Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/50938c4a-f55b-3f63-8e72-e67adb10d892.roa
File:                     50938c4a-f55b-3f63-8e72-e67adb10d892.roa (raw, json)
Hash identifier:          SinOLk3UJlwY7KXA/w36ON5miMkq9OzojF78CdSCQvY=
Subject key identifier:   C4:2D:E6:45:F3:EA:94:0D:85:DC:D1:A4:3E:86:92:07:83:34:3A:F4
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F210F3E5D3F3AFE65B20CE080
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/50938c4a-f55b-3f63-8e72-e67adb10d892.roa
Signing time:             Thu 10 Sep 2026 13:47:50 +0000
ROA not before:           Thu 10 Sep 2026 13:47:50 +0000
ROA not after:            Wed 09 Dec 2026 14:47:50 +0000
asID:                     399337
IP address blocks:        38.207.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:21:0f:3e:5d:3f:3a:fe:65:b2:0c:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep 10 13:47:50 2026 GMT
            Not After : Dec  9 14:47:50 2026 GMT
        Subject: CN=f5a484ce-75e1-437c-8fac-2673e376aad4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e1:60:33:42:c2:a3:04:39:16:44:fd:31:01:
                    3b:e7:1e:bc:a5:08:86:ad:bd:e9:6f:ae:72:7d:48:
                    62:fb:9b:ed:94:f2:db:8c:67:47:86:c3:39:f5:db:
                    fb:9b:04:a4:b6:d0:58:c6:74:6c:c0:dc:05:75:86:
                    e4:78:61:a8:4d:54:ac:2e:ce:fd:1f:e4:2e:fd:ae:
                    a2:61:4a:02:12:1f:bd:fe:f0:75:32:33:4e:50:f8:
                    13:2a:0c:ed:66:bc:9d:71:20:87:94:69:79:b3:9b:
                    b5:00:7a:b3:aa:51:2f:70:85:3a:26:9d:d1:5c:2a:
                    d3:ec:ed:b7:35:8f:dc:ab:e5:3c:af:35:cc:e4:66:
                    57:33:71:91:8e:a9:d0:d4:0f:64:f9:e9:e0:65:bb:
                    29:c6:59:fc:a5:90:1b:34:d9:9c:95:7a:05:e0:36:
                    e6:44:81:9c:45:59:d6:5e:b1:88:b2:3e:00:b2:f5:
                    60:2a:57:f2:9b:f1:74:bf:2b:0e:61:da:ac:c5:07:
                    5b:82:11:7d:86:09:c2:bb:d3:40:9d:55:c1:42:c1:
                    af:2f:9c:12:3c:97:e3:bf:0c:85:88:7b:df:e7:08:
                    ef:85:d6:ec:dc:76:f2:34:a4:2e:2d:2e:03:ee:53:
                    14:4e:97:fe:d2:27:34:ed:8d:b7:30:b0:d6:eb:24:
                    ef:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:2D:E6:45:F3:EA:94:0D:85:DC:D1:A4:3E:86:92:07:83:34:3A:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/50938c4a-f55b-3f63-8e72-e67adb10d892.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.207.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:3e:90:6a:9e:3e:8c:6d:61:1b:25:71:bc:34:b7:13:98:5f:
         51:a8:b4:3f:f0:30:9a:41:ec:71:1c:a7:96:63:5f:5a:e4:89:
         b6:6b:69:78:db:ec:ce:bc:ba:46:57:b3:c3:06:e4:c3:e2:59:
         89:59:d0:24:26:bb:bd:c1:cd:8f:53:3c:b3:71:9d:26:6e:10:
         19:fb:d4:00:b8:5e:bf:0f:9b:23:96:0f:bc:31:8f:16:7e:56:
         99:a8:0e:b5:f2:d4:2d:7d:84:4c:51:56:71:7b:db:ef:04:2e:
         ac:7f:ec:bb:0e:eb:26:8b:fa:fa:22:76:71:ab:09:78:c5:f8:
         20:7a:ba:4b:25:65:05:b6:59:a7:24:7e:6d:0f:e9:49:48:91:
         07:dd:ee:54:43:c3:f9:f8:01:d8:d9:55:3e:d6:70:26:b1:06:
         a3:62:d3:4f:04:77:81:54:1e:5b:5b:85:5a:ff:ff:f5:e8:0c:
         82:99:f7:0b:17:38:75:1e:f4:62:78:9a:8b:d0:d6:05:54:73:
         87:a0:49:13:1d:c5:65:0f:eb:f6:c3:df:4e:a2:ac:7f:fa:fe:
         e8:b9:7d:58:04:05:58:f1:f0:4b:dd:ac:62:26:bd:66:e3:5c:
         5d:4c:f9:2e:c5:9a:6a:10:06:ef:84:5a:e5:9a:fe:b7:99:fd:
         e0:0c:68:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:46:41 2026 by rpki-client