Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/7b3a997c-c32d-32ad-a676-8600e412ba80.roa
File:                     7b3a997c-c32d-32ad-a676-8600e412ba80.roa (raw, json)
Hash identifier:          i7LvZmIJyFLdfqjn1WML+JAKzejhuurfqSLiOl2dWmQ=
Subject key identifier:   AE:28:CB:9A:8B:12:94:58:4B:12:BE:92:38:C5:B0:F6:B9:DE:F8:93
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F3215606428E5C8BCD9B758C0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/7b3a997c-c32d-32ad-a676-8600e412ba80.roa
Signing time:             Wed 16 Sep 2026 16:08:56 +0000
ROA not before:           Wed 16 Sep 2026 16:08:56 +0000
ROA not after:            Tue 15 Dec 2026 17:08:56 +0000
asID:                     7124
IP address blocks:        38.77.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:32:15:60:64:28:e5:c8:bc:d9:b7:58:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep 16 16:08:56 2026 GMT
            Not After : Dec 15 17:08:56 2026 GMT
        Subject: CN=4d192fee-b05d-4005-b65f-810d424da97d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:be:17:b2:27:8f:97:c0:0c:63:d6:49:b9:7a:
                    f9:db:8f:5b:92:41:91:23:02:96:34:c5:19:a5:bd:
                    71:2c:40:ac:79:17:6d:03:54:f5:7f:48:c1:11:a1:
                    f7:d7:70:aa:81:a1:61:ef:a8:fd:b2:cb:c1:6f:51:
                    47:96:da:e7:09:94:0f:ff:e8:12:e5:92:57:4d:11:
                    d3:9e:e3:05:60:ea:0e:84:4d:02:a4:36:70:01:c6:
                    fd:5f:16:41:8a:ed:76:3e:24:fd:9a:8b:36:43:e4:
                    41:d9:01:14:34:02:67:12:ef:57:03:2b:a0:55:32:
                    54:b1:3b:7d:c6:ab:01:45:10:6d:a7:cd:2c:4e:41:
                    7b:c2:09:f2:85:8b:2d:52:47:4a:f0:2a:8a:d0:62:
                    12:7d:cb:3f:7d:78:3c:7f:0b:c9:d0:77:5f:94:1c:
                    9f:8a:0e:f9:3e:4d:98:d9:e1:c2:35:7e:eb:ea:bc:
                    ba:b1:13:03:10:6a:0c:51:5d:16:68:a3:a6:08:50:
                    52:0d:04:c4:4f:dc:e4:e1:14:f8:11:2c:e4:c5:06:
                    3e:56:28:f2:49:c8:3b:96:6e:1f:3f:db:7e:71:bc:
                    e8:50:16:15:f8:ba:e5:7c:f9:a7:eb:f6:04:39:7b:
                    09:ce:b0:d1:dd:ab:e0:c4:f4:df:20:ad:c1:07:aa:
                    a0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:28:CB:9A:8B:12:94:58:4B:12:BE:92:38:C5:B0:F6:B9:DE:F8:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/7b3a997c-c32d-32ad-a676-8600e412ba80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.77.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:2c:22:33:d7:09:be:44:5a:06:a4:e8:4a:3b:36:96:05:8d:
         94:02:25:6e:b0:ed:c4:fd:fd:30:9c:34:2a:1f:85:45:da:15:
         af:e0:75:24:d1:5b:c0:1a:1f:3b:b1:76:f8:f3:98:e9:5b:5e:
         f9:6c:6c:16:35:7e:59:a7:e7:3a:f0:27:0d:6c:4f:d3:cb:c9:
         dd:79:e7:76:a1:00:c0:53:e4:08:9b:41:9d:07:a3:e0:b6:ea:
         2e:c4:2d:cb:e3:fc:c3:04:cb:b4:fb:7b:d1:ae:71:30:5a:0f:
         9e:cd:a1:66:1c:72:95:0b:0c:86:7e:bd:5d:3f:ae:79:0f:32:
         b3:86:ff:c2:18:54:29:56:b7:ca:2c:24:7b:d8:71:08:43:d6:
         9e:1b:dd:20:77:e1:c4:0f:77:38:cf:2c:74:b5:b7:7f:6d:03:
         ad:7d:35:5f:16:2d:d7:8a:a5:00:95:71:01:64:40:dd:fd:e1:
         19:dd:bc:79:db:f8:f2:fd:41:17:df:ea:ef:8b:ea:fc:e5:4c:
         42:52:df:23:34:98:27:e6:03:d0:90:77:88:35:0f:4e:16:8e:
         55:90:b2:ed:fd:34:cd:f0:a3:f3:27:9e:89:39:a4:ea:0b:18:
         c3:25:fd:7c:c0:ca:02:77:6a:0e:15:72:ee:b6:28:cb:98:5b:
         a9:8f:42:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 14:09:55 2026 by rpki-client