Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/56426d99-ca86-333a-bb8c-b3e52c87ace9.roa
File:                     56426d99-ca86-333a-bb8c-b3e52c87ace9.roa (raw, json)
Hash identifier:          H5PLpnQjrV2SJNVwx3EhAi3LoCWWk6PsA0G8m0fmxog=
Subject key identifier:   F9:59:A8:5C:A2:A4:B2:0E:18:4E:F1:AE:1A:A2:54:CF:40:E9:5C:44
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E1010EA8AB429C47C69A97380
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/56426d99-ca86-333a-bb8c-b3e52c87ace9.roa
Signing time:             Thu 04 Jun 2026 18:55:32 +0000
ROA not before:           Thu 04 Jun 2026 18:55:32 +0000
ROA not after:            Wed 02 Sep 2026 18:55:32 +0000
asID:                     400337
IP address blocks:        38.110.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:10:ea:8a:b4:29:c4:7c:69:a9:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jun  4 18:55:32 2026 GMT
            Not After : Sep  2 18:55:32 2026 GMT
        Subject: CN=89e1a6e8-dd0e-4799-bf86-64e723daa950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6a:1c:e5:1d:dd:ab:44:10:2f:bb:1c:44:c9:
                    04:3e:9a:a5:3e:e9:a1:5f:56:3f:ea:fc:32:f4:2f:
                    83:c9:00:aa:ac:90:ce:fe:bf:48:dc:e0:1e:ac:2e:
                    c7:ef:6c:4f:40:1f:d8:1f:fa:f6:38:39:19:a5:5c:
                    09:23:4e:18:fc:30:9c:60:ad:f7:11:82:08:97:95:
                    3a:50:2b:51:d6:9b:50:ab:4e:47:93:16:b5:40:91:
                    40:94:38:c0:41:10:ee:6d:8f:73:1e:dd:74:8a:54:
                    a4:23:4f:ff:3b:e6:f3:58:93:20:82:c5:c8:c8:4e:
                    4b:f4:75:e2:b7:8e:27:06:7b:9d:3f:46:e3:6c:08:
                    80:42:8e:48:c0:fa:05:aa:87:6e:52:5f:ea:24:ee:
                    5f:65:c1:a8:88:85:f9:61:7f:b2:1a:5f:6c:72:53:
                    3e:bd:84:f2:1a:1e:a2:8c:80:c9:c5:d2:6f:8b:c8:
                    fd:99:48:b9:2d:26:ba:97:24:5f:88:bc:70:50:25:
                    72:de:21:b9:68:c9:48:59:5f:70:24:bb:c7:1c:2b:
                    95:ce:b1:38:b8:5f:af:d1:a3:99:00:b6:42:73:09:
                    6a:e4:a8:c7:98:9e:34:07:27:7b:b2:0a:7a:5a:aa:
                    d0:3e:75:77:24:de:06:ed:ab:06:40:ca:15:d1:cd:
                    2f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:59:A8:5C:A2:A4:B2:0E:18:4E:F1:AE:1A:A2:54:CF:40:E9:5C:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/56426d99-ca86-333a-bb8c-b3e52c87ace9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.110.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:6f:e8:5f:67:d8:ac:33:6a:6d:f4:36:da:46:93:7c:de:f0:
         55:17:e3:72:66:84:94:c0:f2:b2:3c:0b:f3:f4:e8:a7:71:6a:
         46:79:62:c3:46:6c:24:2b:4f:bb:55:99:f1:9b:d3:bd:f5:36:
         17:1c:0e:88:c9:d5:ff:eb:ff:0c:0c:88:96:55:3f:9d:fe:cf:
         db:4e:6c:50:8d:6b:4c:75:6e:47:4d:92:e0:75:7c:70:b1:25:
         49:7e:9a:25:02:5d:c3:0f:fa:69:c6:f9:b5:d9:d0:80:6f:ec:
         55:cb:e2:cf:c5:75:39:65:e5:0a:cc:d2:dd:0d:20:0c:e7:8f:
         01:5c:e6:b8:ba:db:77:34:49:00:7d:74:bd:35:91:5a:14:cb:
         a6:b9:52:13:87:dd:7f:53:b4:3e:ba:41:88:93:a0:41:91:f1:
         cf:58:dd:59:10:3b:54:8b:0e:00:ad:ce:e4:f9:43:0e:70:13:
         b9:c4:68:ef:32:82:88:67:b1:98:ec:79:db:ba:ab:97:18:47:
         cf:71:26:cf:d3:7d:fa:aa:22:3d:05:73:da:4f:aa:69:1e:dd:
         1a:43:9f:21:d8:d7:6a:af:86:17:f1:54:24:b0:22:f7:b2:e3:
         8d:7e:23:c7:b9:60:96:df:2c:8f:04:c3:38:4f:ac:c0:f9:10:
         15:b8:a3:62
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QEOqKtCnEfGmpc4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDYwNDE4NTUzMloXDTI2MDkwMjE4NTUzMlowLzEtMCsGA1UEAxMk
ODllMWE2ZTgtZGQwZS00Nzk5LWJmODYtNjRlNzIzZGFhOTUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmoc5R3dq0QQL7scRMkEPpqlPumhX1Y/6vwy
9C+DyQCqrJDO/r9I3OAerC7H72xPQB/YH/r2ODkZpVwJI04Y/DCcYK33EYIIl5U6
UCtR1ptQq05Hkxa1QJFAlDjAQRDubY9zHt10ilSkI0//O+bzWJMggsXIyE5L9HXi
t44nBnudP0bjbAiAQo5IwPoFqoduUl/qJO5fZcGoiIX5YX+yGl9sclM+vYTyGh6i
jIDJxdJvi8j9mUi5LSa6lyRfiLxwUCVy3iG5aMlIWV9wJLvHHCuVzrE4uF+v0aOZ
ALZCcwlq5KjHmJ40Byd7sgp6WqrQPnV3JN4G7asGQMoV0c0vSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPlZqFyipLIOGE7xrhqiVM9A6VxEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNTY0MjZkOTktY2E4Ni0z
MzNhLWJiOGMtYjNlNTJjODdhY2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEJm7wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHFv6F9n2Kwzam30NtpGk3ze8FUX43JmhJTA8rI8C/P06KdxakZ5YsNG
bCQrT7tVmfGb0731NhccDojJ1f/r/wwMiJZVP53+z9tObFCNa0x1bkdNkuB1fHCx
JUl+miUCXcMP+mnG+bXZ0IBv7FXL4s/FdTll5QrM0t0NIAznjwFc5ri623c0SQB9
dL01kVoUy6a5UhOH3X9TtD66QYiToEGR8c9Y3VkQO1SLDgCtzuT5Qw5wE7nEaO8y
gohnsZjsedu6q5cYR89xJs/TffqqIj0Fc9pPqmke3RpDnyHY12qvhhfxVCSwIvey
441+I8e5YJbfLI8EwzhPrMD5EBW4o2I=
-----END CERTIFICATE-----
Generated at Fri Jun 12 22:33:43 2026 by rpki-client