Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6cb8441a-db40-3ed4-9009-c8cbad427f98.roa
File:                     6cb8441a-db40-3ed4-9009-c8cbad427f98.roa (raw, json)
Hash identifier:          ob+PkQjrrBETHIWS9awTn+uRkHxFx/Fls4pZhL8Qoqo=
Subject key identifier:   53:97:12:BE:8B:B0:A7:BA:01:90:C2:5D:A4:4E:BF:EC:7F:C9:B4:90
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E561A143512F95300A00F8F40
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6cb8441a-db40-3ed4-9009-c8cbad427f98.roa
Signing time:             Mon 29 Jun 2026 21:00:12 +0000
ROA not before:           Mon 29 Jun 2026 21:00:12 +0000
ROA not after:            Sun 27 Sep 2026 21:00:12 +0000
asID:                     55947
IP address blocks:        38.111.134.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:56:1a:14:35:12:f9:53:00:a0:0f:8f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jun 29 21:00:12 2026 GMT
            Not After : Sep 27 21:00:12 2026 GMT
        Subject: CN=b1ffb4b7-3a68-4fd0-85a7-471dffeecb7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:29:ec:15:80:56:e0:d6:23:88:52:96:86:05:
                    2d:28:0b:99:71:28:18:1d:1d:6d:fd:93:7c:24:9b:
                    93:97:78:7c:c7:f9:35:c9:ff:18:63:31:3f:6f:dc:
                    77:30:15:34:8c:a8:98:56:1a:5a:86:06:c2:34:1f:
                    90:89:c7:a4:60:f7:fe:20:9b:f0:bd:4d:9b:9a:74:
                    fa:5c:9a:e1:9b:a0:1e:e4:40:5c:b0:94:00:72:5f:
                    50:b2:ea:37:2d:fb:a4:b0:a5:ff:58:ff:e9:4b:ee:
                    f7:32:c5:8b:32:96:ff:6a:02:d3:db:03:f9:86:cf:
                    e9:1f:ad:83:15:d5:4e:05:9c:bf:1d:7d:5c:09:9a:
                    9d:93:e9:c6:be:c8:87:f3:31:03:0f:79:a8:79:35:
                    fa:b3:3f:28:d1:79:04:f0:4a:97:74:11:13:3e:00:
                    d8:f8:23:92:73:17:1e:96:cf:7e:67:11:72:55:05:
                    e1:06:8a:af:64:37:02:0a:38:97:ee:80:fa:db:0b:
                    7e:ab:da:60:55:3a:2c:42:26:e6:90:7e:78:24:15:
                    a2:7e:92:06:c6:39:c1:e2:81:2a:58:2e:9c:c8:0b:
                    9a:eb:d8:dd:cb:96:c4:d6:f9:eb:19:ca:5a:63:cf:
                    06:73:4f:12:ff:e8:b1:b6:20:f7:f3:a7:fa:32:e0:
                    4c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:97:12:BE:8B:B0:A7:BA:01:90:C2:5D:A4:4E:BF:EC:7F:C9:B4:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6cb8441a-db40-3ed4-9009-c8cbad427f98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.111.134.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:88:ad:53:ec:57:dd:78:02:8a:0c:15:e0:49:b0:82:ee:b2:
         9b:50:4d:d9:b4:dc:3d:12:56:85:54:50:4e:e5:91:f6:c3:b8:
         f2:e0:60:97:87:7b:e9:e4:68:02:a7:2e:28:2f:8b:f0:22:24:
         29:de:7f:62:87:ce:f8:77:7b:be:bf:ec:d8:1f:b4:c5:25:47:
         74:2e:94:20:a6:46:e3:dd:79:d5:3d:97:51:fe:02:c5:eb:7c:
         e0:eb:d4:96:86:86:83:b7:74:84:03:83:b6:d2:1f:e8:f2:29:
         5a:e9:4e:d4:39:f0:9f:56:d0:98:3f:9c:47:e7:7e:14:72:a9:
         74:f1:07:1b:88:d1:e8:24:f2:7e:30:a0:56:4e:d3:63:4b:89:
         ee:ad:8d:b9:65:cf:73:3d:b5:3f:1d:80:25:e7:63:cc:10:bc:
         bf:1d:80:17:28:11:cb:bf:6d:1c:12:58:e9:20:0c:8b:9e:e4:
         d1:84:64:f9:0f:0d:f9:72:dd:1e:f1:b5:5b:e8:9f:bd:e5:e1:
         43:11:5b:bf:1d:f6:37:51:77:3b:73:e9:7f:0e:ab:cc:45:08:
         a1:d4:e0:51:68:2c:b8:11:81:02:8d:49:7c:af:91:b9:b7:f0:
         75:76:2a:14:da:b4:12:17:e2:63:2a:07:60:11:e2:cb:d5:08:
         8c:5b:12:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:11:40 2026 by rpki-client