef:fa:15:0e:87:c6:19:25:fc:89:ce:ca:a5:88:bb:
         11:ba:55:2c:fd:ef:ee:dd:83:85:e6:10:93:6e:c0:56:21:d5:
         6a:9f:c2:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 22:39:27 2026 by rpki-client