Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/41db4e3d-42e2-3f6f-9ff8-383485fe6815.roa
File:                     41db4e3d-42e2-3f6f-9ff8-383485fe6815.roa (raw, json)
Hash identifier:          uVjVw81Oz58AgY6JxQEzj4Z576Bzkkr84RnWeI78MF8=
Subject key identifier:   7D:0A:CE:BC:84:F2:9E:09:AC:B4:CA:9A:FC:83:8E:46:78:1A:11:54
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584EBDDC64DB87EC078DE0BA3900
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/41db4e3d-42e2-3f6f-9ff8-383485fe6815.roa
Signing time:             Thu 06 Aug 2026 01:00:12 +0000
ROA not before:           Thu 06 Aug 2026 01:00:12 +0000
ROA not after:            Wed 04 Nov 2026 02:00:12 +0000
asID:                     273872
IP address blocks:        38.196.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bd:dc:64:db:87:ec:07:8d:e0:ba:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Aug  6 01:00:12 2026 GMT
            Not After : Nov  4 02:00:12 2026 GMT
        Subject: CN=26e38b06-ddb6-4138-856a-3d5bf7fc289d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6d:e3:e1:41:74:15:20:fd:e6:47:f8:d2:a7:
                    e2:96:54:d4:3a:ce:77:44:66:e5:31:07:41:ef:2f:
                    ad:0e:f2:41:26:b5:bc:73:88:5b:6a:d8:5f:ef:fa:
                    9f:55:4d:e3:6c:2c:d9:35:14:f2:db:38:b5:45:b2:
                    86:82:c0:1f:14:0e:a4:3a:b8:fc:11:4f:f5:3f:a4:
                    8e:db:65:40:c9:6c:0e:2e:9b:21:71:a4:e1:da:dc:
                    08:45:95:07:82:46:d8:27:cf:1d:c1:c1:3f:37:df:
                    97:1e:64:59:28:2e:a1:74:2f:8a:e9:67:5c:81:4c:
                    0b:18:2c:2f:03:c3:30:54:68:89:55:91:2c:67:31:
                    59:bd:b8:9f:81:76:3d:b2:1d:8f:d8:b5:64:2a:9a:
                    70:b5:b2:00:71:8c:d0:72:25:85:f0:52:d3:ec:81:
                    05:45:02:0c:3f:4c:a0:b6:b0:44:b0:19:20:72:36:
                    7c:fa:c5:58:90:cf:a9:54:be:57:1b:27:36:d8:bd:
                    e3:5f:8f:a7:67:ea:33:9a:69:89:e7:2d:e2:a2:dd:
                    c9:dd:70:5e:d6:1e:10:18:9d:36:e3:c5:22:a9:b9:
                    d1:4c:3d:87:a5:77:be:6f:7b:9e:69:a2:7b:6c:24:
                    54:0f:f6:d4:c9:bd:d2:82:53:61:96:2e:fe:59:24:
                    b8:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:0A:CE:BC:84:F2:9E:09:AC:B4:CA:9A:FC:83:8E:46:78:1A:11:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/41db4e3d-42e2-3f6f-9ff8-383485fe6815.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.196.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:4f:ba:f3:43:dc:a2:c4:e3:b1:f1:06:ab:1b:94:e8:52:83:
         f4:eb:e7:5e:cd:19:03:70:ba:ac:15:e2:14:76:19:4e:8d:1a:
         45:6a:a0:fd:33:e5:cc:b1:c9:30:15:90:09:8b:b6:2f:e5:d8:
         3e:f0:17:c5:7c:c9:1c:8c:ba:84:70:61:e1:a8:76:d9:cd:5f:
         81:12:c1:b3:17:44:71:f4:05:89:dd:dc:7e:70:95:09:14:5a:
         07:d8:d6:35:fb:7b:9a:8a:00:60:2c:02:0f:5f:00:59:46:39:
         ae:0b:a1:d2:0e:54:12:cb:c4:1b:56:f8:8d:ef:a6:4e:a5:a7:
         9b:74:71:6c:fd:a5:c7:8d:e8:b5:f9:34:45:26:44:74:fb:b1:
         a2:f7:0f:18:6f:ad:6e:6f:bf:9d:67:ca:cc:02:f0:89:4e:a6:
         ff:8c:a3:61:42:2a:22:c2:ac:30:1f:2d:66:07:a3:2c:84:3d:
         9c:72:57:91:a2:86:df:52:a7:59:f1:18:86:87:ce:64:9b:e4:
         6e:3c:63:c6:ae:08:f8:69:a8:c7:b9:dc:af:0c:57:ae:96:30:
         63:82:af:37:ac:0e:f6:45:c5:97:0b:40:0c:18:03:24:8e:cf:
         50:e0:21:4f:8b:40:df:e5:8f:21:e1:7b:26:95:3d:20:a0:29:
         b8:4e:fd:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 12:37:28 2026 by rpki-client