Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8c8c317f-34e2-3e2b-9b72-69d056d2e620.roa
File:                     8c8c317f-34e2-3e2b-9b72-69d056d2e620.roa (raw, json)
Hash identifier:          1ujyLK28JGb7Q2PRJ9+KK/xYJachwLkfC3aPNNn5dLM=
Subject key identifier:   12:7C:8D:F1:3B:76:D5:BF:C4:32:72:50:4B:60:57:28:57:DC:7C:18
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584EBA2257398B8197A09010DC48
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8c8c317f-34e2-3e2b-9b72-69d056d2e620.roa
Signing time:             Tue 04 Aug 2026 16:58:03 +0000
ROA not before:           Tue 04 Aug 2026 16:58:03 +0000
ROA not after:            Mon 02 Nov 2026 17:58:03 +0000
asID:                     274192
IP address blocks:        38.76.68.0/24 maxlen: 24
                          38.111.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ba:22:57:39:8b:81:97:a0:90:10:dc:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Aug  4 16:58:03 2026 GMT
            Not After : Nov  2 17:58:03 2026 GMT
        Subject: CN=b9c52d3c-d873-408b-a9b7-a983d85d215b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:88:21:06:53:58:0c:28:ce:6a:03:98:77:1b:
                    b3:7f:8e:87:6e:e1:64:40:7b:2a:4f:0a:53:76:fc:
                    52:8e:a0:7c:72:8c:bc:7a:42:70:62:81:12:48:d7:
                    24:6b:b0:4d:4d:62:f4:a0:9f:38:43:a0:9f:62:bb:
                    1f:43:0e:d7:46:79:7d:78:97:3b:19:17:f7:c1:f8:
                    31:41:df:c5:42:0d:9c:76:39:79:e0:99:ec:85:af:
                    18:53:23:d9:1d:55:96:fb:53:4e:05:a8:3e:5b:96:
                    76:93:cc:2f:fc:52:58:67:85:3e:c4:b0:94:38:10:
                    35:ed:fc:c5:90:3a:b9:27:7e:f9:60:b8:c9:1e:1b:
                    ed:5d:9b:4f:4c:de:a4:91:fa:e8:b2:44:fb:38:8b:
                    5a:65:09:13:fb:14:01:50:2b:ff:cc:29:ef:6a:9b:
                    2d:92:f9:35:1f:bd:79:a1:0c:ec:99:fc:95:49:28:
                    ca:a2:59:31:62:fd:40:25:fe:8f:57:10:98:20:3b:
                    e1:78:d2:24:5b:32:00:44:b9:28:05:19:95:ab:bc:
                    d0:9c:fa:fb:0c:ce:62:00:fd:3f:ac:f4:54:05:05:
                    96:f0:b5:27:79:6d:8c:61:4e:41:50:a5:4f:47:c3:
                    9c:75:5f:26:e1:2d:5d:11:31:39:35:c4:ef:00:de:
                    33:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:7C:8D:F1:3B:76:D5:BF:C4:32:72:50:4B:60:57:28:57:DC:7C:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8c8c317f-34e2-3e2b-9b72-69d056d2e620.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.76.68.0/24
                  38.111.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:9a:ee:ab:ab:c1:aa:cb:0c:b8:82:4b:87:8c:4a:d4:69:07:
         f2:cf:1c:0c:46:d8:3c:4b:0b:f5:6f:7b:d5:67:e8:d6:ae:1a:
         4c:18:2d:b5:0f:c5:64:57:fd:ea:b8:86:9f:73:19:2d:f4:e0:
         f0:a7:a2:95:b1:4b:6c:98:50:aa:9b:a6:13:a2:cf:f6:1e:28:
         24:09:cd:29:0d:18:ec:37:20:1d:17:dc:d3:67:3b:6b:f2:d0:
         51:47:b5:08:42:3a:55:15:56:85:d7:88:e9:51:72:3d:da:bf:
         4a:1c:42:e7:58:8f:59:b7:de:c3:fc:36:f6:8e:d4:b7:4e:73:
         7b:fa:6f:5d:51:db:5d:de:02:01:d6:90:da:36:3c:04:42:28:
         f4:6c:29:55:bf:d8:08:88:59:16:f7:b2:52:74:3f:d4:9e:45:
         1e:b0:84:df:dc:67:33:bb:ca:44:60:56:c6:3f:06:c6:35:e3:
         c3:71:f7:9f:13:88:96:63:7a:a9:8e:e0:4c:7a:be:76:61:66:
         e0:54:02:4f:a3:44:34:4b:72:53:4e:67:33:07:f9:bd:f8:04:
         20:f7:28:a8:f2:fe:59:40:b4:0b:91:e7:aa:93:0c:d3:36:46:
         e0:54:a0:b2:0e:f4:2b:4a:08:eb:63:5a:53:4d:de:38:d6:06:
         2d:3b:52:48
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE66Ilc5i4GXoJAQ3EgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDgwNDE2NTgwM1oXDTI2MTEwMjE3NTgwM1owLzEtMCsGA1UEAxMk
YjljNTJkM2MtZDg3My00MDhiLWE5YjctYTk4M2Q4NWQyMTViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IghBlNYDCjOagOYdxuzf46HbuFkQHsqTwpT
dvxSjqB8coy8ekJwYoESSNcka7BNTWL0oJ84Q6CfYrsfQw7XRnl9eJc7GRf3wfgx
Qd/FQg2cdjl54Jnsha8YUyPZHVWW+1NOBag+W5Z2k8wv/FJYZ4U+xLCUOBA17fzF
kDq5J375YLjJHhvtXZtPTN6kkfroskT7OItaZQkT+xQBUCv/zCnvapstkvk1H715
oQzsmfyVSSjKolkxYv1AJf6PVxCYIDvheNIkWzIARLkoBRmVq7zQnPr7DM5iAP0/
rPRUBQWW8LUneW2MYU5BUKVPR8OcdV8m4S1dETE5NcTvAN4zfwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFBJ8jfE7dtW/xDJyUEtgVyhX3HwYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOGM4YzMxN2YtMzRlMi0z
ZTJiLTliNzItNjlkMDU2ZDJlNjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJkxEAwQA
Jm9hMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAEaa7qurwarLDLiCS4eMStRpB/LPHAxG2DxLC/Vve9Vn6Nau
GkwYLbUPxWRX/eq4hp9zGS304PCnopWxS2yYUKqbphOiz/YeKCQJzSkNGOw3IB0X
3NNnO2vy0FFHtQhCOlUVVoXXiOlRcj3av0ocQudYj1m33sP8NvaO1LdOc3v6b11R
213eAgHWkNo2PARCKPRsKVW/2AiIWRb3slJ0P9SeRR6whN/cZzO7ykRgVsY/BsY1
48Nx958TiJZjeqmO4Ex6vnZhZuBUAk+jRDRLclNOZzMH+b34BCD3KKjy/llAtAuR
56qTDNM2RuBUoLIO9CtKCOtjWlNN3jjWBi07Ukg=
-----END CERTIFICATE-----
Generated at Fri Sep 11 13:08:11 2026 by rpki-client