Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/737eaf83-2cd7-347e-8e59-259d5ad9bb1b.roa
File:                     737eaf83-2cd7-347e-8e59-259d5ad9bb1b.roa (raw, json)
Hash identifier:          Z6hF9AsWzQGQ0JZoMYR+Dqk5nUHAPgXWIJ/OO4iKaNc=
Subject key identifier:   B0:C8:ED:EC:4C:30:35:B1:27:48:65:A0:86:1C:F5:87:57:26:8A:B0
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D25C783DF154BB4C52430AE00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/737eaf83-2cd7-347e-8e59-259d5ad9bb1b.roa
Signing time:             Thu 12 Mar 2026 20:48:29 +0000
ROA not before:           Thu 12 Mar 2026 20:48:29 +0000
ROA not after:            Wed 10 Jun 2026 20:48:29 +0000
asID:                     272865
IP address blocks:        38.188.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:25:c7:83:df:15:4b:b4:c5:24:30:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Mar 12 20:48:29 2026 GMT
            Not After : Jun 10 20:48:29 2026 GMT
        Subject: CN=09ae4f2b-49c7-4afd-badc-2ed33529f583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:23:54:4f:60:39:9f:79:44:ae:0c:74:e4:e6:
                    0a:f6:9a:57:e6:70:fe:18:45:d3:12:ec:5f:ea:5e:
                    0c:ed:f5:91:18:2a:07:ee:4b:26:34:39:6d:ee:44:
                    8c:06:a0:6c:7c:6a:35:6a:46:d8:53:a6:e4:08:8a:
                    47:b5:ba:b6:17:a1:8d:29:c6:2d:a6:38:47:52:93:
                    fe:e8:64:f8:0d:d0:98:b5:28:02:e5:ec:d9:db:08:
                    7d:2d:25:5a:65:42:8f:85:36:02:f7:2a:9f:75:6e:
                    95:37:e5:3e:dd:4c:85:8d:35:1c:51:67:cc:4b:94:
                    b2:cb:d0:32:c9:75:17:68:36:1b:7b:b2:e0:bd:25:
                    4f:cd:6f:c1:df:77:ee:fa:0a:7e:7b:e8:f1:8d:16:
                    59:e2:c0:3d:a3:75:a4:d2:c8:a0:47:d0:0c:90:7c:
                    23:03:5b:02:40:0a:03:c4:b6:68:05:e4:3c:2b:de:
                    2d:6e:61:a0:15:6e:6f:3c:4a:80:31:eb:aa:e7:da:
                    1a:db:e9:3f:a8:38:6b:d4:83:05:3c:b9:fb:05:db:
                    9d:75:b5:c6:9a:e8:ca:e1:26:61:22:3f:2e:bb:68:
                    8f:a5:d7:ce:c9:64:6d:61:38:55:ff:7f:3f:a8:cd:
                    5b:d6:67:36:38:53:1c:73:ed:b3:18:37:5b:5b:08:
                    0f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:C8:ED:EC:4C:30:35:B1:27:48:65:A0:86:1C:F5:87:57:26:8A:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/737eaf83-2cd7-347e-8e59-259d5ad9bb1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.188.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:ad:69:c7:3a:52:e4:88:42:29:5b:ca:74:8b:05:d9:32:a3:
         50:ae:dc:29:bc:24:48:3c:a7:c2:a7:44:b3:42:68:d2:fe:f1:
         4f:8c:3e:fa:ba:eb:70:c7:7b:5d:5b:67:a8:8d:e3:c4:32:b8:
         06:07:bb:5a:e7:6f:f1:da:8e:1c:06:b0:fd:56:8e:e5:cf:9b:
         73:fa:b8:26:b1:6e:a1:09:6c:f9:21:ca:79:9c:a0:91:7b:3d:
         e9:30:20:7e:cd:f5:da:20:2c:25:18:22:82:45:de:4f:15:86:
         f8:da:cd:f2:51:2b:8b:04:30:44:60:c7:0b:fd:c1:70:ad:84:
         a4:2b:14:ff:85:80:99:21:a3:cc:b8:c9:8a:16:5a:c1:af:a1:
         59:d4:e1:85:4b:89:de:4f:12:8f:a5:08:b5:fb:b4:36:e6:b2:
         4e:6c:5a:36:80:15:9a:27:69:80:6d:bc:29:99:9e:b2:79:93:
         47:1e:fb:cb:ac:67:11:ea:41:2c:66:c7:45:13:c6:0e:0e:bd:
         38:f9:ee:bc:d0:9f:93:f2:35:54:fa:df:06:6a:dc:8b:f3:b9:
         f3:f2:85:31:bb:9f:5b:c5:da:15:b3:3d:d1:dd:6c:c0:9f:71:
         40:52:3e:02:4b:e6:7b:2f:e5:d0:f9:c6:64:00:fe:39:ad:bb:
         99:de:b7:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 18:25:28 2026 by rpki-client