Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/917ffcba-9c63-38db-8d3c-ea07789e23c2.roa
File:                     917ffcba-9c63-38db-8d3c-ea07789e23c2.roa (raw, json)
Hash identifier:          CnI4TVFuaQxQgomGNy7VqUZJUIAtIe4I4j9PcdtflMc=
Subject key identifier:   FE:30:E0:B0:93:1C:B2:B3:8D:0B:EC:4B:81:ED:5C:A3:5C:C6:C2:25
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F69991D4661CD72212E95CB80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/917ffcba-9c63-38db-8d3c-ea07789e23c2.roa
Signing time:             Tue 06 Oct 2026 13:23:50 +0000
ROA not before:           Tue 06 Oct 2026 13:23:50 +0000
ROA not after:            Tue 29 Dec 2026 17:21:57 +0000
asID:                     60
IP address blocks:        38.41.112.0/22 maxlen: 23
                          38.100.44.0/22 maxlen: 23
                          38.100.56.0/22 maxlen: 23
                          154.54.100.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:69:99:1d:46:61:cd:72:21:2e:95:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct  6 13:23:50 2026 GMT
            Not After : Dec 29 17:21:57 2026 GMT
        Subject: CN=81cd5da1-eebe-4c9c-9802-22e67cef591b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:51:e7:5f:1a:5b:23:f4:31:f8:7b:63:35:fc:
                    7f:7e:50:e4:e6:1c:aa:c9:6c:a0:4e:29:ac:6f:46:
                    6a:5a:34:3d:5b:12:d3:48:ed:a1:bf:c6:c9:79:55:
                    6d:e9:44:95:a9:f4:05:ef:bf:b3:30:cf:94:ab:4a:
                    a1:54:65:46:4b:b6:e5:87:89:02:a2:bb:9d:43:07:
                    b6:34:eb:b8:79:84:3c:12:b2:b9:5b:d5:b4:9c:77:
                    ae:1c:22:c1:e0:93:14:40:6a:24:20:b8:6b:a9:0a:
                    cc:c7:f3:ec:9a:ae:b5:bc:6d:39:3f:26:21:aa:e9:
                    80:73:f9:a2:a8:b2:74:4a:5a:b3:53:ad:3a:8f:25:
                    3f:a8:3a:ae:c5:62:f7:5a:31:25:33:32:d4:02:9c:
                    3c:98:03:a2:78:e8:bc:b7:cf:af:b0:19:3d:a6:f8:
                    ca:bd:32:69:48:c9:74:01:ed:8d:a8:8a:e1:9d:76:
                    80:5a:51:fe:c8:9f:90:73:ab:1d:9e:47:14:5f:1d:
                    54:b2:4d:55:ab:d6:78:2f:a9:6f:c1:d6:77:17:a5:
                    63:46:41:05:9e:89:6e:d9:ea:da:f7:a9:45:dc:b5:
                    6f:52:72:fb:d2:26:cf:93:a5:67:43:47:22:eb:d1:
                    e6:20:5d:8a:c2:17:86:1d:38:d6:e2:e0:fe:ae:42:
                    f1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:30:E0:B0:93:1C:B2:B3:8D:0B:EC:4B:81:ED:5C:A3:5C:C6:C2:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/917ffcba-9c63-38db-8d3c-ea07789e23c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.41.112.0/22
                  38.100.44.0/22
                  38.100.56.0/22
                  154.54.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:39:f9:2f:cd:01:2d:11:2f:24:64:57:75:89:d4:0f:12:47:
         11:5c:7b:5a:89:ce:70:31:c0:eb:a4:dc:a7:69:83:75:2c:f6:
         7f:9b:6d:1d:fa:82:ae:70:57:36:d3:b8:69:01:db:f7:d1:64:
         08:98:02:69:b5:ad:38:43:c3:9a:89:b9:40:b9:6a:d8:93:38:
         08:6b:9e:88:6e:1c:9f:c9:91:5e:d7:72:9c:68:bf:22:0b:d4:
         7a:0d:5d:f2:db:6f:8b:50:ce:87:cd:4b:51:a5:58:95:4f:a8:
         9b:c5:71:b3:a0:39:18:0a:2e:3c:76:a3:4f:f3:71:23:ae:71:
         80:a4:79:81:31:31:96:21:76:fa:7c:c4:4e:75:c2:09:d4:27:
         cf:f8:9b:7a:49:c3:f4:62:7a:31:d5:cb:cf:74:bb:d9:eb:71:
         e0:4b:57:dd:ad:99:a6:b4:ed:d5:33:99:5f:32:bb:63:96:e4:
         67:c2:f4:eb:d8:30:20:42:de:01:42:4c:8a:da:27:26:cf:15:
         c7:02:cf:30:80:7f:ce:59:40:71:55:d6:c1:69:06:ab:e3:f3:
         6f:3a:18:8c:c1:97:ec:f9:c8:8d:14:70:f5:d7:4e:e2:96:a2:
         79:2e:48:47:50:86:a2:99:25:3d:53:d3:eb:f6:dc:7e:30:6e:
         fe:a6:74:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 06:16:07 2026 by rpki-client