Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a503de49-1947-3515-95f2-a4537fa97a5b.roa
File:                     a503de49-1947-3515-95f2-a4537fa97a5b.roa (raw, json)
Hash identifier:          dNhn4b9vKIuXcXzvi1tiUAptB/VRuR0ubM6op1+yUuA=
Subject key identifier:   6B:3D:D4:81:3B:6B:06:29:F6:B6:92:C7:43:AC:6D:98:A4:53:AF:B8
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F936E6AB39CB3C18A4E1F1720
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a503de49-1947-3515-95f2-a4537fa97a5b.roa
Signing time:             Wed 21 Oct 2026 13:01:45 +0000
ROA not before:           Wed 21 Oct 2026 13:01:45 +0000
ROA not after:            Tue 19 Jan 2027 14:01:45 +0000
asID:                     131646
IP address blocks:        38.126.72.0/24 maxlen: 24
                          154.3.74.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:93:6e:6a:b3:9c:b3:c1:8a:4e:1f:17:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct 21 13:01:45 2026 GMT
            Not After : Jan 19 14:01:45 2027 GMT
        Subject: CN=c3ef0aed-0d03-4a4e-83a5-377ea0218981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d9:eb:2f:96:3e:7e:0a:24:3e:72:7d:b2:f4:
                    ef:5d:19:09:94:a8:79:b2:39:0a:b2:83:f3:07:4a:
                    d7:1a:1f:44:98:38:6e:e2:e5:4f:8f:4b:eb:fb:85:
                    27:7c:36:4d:73:bc:9f:f1:18:61:50:93:24:22:96:
                    23:73:f6:38:71:40:0d:9e:36:c2:ef:01:43:00:30:
                    81:72:59:fa:4f:dc:1c:b1:8a:0c:0b:ba:e3:c1:12:
                    24:c9:44:0b:b1:00:e1:d6:b9:9f:87:18:36:b1:85:
                    41:e5:65:ed:35:a9:91:e9:7f:b0:4c:b0:92:11:6a:
                    f9:b7:a6:ef:ef:a6:e5:ea:7b:06:8f:48:8b:61:4a:
                    fc:3e:b1:a1:96:82:c4:69:21:94:e5:6b:ee:d9:9f:
                    46:a0:42:fc:8b:89:23:41:48:ea:57:00:a2:36:3d:
                    1d:70:41:7d:91:d2:df:a4:9d:ee:c8:09:34:13:b1:
                    2f:ee:1e:11:d2:aa:ae:1b:95:c9:fd:24:f3:79:49:
                    2d:27:5e:14:aa:3c:1d:49:04:54:a3:8f:08:05:d0:
                    3b:b3:65:c5:2e:fe:b6:19:2e:5a:e1:72:a2:0a:00:
                    d4:8a:ee:d3:d2:e4:df:bb:c0:0e:1c:d2:1e:b1:9c:
                    21:39:76:a0:b4:c0:b2:0c:54:e6:5e:31:b4:e6:b4:
                    82:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:3D:D4:81:3B:6B:06:29:F6:B6:92:C7:43:AC:6D:98:A4:53:AF:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a503de49-1947-3515-95f2-a4537fa97a5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.126.72.0/24
                  154.3.74.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:9c:94:6d:15:d9:c5:22:78:66:ef:3f:e3:62:8a:df:06:40:
         a3:23:7e:fb:86:cc:c9:dd:4e:69:92:3d:41:ab:d3:92:b6:b2:
         27:62:3e:d5:ac:54:d0:5c:fc:86:a9:d3:bb:2a:ed:16:50:c4:
         69:55:3a:f9:62:9e:66:83:48:66:b3:87:93:cf:84:78:59:ca:
         38:09:4b:a2:ae:82:21:38:5e:ab:f7:f4:56:9b:c2:83:4c:e9:
         f2:35:08:1f:b1:3f:da:ed:1d:68:9b:3e:d3:a9:fd:b2:03:04:
         ce:bb:a0:1a:8f:20:8b:05:e4:3b:cf:8f:51:6e:bb:a7:31:92:
         b5:5f:98:67:31:33:92:1e:21:0f:16:78:d3:46:8a:b6:53:e9:
         f6:e5:d7:1d:2d:2d:ad:ab:93:4e:4b:c3:07:a5:be:e8:be:c6:
         f5:3e:93:74:b6:eb:21:b9:12:a8:42:36:bc:f9:85:8e:8a:78:
         08:84:4c:78:67:4b:07:55:57:80:7b:d6:05:2f:82:e7:59:e8:
         a9:bc:51:dc:61:54:99:7e:65:d2:fc:36:8f:19:46:7a:7b:ab:
         96:62:08:f0:7f:de:6e:21:27:31:e3:b8:97:bc:99:9b:cc:5d:
         cd:be:8a:38:cd:a9:e9:f3:4e:46:0b:75:61:3f:fd:5b:ac:1a:
         a4:34:5f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 21:16:40 2026 by rpki-client