Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/47629e85-41e3-337a-bec0-5481de164526.roa
File:                     47629e85-41e3-337a-bec0-5481de164526.roa (raw, json)
Hash identifier:          8Tm2EopQaqm3B/zjA1EZNMSRxuWTFe9vNq6geZ/JOyA=
Subject key identifier:   0D:30:F6:3F:A8:AD:F4:BA:A4:58:19:32:FE:23:CA:C7:7A:99:BF:8E
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584FA2332B747E1072420B19FF80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/47629e85-41e3-337a-bec0-5481de164526.roa
Signing time:             Mon 26 Oct 2026 19:59:30 +0000
ROA not before:           Mon 26 Oct 2026 19:59:30 +0000
ROA not after:            Sun 24 Jan 2027 20:59:30 +0000
asID:                     151576
IP address blocks:        38.246.132.0/24 maxlen: 24
                          38.246.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a2:33:2b:74:7e:10:72:42:0b:19:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct 26 19:59:30 2026 GMT
            Not After : Jan 24 20:59:30 2027 GMT
        Subject: CN=7231e20a-271f-4e77-9415-48ee05207a01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a2:60:ad:d1:7a:65:cd:6e:40:d3:10:51:37:
                    0a:45:3b:3e:d9:f2:54:1d:6a:3b:da:d4:c2:9d:86:
                    75:1c:75:e4:43:14:82:73:0d:36:f4:50:f1:6f:89:
                    85:d8:73:0c:4e:5f:05:ff:e0:22:d4:8e:1d:b1:78:
                    e0:e9:cb:61:cb:65:74:26:b9:f0:4f:34:1a:9f:2c:
                    1d:e2:db:28:b6:0a:a8:34:de:00:82:6d:f4:ac:ac:
                    35:63:83:72:5a:92:5b:58:91:79:e0:ec:a9:1d:47:
                    dd:dc:b4:3f:17:3f:da:34:71:19:d6:7b:a1:5b:e3:
                    84:02:46:a9:5a:97:32:0e:5a:01:cc:60:f1:a8:79:
                    7f:86:2f:92:6b:2f:df:c6:bc:d0:b1:26:31:5f:71:
                    0c:17:41:3d:bc:9b:62:39:bf:57:1d:51:7e:9c:ab:
                    c0:d4:e5:04:6a:6c:3f:1d:3d:d4:77:89:56:30:f9:
                    6d:5c:8a:21:b5:ad:77:c8:2f:b1:01:31:c3:72:ff:
                    a4:2a:94:02:a2:dc:04:ec:7c:03:a0:1d:e5:b4:dc:
                    38:84:33:96:48:4a:f6:90:00:29:ea:1d:44:38:80:
                    39:2c:08:ac:84:01:2a:52:fc:a2:25:aa:bf:0c:ca:
                    d2:f4:91:cd:bd:13:07:09:39:f4:19:cd:c7:4e:fb:
                    a4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:30:F6:3F:A8:AD:F4:BA:A4:58:19:32:FE:23:CA:C7:7A:99:BF:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/47629e85-41e3-337a-bec0-5481de164526.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.246.132.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:bc:df:84:e6:10:fa:0b:e6:8f:5d:7f:f3:42:e3:58:9e:e1:
         24:be:30:88:80:c7:33:2d:14:11:5e:76:dd:ff:46:e8:e6:15:
         a4:5b:5f:f2:4c:45:49:cf:a1:db:16:56:cb:e3:88:06:8b:d9:
         c5:c0:40:ed:d5:f8:e5:e3:54:20:6b:8c:e0:45:8c:ff:7a:62:
         24:99:1a:00:44:a9:27:7a:b6:9d:5a:ba:a1:e7:81:8d:83:23:
         31:32:a9:74:b0:be:f4:cb:b8:69:4b:e7:c8:aa:a3:81:d2:2d:
         a7:0f:c5:a5:90:f4:1b:b5:09:9e:d3:0e:66:72:76:bb:13:21:
         7f:2a:6b:6d:65:c9:dc:74:db:20:cd:e7:c2:68:81:8e:1b:b8:
         4c:36:42:a3:05:58:d6:2a:4d:28:44:74:8c:27:a4:7b:81:04:
         5e:c0:2a:d1:dc:42:71:7f:7a:31:da:5e:c8:0f:db:73:25:b1:
         59:a6:08:81:2c:ce:ed:05:68:3b:23:5d:d0:a6:2d:c2:1c:90:
         dd:f4:89:3f:21:52:85:1a:31:79:4b:02:5a:60:c6:4f:b8:15:
         e5:fc:fa:b6:64:27:f8:95:51:f2:5b:05:ec:e0:fe:3e:d8:06:
         29:7b:5f:dc:9d:47:8f:af:39:2b:c9:6e:cf:fc:24:a3:46:69:
         cc:5c:b8:07
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+iMyt0fhByQgsZ/4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MTAyNjE5NTkzMFoXDTI3MDEyNDIwNTkzMFowLzEtMCsGA1UEAxMk
NzIzMWUyMGEtMjcxZi00ZTc3LTk0MTUtNDhlZTA1MjA3YTAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaJgrdF6Zc1uQNMQUTcKRTs+2fJUHWo72tTC
nYZ1HHXkQxSCcw029FDxb4mF2HMMTl8F/+Ai1I4dsXjg6cthy2V0JrnwTzQanywd
4tsotgqoNN4Agm30rKw1Y4NyWpJbWJF54OypHUfd3LQ/Fz/aNHEZ1nuhW+OEAkap
WpcyDloBzGDxqHl/hi+Say/fxrzQsSYxX3EMF0E9vJtiOb9XHVF+nKvA1OUEamw/
HT3Ud4lWMPltXIohta13yC+xATHDcv+kKpQCotwE7HwDoB3ltNw4hDOWSEr2kAAp
6h1EOIA5LAishAEqUvyiJaq/DMrS9JHNvRMHCTn0Gc3HTvukYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA0w9j+orfS6pFgZMv4jysd6mb+OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNDc2MjllODUtNDFlMy0z
MzdhLWJlYzAtNTQ4MWRlMTY0NTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJvaEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHe834TmEPoL5o9df/NC41ie4SS+MIiAxzMtFBFedt3/RujmFaRbX/JM
RUnPodsWVsvjiAaL2cXAQO3V+OXjVCBrjOBFjP96YiSZGgBEqSd6tp1auqHngY2D
IzEyqXSwvvTLuGlL58iqo4HSLacPxaWQ9Bu1CZ7TDmZydrsTIX8qa21lydx02yDN
58JogY4buEw2QqMFWNYqTShEdIwnpHuBBF7AKtHcQnF/ejHaXsgP23MlsVmmCIEs
zu0FaDsjXdCmLcIckN30iT8hUoUaMXlLAlpgxk+4FeX8+rZkJ/iVUfJbBezg/j7Y
Bil7X9ydR4+vOSvJbs/8JKNGacxcuAc=
-----END CERTIFICATE-----
Generated at Tue Oct 27 20:44:16 2026 by rpki-client