Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a7943fb5-05ec-340c-b5fa-9145c41427b1.roa
File:                     a7943fb5-05ec-340c-b5fa-9145c41427b1.roa (raw, json)
Hash identifier:          1xtUa4zkveuI4lObW/2Mghb6oUVpDu7TcBPqzz5GD5k=
Subject key identifier:   C0:58:01:E7:71:8E:DD:E7:B1:9B:7B:CC:07:1A:70:3E:70:3B:8E:15
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F6F22F9749D7A9F0BE917CC80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a7943fb5-05ec-340c-b5fa-9145c41427b1.roa
Signing time:             Thu 08 Oct 2026 13:00:12 +0000
ROA not before:           Thu 08 Oct 2026 13:00:12 +0000
ROA not after:            Wed 06 Jan 2027 14:00:12 +0000
asID:                     136625
IP address blocks:        38.226.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 25 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:22:f9:74:9d:7a:9f:0b:e9:17:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct  8 13:00:12 2026 GMT
            Not After : Jan  6 14:00:12 2027 GMT
        Subject: CN=a80e6119-d543-4640-aaff-5f709d068183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:18:13:51:c5:01:c3:0a:1c:6e:58:ce:5a:d6:
                    35:97:3e:80:ab:cc:dd:39:7f:9b:b9:db:b6:81:92:
                    f7:0a:d4:0f:f0:44:dc:28:3d:52:e1:b2:df:ce:b5:
                    8a:69:e3:96:eb:83:1c:f8:8a:41:26:8c:1d:7c:a8:
                    74:6a:38:3e:02:f9:8d:a7:8d:2d:4f:a8:9b:3d:f0:
                    24:0c:7a:ca:a5:55:91:39:63:28:6a:57:e8:02:ff:
                    1d:57:d8:d4:ae:58:e3:c3:51:ac:7b:dc:fb:6d:1c:
                    be:99:72:be:68:1e:6c:52:06:b7:c4:87:93:2e:7e:
                    17:e5:bc:e5:ab:b5:7f:66:ba:1c:3b:46:f1:cc:b1:
                    a7:f8:79:69:4d:61:e0:dd:d9:3e:ad:d1:10:44:34:
                    fc:78:fa:2b:1a:da:2a:a4:8a:6c:29:7a:32:22:ee:
                    55:57:ca:a5:fb:20:0c:6c:99:fd:37:59:cf:ff:73:
                    5b:aa:0f:85:d8:b4:8b:fa:d3:4a:81:b1:ab:6f:2a:
                    f7:fe:d4:e2:2b:76:e9:db:41:2e:b5:23:4b:e8:16:
                    8f:06:21:d0:04:17:e4:ea:86:92:fc:3a:a1:93:6a:
                    e9:04:ea:0c:8c:39:37:32:68:a0:d3:8d:53:89:12:
                    fa:de:22:f6:09:ee:d7:d9:e5:b4:1f:27:48:38:9d:
                    54:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:58:01:E7:71:8E:DD:E7:B1:9B:7B:CC:07:1A:70:3E:70:3B:8E:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a7943fb5-05ec-340c-b5fa-9145c41427b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.226.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:c1:e7:9f:0d:46:b2:78:6c:22:e3:be:fb:c3:2b:9e:49:d5:
         75:08:e6:ad:86:ad:95:8d:b7:61:ca:b5:a4:70:40:80:fd:1b:
         d1:48:9e:ac:e7:29:a9:62:aa:e9:cf:99:9e:36:8d:d6:1b:8a:
         b4:7c:41:bd:66:70:1e:9a:33:ad:c9:45:1b:ca:e1:1d:d5:41:
         74:c0:2d:e3:a4:62:e2:1c:8b:1d:52:63:46:86:a9:62:65:05:
         a4:65:99:80:d3:fc:98:c0:c3:99:f0:b4:3c:0d:b6:9a:d2:7c:
         cc:21:cc:d7:61:aa:82:fe:3f:89:c8:5a:15:ea:47:73:73:ad:
         1d:dc:fc:28:5f:52:f5:4d:5d:8f:e5:52:8b:21:55:ca:45:68:
         f2:1d:6f:7b:38:3b:07:cb:39:bf:2d:16:33:81:af:27:8c:46:
         87:77:77:1c:5a:99:64:5a:ab:0d:33:5a:e4:69:c2:4b:b8:f3:
         60:00:e7:53:ec:b7:6f:d4:23:68:0a:97:1e:a4:dc:aa:75:3c:
         bf:81:81:c4:28:65:ac:f2:b0:f1:da:23:93:3c:01:d9:1a:7f:
         1d:4d:17:f7:b8:4a:87:9b:b9:a1:36:aa:94:9f:61:0d:c2:f7:
         3f:70:a2:94:d9:22:68:b6:59:cc:05:a3:dc:5e:79:61:bc:a9:
         35:52:5c:03
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vIvl0nXqfC+kXzIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk
YTgwZTYxMTktZDU0My00NjQwLWFhZmYtNWY3MDlkMDY4MTgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBgTUcUBwwocbljOWtY1lz6Aq8zdOX+budu2
gZL3CtQP8ETcKD1S4bLfzrWKaeOW64Mc+IpBJowdfKh0ajg+AvmNp40tT6ibPfAk
DHrKpVWROWMoalfoAv8dV9jUrljjw1Gse9z7bRy+mXK+aB5sUga3xIeTLn4X5bzl
q7V/ZrocO0bxzLGn+HlpTWHg3dk+rdEQRDT8ePorGtoqpIpsKXoyIu5VV8ql+yAM
bJn9N1nP/3Nbqg+F2LSL+tNKgbGrbyr3/tTiK3bp20EutSNL6BaPBiHQBBfk6oaS
/Dqhk2rpBOoMjDk3Mmig041TiRL63iL2Ce7X2eW0HydIOJ1UiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMBYAedxjt3nsZt7zAcacD5wO44VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYTc5NDNmYjUtMDVlYy0z
NDBjLWI1ZmEtOTE0NWM0MTQyN2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJuI/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGzB558NRrJ4bCLjvvvDK55J1XUI5q2GrZWNt2HKtaRwQID9G9FInqzn
KaliqunPmZ42jdYbirR8Qb1mcB6aM63JRRvK4R3VQXTALeOkYuIcix1SY0aGqWJl
BaRlmYDT/JjAw5nwtDwNtprSfMwhzNdhqoL+P4nIWhXqR3NzrR3c/ChfUvVNXY/l
UoshVcpFaPIdb3s4OwfLOb8tFjOBryeMRod3dxxamWRaqw0zWuRpwku482AA51Ps
t2/UI2gKlx6k3Kp1PL+BgcQoZazysPHaI5M8Adkafx1NF/e4SoebuaE2qpSfYQ3C
9z9wopTZImi2WcwFo9xeeWG8qTVSXAM=
-----END CERTIFICATE-----
Generated at Sat Oct 24 02:02:39 2026 by rpki-client