Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6e8e82b9-57f6-37da-a4e4-765cce0df783.roa
File:                     6e8e82b9-57f6-37da-a4e4-765cce0df783.roa (raw, json)
Hash identifier:          RA66CiPOa8V82tq3kmHXArD367a5xESF3NRfvTBZKJA=
Subject key identifier:   BF:3C:01:E5:76:34:AA:14:8B:FE:17:BA:5A:3C:F4:3C:0F:E7:92:16
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D27CD99BF4EAE0C7F7E399C00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6e8e82b9-57f6-37da-a4e4-765cce0df783.roa
Signing time:             Fri 13 Mar 2026 14:12:22 +0000
ROA not before:           Fri 13 Mar 2026 14:12:22 +0000
ROA not after:            Thu 11 Jun 2026 14:12:22 +0000
asID:                     150044
IP address blocks:        38.159.122.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:cd:99:bf:4e:ae:0c:7f:7e:39:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Mar 13 14:12:22 2026 GMT
            Not After : Jun 11 14:12:22 2026 GMT
        Subject: CN=2d4f14d2-cbb0-4c3b-a668-e7de5a1f5f80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e5:00:12:fe:f6:5d:0d:b2:ad:09:8e:93:49:
                    5a:c0:e6:e8:66:f0:23:00:6b:23:11:06:3d:9a:54:
                    1f:a6:6f:c3:3c:fe:b0:50:0a:3e:40:8f:13:3b:7d:
                    85:9c:17:96:b2:db:38:48:10:5e:92:77:52:b5:36:
                    cb:0a:33:d0:ae:c7:f4:dc:70:f6:20:be:c2:9e:38:
                    fb:bb:14:5c:67:35:d4:d5:90:39:e3:d6:67:79:b4:
                    19:f7:b7:b6:1d:b0:cd:bf:c2:50:88:69:3e:f0:61:
                    3d:43:45:09:ec:03:54:cc:70:33:4e:73:45:57:40:
                    6f:45:f8:3c:b9:7e:38:01:cd:32:33:37:6a:95:ab:
                    4e:eb:a2:0a:11:29:65:6d:b5:0d:e3:cb:5e:19:0a:
                    8b:2c:0e:4c:9b:d0:2f:ea:59:3d:1f:b2:40:20:de:
                    d7:16:c2:82:bb:7e:ec:59:5d:8e:43:ba:d8:bc:e2:
                    c4:7a:78:5b:35:fb:84:40:32:26:47:7f:1f:f0:1e:
                    40:ea:f2:ee:2f:72:2d:05:88:84:ed:5d:03:f8:cc:
                    95:d3:d7:f5:37:3e:b5:b9:55:0b:27:55:35:ba:0a:
                    8b:bc:cf:98:9d:75:b6:ca:25:d9:04:64:7f:3e:ec:
                    9e:9e:da:d2:1c:6e:85:a7:57:89:af:f2:7d:bd:7c:
                    4f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:3C:01:E5:76:34:AA:14:8B:FE:17:BA:5A:3C:F4:3C:0F:E7:92:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6e8e82b9-57f6-37da-a4e4-765cce0df783.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.159.122.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:4e:16:22:84:21:e3:54:c1:1b:92:f1:73:40:d6:45:58:aa:
         06:a5:e5:fa:e3:fd:9c:67:2b:aa:97:1e:33:d9:a5:75:77:39:
         e4:ee:ba:b3:d8:59:a4:7d:69:b7:02:71:ab:0d:c5:48:b6:95:
         5b:77:51:6d:e3:fb:29:ba:e8:90:12:ea:dd:0a:9c:7b:dd:80:
         08:a3:b6:1f:c8:64:e4:d2:2f:34:9d:69:72:b8:6d:f0:af:78:
         64:77:7a:b7:6e:62:6c:85:f4:ea:85:80:1c:44:e3:fd:e4:21:
         e9:54:bf:38:49:f0:47:d0:74:3a:37:04:f0:2b:a0:7a:db:b2:
         3d:b7:4f:50:c9:eb:6e:89:ea:54:b9:fd:9b:6f:a8:fd:c8:26:
         7c:b9:63:de:19:6e:98:d1:c6:96:38:cf:eb:e6:8a:35:3e:f4:
         9e:e5:4b:db:e1:03:c6:5a:68:80:81:0c:7c:eb:5e:0d:b7:79:
         bc:4c:a9:d6:bd:9c:d0:d6:31:ee:18:a6:04:c1:6a:c2:ca:74:
         a3:5c:8e:5e:9e:d0:b5:ae:2b:40:ad:f7:0f:b0:78:87:ce:38:
         18:07:48:f2:8e:9e:3b:d0:fe:38:43:da:b7:f1:a8:52:c2:8e:
         e7:1a:28:2d:88:47:29:7f:ba:68:34:f5:f2:53:4c:54:61:57:
         26:d6:75:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 18:25:29 2026 by rpki-client