Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d108572b-f150-32d2-81c4-9d17185769b6.roa
File:                     d108572b-f150-32d2-81c4-9d17185769b6.roa (raw, json)
Hash identifier:          PdnslSdTmPJdPleP4amG1Q2mjpC9pRv23kIkANm9dJ0=
Subject key identifier:   30:53:CB:22:05:B1:3E:C8:58:CC:11:48:61:28:5F:F3:46:22:02:B3
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D127550303F2F5D6B1E27F700
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d108572b-f150-32d2-81c4-9d17185769b6.roa
Signing time:             Thu 05 Mar 2026 22:42:30 +0000
ROA not before:           Thu 05 Mar 2026 22:42:30 +0000
ROA not after:            Wed 03 Jun 2026 21:42:30 +0000
asID:                     32455
IP address blocks:        38.77.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:12:75:50:30:3f:2f:5d:6b:1e:27:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Mar  5 22:42:30 2026 GMT
            Not After : Jun  3 21:42:30 2026 GMT
        Subject: CN=075dc2cc-1e86-438a-aa96-a8d6a6fcaee2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3f:28:0f:09:42:5a:20:1e:4c:b7:5d:9d:65:
                    49:8f:42:21:93:c0:cc:d3:f0:25:25:3c:26:04:67:
                    09:28:9d:ca:5b:4e:76:de:d6:16:47:d4:17:fe:32:
                    64:b9:56:a5:2a:ca:b3:4f:d7:44:75:30:48:73:f7:
                    0a:85:5c:20:b1:62:80:bf:c9:7b:99:a8:e2:4e:a4:
                    b3:3c:0d:8e:80:43:87:82:1a:35:1b:a3:20:7e:b6:
                    92:ee:16:e7:38:d7:1e:bf:f8:ae:67:81:b9:1f:21:
                    57:9e:21:a3:b7:4c:72:15:14:20:65:fb:8f:df:6e:
                    9b:1a:45:a3:11:99:81:af:8b:0a:53:34:a0:d6:27:
                    79:a9:31:01:25:93:38:eb:6c:ee:94:8e:4b:bd:ca:
                    58:f2:fd:b4:9c:0b:ca:07:1f:2c:5e:2f:3d:60:63:
                    67:1a:9f:f8:f8:a6:03:0c:87:2a:05:a6:6f:63:ca:
                    6c:ee:3e:1e:d1:95:8c:15:e8:16:2a:9d:8d:ad:46:
                    1e:9e:99:62:b6:fc:54:26:d3:1f:a8:94:24:4d:60:
                    61:4f:69:43:57:bb:89:54:16:14:59:79:24:96:e6:
                    1f:db:0c:de:cc:2c:64:be:ae:bd:76:cb:a9:be:7d:
                    9f:a0:42:98:71:c9:62:7e:26:8c:a8:00:56:04:80:
                    4f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:53:CB:22:05:B1:3E:C8:58:CC:11:48:61:28:5F:F3:46:22:02:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d108572b-f150-32d2-81c4-9d17185769b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.77.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:ba:b9:f4:b4:e9:45:1f:fb:bd:8e:d9:ba:8e:bd:be:cf:93:
         ef:d3:72:a0:6a:21:2f:3d:16:58:b5:ae:e6:18:0e:55:11:72:
         7c:1a:90:68:3f:a8:62:15:c9:88:44:2f:75:b5:b8:3b:b4:ab:
         c1:c0:fc:7e:ba:eb:20:2f:97:97:5a:ee:88:4e:0b:98:25:37:
         ea:23:d4:2c:0f:19:c7:05:82:e9:c8:8a:4b:94:d7:a8:b7:70:
         0d:45:19:64:44:4f:74:de:18:c6:5f:17:3a:29:b8:cc:00:9f:
         b0:cb:dc:0d:31:e7:8e:1d:c9:5a:e8:2f:9d:66:2a:67:80:6c:
         dc:09:3c:15:48:21:1e:31:1d:ea:c6:f0:c5:56:4e:35:b1:1f:
         76:73:97:4d:f6:d9:38:bf:0e:93:2c:5e:50:c2:e7:d0:80:cc:
         cf:0a:be:92:5e:de:12:d9:40:71:30:4a:06:92:81:9f:ea:20:
         42:a7:00:da:ba:26:29:b9:5d:7e:49:eb:bd:ed:0e:18:29:34:
         09:c6:36:41:d8:58:e3:c4:08:8d:44:2a:ea:30:65:ef:2f:fe:
         b6:1b:68:98:1b:e5:e5:16:1c:3d:16:f9:76:16:af:ef:f8:34:
         73:c8:93:41:fa:c0:c9:e5:73:35:74:97:d8:ae:a8:7e:a8:c9:
         e4:66:d8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 18:26:46 2026 by rpki-client