Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b47502d4-dba1-355f-82bb-ba9a4fafdce4.roa
File:                     b47502d4-dba1-355f-82bb-ba9a4fafdce4.roa (raw, json)
Hash identifier:          /TAyuZ0oyEgtDujbOAMX1k9ECofs3KnZ1bDAVdZEXgo=
Subject key identifier:   20:53:6C:E0:2A:41:53:30:B6:92:3A:4F:9A:09:99:16:CD:BC:6E:47
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D9B85629DB19335DDD1284A80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b47502d4-dba1-355f-82bb-ba9a4fafdce4.roa
Signing time:             Fri 24 Apr 2026 01:00:23 +0000
ROA not before:           Fri 24 Apr 2026 01:00:23 +0000
ROA not after:            Thu 23 Jul 2026 01:00:23 +0000
asID:                     264681
IP address blocks:        38.236.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9b:85:62:9d:b1:93:35:dd:d1:28:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Apr 24 01:00:23 2026 GMT
            Not After : Jul 23 01:00:23 2026 GMT
        Subject: CN=2bd302fe-be13-4c67-9d94-16c2ed834f94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2f:16:2e:76:c0:e1:85:fe:42:50:50:cc:a1:
                    9d:a5:79:20:13:40:76:6a:e0:54:04:d5:68:5d:b5:
                    0b:8e:cf:54:ed:35:06:d2:d1:7b:47:49:20:21:4c:
                    25:26:8c:23:f6:b4:95:c9:d3:a8:93:f3:26:59:5f:
                    20:fb:c6:3e:2f:38:61:7c:be:55:26:05:cc:d9:85:
                    d3:c7:25:3c:6e:5a:2d:82:aa:91:6c:e6:a2:04:a9:
                    48:a3:f4:41:91:01:43:94:8b:e2:22:76:b0:e5:c7:
                    db:d9:5f:a2:0b:5f:76:a8:37:ff:a4:d6:ce:44:4e:
                    8b:8c:17:82:d5:6f:c6:a9:60:56:d9:54:61:34:7a:
                    f7:59:ee:bd:da:ac:21:3d:e6:8c:56:5d:51:f9:c6:
                    83:fc:34:9b:cd:1a:ba:bd:38:9b:ca:22:2b:a6:f6:
                    88:c1:b1:39:5b:ca:0d:cc:59:61:bc:09:59:11:e7:
                    68:cd:b1:a6:98:10:cb:fc:45:b3:30:65:66:37:d5:
                    8e:28:95:bf:47:0d:18:43:77:65:23:94:f2:2a:07:
                    a6:4c:b6:d5:53:2c:3e:60:db:3e:bb:6b:e0:60:ef:
                    5d:79:a0:88:94:ca:87:e8:0e:76:d6:5d:7a:37:09:
                    70:d9:c4:93:23:bc:71:82:38:79:4b:03:ff:9f:56:
                    c8:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:53:6C:E0:2A:41:53:30:B6:92:3A:4F:9A:09:99:16:CD:BC:6E:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b47502d4-dba1-355f-82bb-ba9a4fafdce4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.236.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:09:b5:97:87:5a:9f:3c:38:d1:de:76:3b:35:96:86:61:58:
         e9:88:5e:22:bb:30:db:51:04:4f:23:cc:b1:12:b6:12:d5:39:
         ed:91:31:1f:ff:2f:b2:52:71:f5:d4:ea:ed:49:38:e5:c7:6b:
         55:06:f2:38:0e:8c:11:3e:60:a1:7b:39:f2:cb:a2:4a:ea:d1:
         af:b8:ea:19:b7:63:1f:f7:40:35:87:b5:d8:a4:51:17:ab:66:
         d3:59:4e:f8:1c:c1:2a:8a:46:bf:04:8a:7d:be:91:9d:37:93:
         33:4f:74:a4:d5:ee:d5:f0:ed:fe:12:1f:22:3e:9c:88:67:e1:
         6b:88:4c:42:7e:ff:ff:3f:4c:b0:6d:8f:30:5f:d2:56:12:38:
         c7:16:1f:99:92:ed:b0:87:84:9d:66:c1:27:d0:d0:2c:83:8c:
         b1:7f:44:38:fc:89:a3:65:44:c7:ec:86:10:1c:37:d6:75:db:
         ed:28:e5:c0:a6:5b:aa:e8:cd:dd:44:24:55:c2:a0:e2:09:e1:
         91:65:af:46:60:cc:b4:ae:16:8a:95:a4:d3:bc:a6:0f:9c:9a:
         73:8a:ba:31:45:24:0b:a2:ce:b6:0a:c5:28:5b:0d:10:00:24:
         0a:56:0e:76:23:c7:55:49:58:50:42:69:7b:78:a9:70:10:57:
         74:27:67:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 21:12:48 2026 by rpki-client