Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/77cd9ea0-e02e-309f-ba3b-6a5bad69232b.roa
File:                     77cd9ea0-e02e-309f-ba3b-6a5bad69232b.roa (raw, json)
Hash identifier:          Ov9Kg+ia+lFyFQhD39fJg3J2J56apVjOGwaGhdH0/WU=
Subject key identifier:   56:2B:FA:BB:E6:74:9C:C8:C9:12:D1:F1:FD:C3:6D:9F:5F:D8:71:0A
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F6292B7BA1EEA87720D3E8980
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/77cd9ea0-e02e-309f-ba3b-6a5bad69232b.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     273009
IP address blocks:        38.50.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:b7:ba:1e:ea:87:72:0d:3e:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=ccd6e6e6-1e3f-40b6-a423-7605cdbf79bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:20:80:e5:4c:fc:0e:46:da:4c:06:98:5c:e1:
                    87:45:f8:41:5c:73:eb:7f:c3:db:55:a9:dc:ac:e2:
                    94:bd:77:14:fb:a3:8a:90:7a:11:e9:b4:4f:64:a3:
                    9b:4f:62:32:e7:4c:63:2f:61:e0:4b:64:5b:87:bc:
                    46:44:b4:50:d1:08:04:9c:29:62:25:dd:80:53:f7:
                    6d:37:10:5a:b9:bb:1c:43:05:76:7d:3d:e8:44:5a:
                    54:62:fd:49:b7:60:41:71:0d:74:b9:ae:7e:d7:ae:
                    38:b0:cb:09:1d:c0:bf:ee:c5:71:1b:5f:10:eb:63:
                    8d:14:62:da:22:54:93:78:6e:41:ab:b5:54:63:2a:
                    ca:c4:f2:65:6b:1b:4b:8d:cd:0b:e6:43:6e:d5:0a:
                    11:58:d7:2f:eb:66:38:bd:93:1c:5b:36:12:0b:d8:
                    0a:76:d5:66:52:21:7a:56:78:7f:82:f8:16:2c:3a:
                    d0:c4:8d:08:df:da:ca:95:6e:a7:8f:16:ba:30:50:
                    63:9b:48:d6:ab:89:8c:58:77:15:49:30:7f:4c:e1:
                    53:89:14:3d:bf:86:43:68:cd:59:09:11:fb:bc:f7:
                    9b:e9:14:68:c3:ee:4e:fa:de:80:a1:0b:18:67:44:
                    9b:64:f3:f2:16:90:3b:51:8d:66:14:db:3e:6e:01:
                    59:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:2B:FA:BB:E6:74:9C:C8:C9:12:D1:F1:FD:C3:6D:9F:5F:D8:71:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/77cd9ea0-e02e-309f-ba3b-6a5bad69232b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.50.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:06:1c:19:7d:4e:f0:a5:4e:7e:80:f7:c9:de:ad:52:2e:38:
         98:f4:2b:a7:b8:93:0d:65:e7:66:19:d9:fb:9d:d2:bf:6d:c7:
         76:df:04:da:08:c3:5d:58:b3:f1:8b:4d:fc:fa:67:53:bd:f3:
         5e:09:9e:a9:01:e0:1e:b9:9e:32:a9:03:47:02:a9:00:1c:5c:
         52:21:57:ae:3c:48:bb:d7:3e:32:8b:5c:bc:93:05:89:b8:cd:
         0c:89:a9:be:16:02:95:4d:50:10:a6:96:d6:a7:6f:0a:28:b4:
         90:25:cc:7d:3f:5a:eb:32:7b:f7:f5:ca:f3:6c:e0:40:14:2f:
         07:d3:76:a9:be:9e:a5:46:76:be:f9:4a:ed:7d:1e:ac:04:61:
         20:e5:22:e8:ee:f6:a4:cf:5f:97:b3:d8:cd:78:77:15:e2:da:
         b0:9b:a8:bb:5c:c0:a9:94:b6:47:b1:ad:96:77:f2:a0:46:08:
         65:23:c1:7e:94:da:42:8e:a4:0c:9d:fc:0a:26:a2:f3:77:fd:
         97:2a:4c:ff:f5:9b:18:34:f7:56:08:85:a0:8e:13:7d:bf:9e:
         3c:0f:41:00:08:53:a1:45:8b:c8:bf:cf:5c:36:aa:9b:0c:10:
         9e:09:af:de:81:21:da:c7:21:a7:17:47:bd:05:28:f5:50:0f:
         9f:64:25:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 07:23:21 2026 by rpki-client