Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bc284837-a4a2-3b8a-96b4-d2a950409836.roa
File:                     bc284837-a4a2-3b8a-96b4-d2a950409836.roa (raw, json)
Hash identifier:          BE6E8tD0jLloyMRZmdl0/J4GY6k91e7e/OxRXoV0Xpc=
Subject key identifier:   33:D0:5E:58:84:D0:81:E4:94:9F:13:63:DE:FB:5B:59:1E:59:9D:17
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F58CD6568B92F496696CDBE40
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bc284837-a4a2-3b8a-96b4-d2a950409836.roa
Signing time:             Wed 30 Sep 2026 13:00:13 +0000
ROA not before:           Wed 30 Sep 2026 13:00:13 +0000
ROA not after:            Tue 29 Dec 2026 14:00:13 +0000
asID:                     58369
IP address blocks:        38.210.84.0/22 maxlen: 24
                          38.225.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:58:cd:65:68:b9:2f:49:66:96:cd:be:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep 30 13:00:13 2026 GMT
            Not After : Dec 29 14:00:13 2026 GMT
        Subject: CN=9f3c9496-df66-4384-93f4-2887412d25e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:18:39:46:df:eb:1a:18:d8:11:e1:6a:01:9b:
                    18:13:d8:1e:e0:8f:b2:06:d1:2c:47:c0:98:74:0e:
                    6e:bb:51:2a:e7:ed:63:b8:85:74:7b:96:4b:e7:ea:
                    2b:df:04:13:75:67:a3:bd:48:4c:81:36:d1:8f:0e:
                    a9:1a:38:ea:69:20:b7:09:6a:62:dc:d9:19:93:37:
                    30:14:cd:8e:fc:3e:48:f1:51:7f:78:9d:29:54:06:
                    2f:88:fd:03:b7:dc:9c:d0:b9:4d:3c:57:da:34:99:
                    99:e0:94:d4:b2:c9:6a:76:80:26:16:76:8b:9b:43:
                    24:85:8c:20:e0:04:0e:22:1c:dc:28:c5:a7:88:8e:
                    fb:cb:19:a7:a3:2e:2c:f0:b1:7c:af:b6:10:da:5d:
                    c8:68:88:c0:d5:8a:ff:fe:ff:29:21:63:15:23:07:
                    9f:d1:bf:c9:1f:79:78:0c:51:3a:f1:8c:98:fa:80:
                    a9:6d:6c:38:13:a1:6f:cc:60:55:51:f5:eb:01:b3:
                    20:98:ea:18:e2:a3:a8:11:6c:51:a2:ea:e9:4a:ef:
                    b4:2a:7c:57:1d:5b:f6:7c:28:95:cf:56:24:6a:61:
                    16:8e:d7:f3:56:92:e5:bc:aa:9b:13:95:fa:ce:d0:
                    a3:52:73:b0:27:5a:54:6f:82:c6:ee:1a:1a:41:db:
                    24:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:D0:5E:58:84:D0:81:E4:94:9F:13:63:DE:FB:5B:59:1E:59:9D:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bc284837-a4a2-3b8a-96b4-d2a950409836.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.210.84.0/22
                  38.225.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:d7:25:89:c2:aa:af:0d:a9:5b:d0:88:dd:42:ef:49:8f:c8:
         cc:f4:8d:ff:e3:af:83:03:c5:7b:37:c4:ac:1c:4e:a7:25:05:
         02:33:d2:4f:de:58:e5:e2:7e:e8:dd:0e:b6:c8:65:1c:17:46:
         06:08:55:9b:32:9e:19:d0:34:d2:87:5b:6c:f8:d0:e7:8f:c3:
         38:c2:42:c8:43:6e:91:d1:70:a3:59:84:49:95:b6:5b:4a:63:
         dd:13:bb:9a:58:9d:78:0b:5a:60:3d:eb:e6:71:c4:ce:56:88:
         91:6a:d9:0e:57:48:82:ff:e9:88:96:67:c5:1b:f1:16:3d:53:
         df:d9:e5:b1:08:4c:34:3e:60:d9:72:22:a9:82:77:37:64:e5:
         a2:ca:8f:7d:3f:7c:50:17:3e:a6:4c:5e:98:ba:a2:fe:5b:05:
         38:41:c5:80:c7:eb:7c:06:af:5c:26:d3:73:3c:bd:40:42:f1:
         26:c2:5a:41:c7:a9:46:5e:e8:85:67:09:53:8e:85:30:26:63:
         c6:5f:55:f0:7b:c2:b0:c0:d3:dc:76:0f:af:2e:0d:c3:62:12:
         9b:11:58:32:20:9f:c4:44:2e:bf:54:f7:3e:47:1f:9b:be:74:
         25:c7:24:21:be:f3:82:9f:a9:00:29:b8:66:34:58:de:c1:56:
         17:56:3b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 07:24:30 2026 by rpki-client