Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/811bafcc-165a-3dc1-9bd9-7f2de069c124.roa
File:                     811bafcc-165a-3dc1-9bd9-7f2de069c124.roa (raw, json)
Hash identifier:          pG+Mmw2E4z135gziwQax7WVMZUEFiwy4RPtcVO5Nreg=
Subject key identifier:   74:28:85:82:93:4D:16:4D:08:1E:66:71:82:19:8A:7D:C2:FC:0B:1D
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584EF4589B80DCDD11188B351100
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/811bafcc-165a-3dc1-9bd9-7f2de069c124.roa
Signing time:             Tue 25 Aug 2026 13:24:17 +0000
ROA not before:           Tue 25 Aug 2026 13:24:17 +0000
ROA not after:            Mon 23 Nov 2026 14:24:17 +0000
asID:                     14618
IP address blocks:        38.114.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f4:58:9b:80:dc:dd:11:18:8b:35:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Aug 25 13:24:17 2026 GMT
            Not After : Nov 23 14:24:17 2026 GMT
        Subject: CN=2b1edc6d-cae0-4960-ac32-2c91a814702c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:02:80:cf:c9:25:7f:57:f1:1e:4c:6f:b5:3f:
                    bc:fb:29:06:75:1f:33:7a:f5:2e:23:c4:62:6b:d1:
                    e5:77:1a:ab:76:23:12:d8:a2:eb:2c:a9:8b:af:46:
                    18:ed:58:60:b4:b7:47:1a:2b:74:33:19:79:1f:90:
                    03:46:3f:99:e1:f6:75:23:ac:28:9f:6b:bb:fc:8d:
                    9a:e4:dd:8a:cc:cf:35:cd:0f:50:27:b7:4f:71:69:
                    9e:ef:76:6b:7a:7e:55:c2:30:ab:e8:c0:29:58:d5:
                    e4:98:b8:68:ef:77:49:d2:58:97:6c:52:9c:59:06:
                    65:8e:8f:aa:b5:7e:87:ad:80:25:d5:97:5b:96:1c:
                    96:2d:b5:ef:7a:b9:0f:13:81:ee:33:34:9d:84:93:
                    28:d1:5e:c8:f2:c4:90:7f:36:dd:0e:ea:9f:64:8e:
                    5d:0b:96:70:57:61:bf:db:bb:60:ce:2a:d4:9e:47:
                    b0:84:e8:90:98:ba:46:da:8a:eb:a5:d4:ab:85:42:
                    d4:e3:28:8d:35:0e:48:d5:55:8e:eb:f4:b0:67:58:
                    0c:29:08:17:a7:21:1d:bd:32:51:f0:63:dc:82:a9:
                    ae:6d:0d:8a:a2:16:11:b3:df:9d:42:46:b6:c6:72:
                    85:ab:23:e9:d3:f3:67:82:ab:aa:5c:db:59:f9:8c:
                    65:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:28:85:82:93:4D:16:4D:08:1E:66:71:82:19:8A:7D:C2:FC:0B:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/811bafcc-165a-3dc1-9bd9-7f2de069c124.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.114.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:fa:39:bf:6a:ea:ca:d3:91:35:5e:34:49:96:66:bd:8b:5b:
         2d:75:11:b4:7f:76:26:e9:77:71:f8:49:8a:e5:0b:a4:96:c2:
         84:f3:00:ba:84:b9:7e:3d:bf:33:2a:51:d8:c3:ba:0b:cd:96:
         18:a3:8a:2d:26:b2:fe:df:e5:98:ab:0b:a4:03:32:55:e6:e0:
         50:05:47:98:89:08:49:03:79:7c:9c:74:58:d9:b1:ed:d4:c8:
         92:a4:7d:de:b8:5e:19:89:02:c7:c9:30:d9:87:d9:33:8c:ab:
         83:3f:16:c8:c1:d1:3a:b6:97:b2:c0:5c:f4:17:83:16:d8:77:
         b8:7d:1f:b5:04:dd:40:b5:60:0c:2b:28:29:8a:29:33:3d:ee:
         b1:9f:65:70:07:74:4e:7f:d8:4b:09:3c:27:ef:78:af:97:38:
         3c:c5:75:28:fb:51:da:c9:63:81:a7:1a:9d:7c:63:d9:fb:64:
         c5:ad:0f:36:c6:a2:0d:2e:a9:d9:84:ce:46:eb:11:ae:c3:a7:
         ca:53:b4:2d:23:cc:22:ef:e1:68:4c:47:c2:ee:9e:6b:ba:a4:
         8d:32:59:1e:29:19:ab:e6:47:29:29:63:30:fb:6d:17:dc:86:
         f2:ee:df:3e:62:88:0f:86:4d:d7:7d:f6:ab:80:aa:a4:91:97:
         6d:f9:2e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:46:34 2026 by rpki-client