Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c9d5ce8b-e1b0-36d2-9b1a-b1046f1c65de.roa
File:                     c9d5ce8b-e1b0-36d2-9b1a-b1046f1c65de.roa (raw, json)
Hash identifier:          N0ttDmsm0suUr+ai8L7OC6efY52gS1QHRdz4yOSfJ6I=
Subject key identifier:   06:32:9A:B4:A0:A1:78:B4:4A:1A:72:2A:DF:15:4A:E1:AC:1E:B1:02
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584EBF41AE993EAEDFF38F4C9C80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c9d5ce8b-e1b0-36d2-9b1a-b1046f1c65de.roa
Signing time:             Thu 06 Aug 2026 13:00:12 +0000
ROA not before:           Thu 06 Aug 2026 13:00:12 +0000
ROA not after:            Wed 04 Nov 2026 14:00:12 +0000
asID:                     4657
IP address blocks:        38.46.202.0/24 maxlen: 24
                          38.46.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bf:41:ae:99:3e:ae:df:f3:8f:4c:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Aug  6 13:00:12 2026 GMT
            Not After : Nov  4 14:00:12 2026 GMT
        Subject: CN=091fbd2d-6974-442f-808f-ce78ee70f8ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f9:62:9c:ac:40:4e:c9:07:e2:40:d1:78:32:
                    a4:5c:6d:f6:d8:33:ef:d5:c4:e2:b7:2a:94:ec:8e:
                    4e:b7:69:6d:79:00:01:8d:bf:6a:43:47:9c:c5:59:
                    37:9e:e4:f7:4b:03:56:92:5a:52:7b:61:9f:5d:35:
                    f4:32:16:6f:e2:1f:e0:7a:b5:8a:e8:db:7e:9b:d8:
                    e6:82:e8:47:6f:5c:db:19:f4:ce:22:34:b5:49:ae:
                    b6:f0:10:b8:66:3a:23:70:d1:d2:58:6c:92:ad:f8:
                    3e:de:a4:a7:90:88:68:1e:35:f9:3b:61:f8:89:4e:
                    c1:39:e7:9e:d3:ee:21:0b:3e:39:09:66:ee:c5:88:
                    1f:ba:a0:86:45:98:cb:df:49:44:9b:f7:18:ef:3c:
                    4c:0f:70:dd:d8:05:86:6a:b6:0e:d2:91:2e:8b:e1:
                    d8:2d:e3:33:d8:ad:4c:a0:46:d6:9d:df:52:15:d2:
                    fe:4e:a2:f1:51:a4:16:b7:88:a1:83:d7:c3:d5:29:
                    b4:37:27:d8:48:89:c9:17:82:34:26:0c:9f:f4:dd:
                    3f:0d:c1:51:64:99:45:ec:b6:9e:b4:48:0d:6c:7d:
                    0a:9c:04:73:17:41:97:30:10:36:4a:4f:13:19:91:
                    40:8d:b0:67:88:2b:6a:11:aa:1c:db:df:14:7f:01:
                    8f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:32:9A:B4:A0:A1:78:B4:4A:1A:72:2A:DF:15:4A:E1:AC:1E:B1:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c9d5ce8b-e1b0-36d2-9b1a-b1046f1c65de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.46.202.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:2a:7c:55:e5:6e:59:ba:96:2c:68:82:6c:76:47:59:63:4d:
         1d:d5:46:7d:a7:d1:1a:e1:8c:18:8c:a8:35:72:05:4b:ca:53:
         82:2f:53:67:89:e6:21:c9:33:d2:4e:70:aa:dd:cf:a7:66:d5:
         77:81:53:ba:50:c7:cc:72:7c:cb:82:bb:f9:66:38:e9:31:d7:
         1d:48:70:c8:77:d0:d2:de:ee:fa:69:f3:c7:03:79:47:95:87:
         1f:78:9e:38:32:10:61:95:c1:01:b6:0c:cc:0a:e6:ae:8c:7b:
         31:0c:19:a4:ee:d9:f9:53:4e:07:2c:12:3b:2f:90:a7:e5:07:
         18:78:b9:14:c6:7b:b2:f6:07:60:ea:9f:55:21:16:e7:ad:70:
         2b:12:f1:e5:80:d7:6a:b6:7b:34:ae:21:04:36:43:76:dd:6a:
         a4:1c:be:3d:ce:67:cb:be:f5:e2:cb:e3:b8:58:4b:c4:5e:20:
         87:66:5c:4a:cf:a6:7c:b3:7d:23:4c:cf:2a:17:bb:62:c4:49:
         c5:c4:df:24:18:4e:d8:7b:52:3a:a1:5f:76:5d:ab:09:34:0a:
         c9:5a:62:92:f7:63:81:07:8b:93:37:0f:37:af:e7:b2:29:8c:
         cd:3c:21:5d:c6:83:fa:d1:c0:26:a9:25:d5:73:50:3f:5b:52:
         c8:5b:6a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 11:27:19 2026 by rpki-client