Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a91e42be-2cdb-3e5a-b872-59cd5161c0bb.roa
File:                     a91e42be-2cdb-3e5a-b872-59cd5161c0bb.roa (raw, json)
Hash identifier:          T7OnyJeMxNuiq8aqUr3VX2jM0NdlbSlt0vF9KWjpT+M=
Subject key identifier:   F5:14:4B:C2:1B:DD:6C:4F:FF:A0:F1:D1:AD:AF:F3:EE:2A:2F:BE:2D
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F612D6BBA7B56BBB7DF2BB480
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a91e42be-2cdb-3e5a-b872-59cd5161c0bb.roa
Signing time:             Sat 03 Oct 2026 13:00:13 +0000
ROA not before:           Sat 03 Oct 2026 13:00:13 +0000
ROA not after:            Fri 01 Jan 2027 14:00:13 +0000
asID:                     272815
IP address blocks:        38.199.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 23 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:61:2d:6b:ba:7b:56:bb:b7:df:2b:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct  3 13:00:13 2026 GMT
            Not After : Jan  1 14:00:13 2027 GMT
        Subject: CN=d592d65c-2de6-4091-8b05-68be2b7733ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6c:f0:1f:e5:a9:8e:40:6b:90:20:09:fc:c7:
                    9b:66:ac:ff:8b:05:f1:b3:fc:c7:eb:5f:0d:26:b6:
                    b9:34:3c:7e:93:ce:84:c7:71:26:5d:7c:c9:45:22:
                    d6:49:75:11:3d:04:c1:e8:88:50:b7:e6:37:7c:e2:
                    67:6c:22:2a:39:b5:66:e2:a2:c3:1d:50:5c:95:15:
                    ba:e2:cf:cc:f6:44:29:01:6f:ca:f5:73:8b:14:9d:
                    11:c2:83:62:38:ae:0f:1d:61:fd:25:b3:2e:1c:9f:
                    01:e8:6c:c8:93:49:01:8e:36:46:b4:70:99:09:97:
                    d4:1b:9d:55:5e:b4:f5:37:20:9d:70:dc:30:ac:96:
                    5b:d5:1e:a7:9b:8d:0e:22:fe:97:0e:89:86:0e:7d:
                    02:45:05:49:5f:69:c7:6c:b5:94:a9:06:16:a2:50:
                    25:df:85:fe:f6:86:9e:2f:44:ac:97:2d:91:59:2b:
                    8b:a0:b8:00:44:7e:3a:9b:cd:d9:e7:25:39:61:11:
                    c0:9e:2f:a9:01:41:37:ba:62:6f:28:75:7d:29:d1:
                    73:2b:60:9c:da:d7:b8:e0:19:a9:ab:c4:48:b7:da:
                    42:5e:67:06:72:d6:af:04:c8:bd:84:af:56:fc:1b:
                    9c:be:52:3c:05:d8:6d:0a:19:62:36:dd:2f:bd:f7:
                    2d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:14:4B:C2:1B:DD:6C:4F:FF:A0:F1:D1:AD:AF:F3:EE:2A:2F:BE:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a91e42be-2cdb-3e5a-b872-59cd5161c0bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.199.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:8a:2b:70:ac:50:32:cd:a2:75:5e:f4:8e:d8:96:28:0a:a4:
         64:f7:21:5b:95:5e:a0:8b:48:04:92:cc:91:98:ad:45:c4:98:
         8a:3b:a0:01:ab:29:17:a1:46:18:de:54:ac:28:69:75:a1:f4:
         7e:29:2a:05:22:10:d6:f2:1b:4a:ac:9d:4c:af:71:0f:f3:82:
         ba:f3:26:34:3f:21:84:e4:36:56:da:08:c3:79:a9:1b:de:dd:
         4a:2e:ee:50:7b:7b:8e:38:7b:c9:2a:2a:c0:a5:36:06:27:aa:
         21:13:38:dc:7a:ea:5e:39:b8:c9:20:8e:52:39:75:60:81:60:
         2b:7c:c4:a7:3a:6e:c8:eb:eb:42:27:2c:9a:49:f1:08:e7:be:
         45:00:65:e6:e0:27:19:9e:e3:1f:3c:03:ad:06:a7:94:5f:cf:
         e4:34:a9:0b:29:b3:8e:c3:d7:75:2a:17:eb:ff:07:fc:07:61:
         d3:53:4b:0f:a7:a2:1a:14:28:fb:ee:3d:75:56:5e:7f:8b:bb:
         7f:98:ea:fc:1c:5e:6e:cd:ac:ee:54:94:0c:9e:1e:69:b5:78:
         31:d4:24:fd:fa:cb:5a:8b:47:d5:41:ae:bf:62:f7:29:ce:d0:
         b2:3f:a2:41:1a:27:9a:f4:e1:78:4a:18:c4:5b:29:a2:d6:6d:
         84:af:71:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:56:46 2026 by rpki-client