Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c7742d5f-06e2-3dcd-bfeb-3d6f1ee40cff.roa
File:                     c7742d5f-06e2-3dcd-bfeb-3d6f1ee40cff.roa (raw, json)
Hash identifier:          uQtHyZrSEUplEr4mxLuo0dViur5bBGqjRG3FegY4Bvc=
Subject key identifier:   24:1C:9D:52:5F:D4:EF:24:F0:7E:00:7A:D7:EC:2D:DF:77:3C:DA:7C
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F7E7E0CC9A1D994324299CC00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c7742d5f-06e2-3dcd-bfeb-3d6f1ee40cff.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     393327
IP address blocks:        38.143.250.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7e:0c:c9:a1:d9:94:32:42:99:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=32161f6d-e476-4ecf-8c72-c800f7ecad2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:88:94:b8:35:e1:aa:1f:dc:17:dd:a4:c6:e9:
                    e2:91:4e:59:33:8a:b7:57:4d:5e:43:39:38:bc:22:
                    26:f0:02:7a:70:b7:eb:7e:a8:51:ad:94:1d:50:3e:
                    84:5e:2a:e3:61:eb:e6:6f:96:d2:d8:8c:b1:6c:32:
                    d4:f3:2a:50:76:ca:27:dc:79:5c:43:af:7a:f2:7f:
                    b8:a3:0a:ba:d7:be:6d:37:08:82:b9:d8:f7:d0:9f:
                    26:01:64:ac:4c:53:e7:00:27:90:b5:46:6a:94:bb:
                    d1:d4:bc:8b:4b:70:07:e3:ca:56:fb:d1:da:a5:a5:
                    d0:42:d3:16:59:35:94:d4:84:2a:c5:a2:c5:6a:cc:
                    44:85:17:fd:84:89:5b:b9:fc:aa:00:fe:29:48:62:
                    80:0d:43:97:31:a2:93:aa:4d:fa:94:9d:79:dc:e7:
                    59:5d:66:7c:de:50:83:f3:dd:9b:77:88:c6:5b:ae:
                    59:07:6a:83:7f:e4:2d:c4:80:fa:5f:e9:52:8f:f0:
                    a7:40:9e:a8:43:a9:e8:09:df:e0:2e:f6:ee:80:2d:
                    c3:5a:08:8d:00:40:a4:29:60:4c:35:fc:44:b1:78:
                    c2:fa:9f:29:ac:a8:b6:c9:79:4b:a7:f0:0f:e9:fb:
                    64:6b:79:f8:62:0f:e1:05:58:bf:40:21:0f:ac:46:
                    1b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:1C:9D:52:5F:D4:EF:24:F0:7E:00:7A:D7:EC:2D:DF:77:3C:DA:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c7742d5f-06e2-3dcd-bfeb-3d6f1ee40cff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.143.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:f4:4c:46:6a:40:c4:c8:2c:36:6d:65:22:e4:ee:36:88:aa:
         9e:d3:86:7f:9f:be:85:6b:58:41:7c:50:ff:d9:63:01:bb:5c:
         70:2b:23:ed:06:9c:60:44:6b:17:e0:07:17:79:fa:d5:22:a3:
         ee:11:0c:c9:74:9a:d0:e6:09:30:18:d7:48:13:13:e1:33:da:
         6d:7f:8b:38:e3:28:f8:25:54:9e:1f:a3:4d:48:f2:b8:da:b5:
         63:8d:03:0a:60:db:51:76:de:bd:c3:70:6b:a5:ab:09:38:51:
         13:bb:e4:57:34:96:85:8d:05:22:60:8f:f7:09:28:4e:ad:3c:
         05:8a:d4:65:ca:dd:5e:6c:c5:92:77:4c:58:61:bf:26:ba:88:
         40:39:b7:64:04:e8:20:80:63:9e:b2:de:f5:9c:45:b8:24:f0:
         fc:b2:34:7a:0f:72:6b:b6:fb:67:d7:71:75:80:ec:1f:65:98:
         95:d1:35:a7:89:09:40:13:79:a0:12:66:6e:b7:6c:8c:92:3e:
         4d:5a:6e:11:c7:6f:94:17:e7:bf:39:6e:8a:e6:e5:53:d3:f4:
         e1:98:fb:bc:bc:da:b8:65:f2:a7:ad:e2:19:ba:12:0a:2d:e8:
         2f:7a:33:16:da:ba:c0:e8:58:62:ed:c8:f3:50:0f:48:73:f0:
         e6:12:b4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:34:27 2026 by rpki-client