Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5ac7151b-2a52-3b35-97fc-419a1937aded.roa
File:                     5ac7151b-2a52-3b35-97fc-419a1937aded.roa (raw, json)
Hash identifier:          x5a1m3HM9mXsiZmMMKd6g1Vm1zL+2sABeMRn6Dm5DwM=
Subject key identifier:   4C:C6:8C:0A:D9:38:87:48:05:9C:81:EF:64:76:E5:47:A9:DE:01:12
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584EED51FA868772FE1594277F80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5ac7151b-2a52-3b35-97fc-419a1937aded.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     263516
IP address blocks:        38.250.92.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:51:fa:86:87:72:fe:15:94:27:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=60ff287e-fe9f-4fbe-beb0-457d29c3b091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:84:20:7f:15:4f:2e:af:58:ea:67:a0:4d:36:
                    f2:8c:81:b1:d3:37:d6:96:36:79:2f:1e:9b:cc:1d:
                    c1:be:e9:8a:c2:15:b5:92:d2:c5:c8:44:a2:04:5e:
                    1b:e5:f7:4c:5c:24:6e:59:a3:ab:97:f9:09:bc:da:
                    e4:16:3c:d1:23:3f:b9:c1:79:af:04:79:49:9b:f4:
                    53:c4:a8:ad:17:50:ad:90:56:23:95:36:25:cb:d2:
                    c9:7e:05:18:ef:96:95:d5:00:64:06:0e:47:db:37:
                    af:82:ab:b5:3d:dc:5a:11:dd:a2:c2:4b:82:67:73:
                    99:05:a0:f1:a4:df:52:82:67:d3:29:2a:bf:96:65:
                    b1:6d:56:6d:2d:2c:4c:d0:a7:5b:8d:98:8f:07:a2:
                    01:70:31:99:c7:e3:73:10:e1:70:9c:3f:be:14:ec:
                    63:54:c8:70:32:2c:53:b1:eb:8d:15:4b:8b:4a:42:
                    1b:de:0f:01:2d:8d:04:51:8d:3e:56:43:da:33:36:
                    53:98:f8:9a:0c:e6:d6:91:e8:4c:74:44:ea:1a:80:
                    5a:53:8d:ea:0d:81:08:3e:4b:c2:f6:17:55:32:17:
                    67:81:64:bd:6a:67:2d:31:1f:18:43:44:ce:05:c6:
                    8a:83:c2:70:49:2f:36:ac:fa:d7:f5:27:56:71:9b:
                    a8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:C6:8C:0A:D9:38:87:48:05:9C:81:EF:64:76:E5:47:A9:DE:01:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5ac7151b-2a52-3b35-97fc-419a1937aded.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.250.92.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:ad:2c:d2:ef:c9:b2:87:87:58:01:e3:a7:7a:44:bb:70:79:
         4b:33:26:4e:6a:5d:7b:e4:20:9e:da:36:d7:0c:ee:5e:02:f3:
         33:73:9e:11:9c:ba:b7:73:36:00:f2:5d:f1:31:6f:6a:12:0a:
         2c:af:50:4a:6b:c8:04:9a:a1:00:7d:e9:29:9e:c3:80:a3:c9:
         0c:0d:a9:db:e2:e3:ff:fe:9b:f5:8c:a8:9c:32:a6:d9:d3:5d:
         2b:c5:85:a7:3e:72:86:27:ef:23:ec:3a:6b:00:d6:86:ad:d1:
         88:5c:7e:ff:35:84:3f:79:dc:34:55:30:35:05:bb:86:2e:e2:
         e5:01:8c:c2:9f:0c:d0:4a:d7:81:74:fb:7d:93:c2:1d:92:fe:
         92:58:95:0d:95:36:7e:8a:de:d0:75:67:5b:15:4e:db:d4:01:
         48:de:7a:2e:b3:bf:68:f7:73:b6:0b:49:c9:24:3f:f5:8a:57:
         85:01:65:3e:0c:28:85:0d:7b:6b:cd:f8:95:ea:f0:34:11:08:
         6f:c7:d2:46:db:0a:b2:1c:0c:1f:c1:24:5b:0b:97:b1:c3:d5:
         90:71:77:4d:d2:13:f4:e9:7e:7c:15:7b:07:ec:0d:e9:52:84:
         02:ee:ce:b8:ae:4c:0e:37:e4:79:57:c2:98:17:c1:a9:51:41:
         53:90:ae:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 21:00:13 2026 by rpki-client