Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d8093c20-8ea4-370b-8b3b-c420f9e007df.roa
File:                     d8093c20-8ea4-370b-8b3b-c420f9e007df.roa (raw, json)
Hash identifier:          O0pErFqkwNJ1arP6+XykZIktzwIlHMbw0Zr1qw7/Ek0=
Subject key identifier:   10:3C:33:EA:42:9B:A4:89:ED:A3:40:A2:6B:B3:8E:23:DF:BE:75:A7
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584ED03E92E9CFC6D1B39B82CC20
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d8093c20-8ea4-370b-8b3b-c420f9e007df.roa
Signing time:             Wed 12 Aug 2026 15:02:44 +0000
ROA not before:           Wed 12 Aug 2026 15:02:44 +0000
ROA not after:            Wed 28 Oct 2026 01:00:12 +0000
asID:                     265721
IP address blocks:        38.9.16.0/20 maxlen: 24
                          38.50.176.0/20 maxlen: 24
                          38.188.0.0/19 maxlen: 24
                          154.56.32.0/19 maxlen: 24
                          204.157.186.0/23 maxlen: 24
                          206.2.128.0/18 maxlen: 24
                          206.84.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:3e:92:e9:cf:c6:d1:b3:9b:82:cc:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Aug 12 15:02:44 2026 GMT
            Not After : Oct 28 01:00:12 2026 GMT
        Subject: CN=e64edaac-b4aa-453f-8054-fe55dfaa0a55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a1:53:f5:70:7b:b4:91:35:11:36:22:8c:34:
                    0d:72:4c:ec:f5:aa:1f:c4:ad:e8:6c:58:fb:c8:b5:
                    8e:34:49:ad:55:b0:58:7c:49:35:1f:f6:e6:a1:95:
                    8d:da:3c:a8:41:0b:11:40:f9:23:9f:b3:ef:10:51:
                    d4:5c:6b:35:9b:4b:86:4f:40:b6:aa:4a:a6:d9:1c:
                    de:67:d6:83:07:3b:02:ff:80:69:4d:80:7a:9c:be:
                    99:d5:4e:f3:9d:47:96:af:c5:3d:61:05:0b:38:92:
                    5f:57:03:2f:cd:fc:5d:1d:ec:0e:cd:60:de:4c:dd:
                    96:4e:41:e9:af:0c:9b:cd:68:70:5a:ee:1f:85:9f:
                    6e:00:58:90:2c:50:4a:1a:29:a0:1e:88:73:b7:41:
                    64:2a:c7:86:fe:64:1b:a9:e7:4d:9c:8c:69:39:68:
                    c4:a5:7c:0b:e6:c9:0b:f3:f4:d4:f1:ee:07:a7:98:
                    8c:7f:bd:8d:56:96:ef:92:06:c6:a2:c2:5f:82:e7:
                    1d:00:be:fc:ab:fe:ba:d7:a7:c8:5c:44:db:de:4e:
                    50:6a:74:28:d2:22:5a:b5:30:e4:8b:50:df:b7:0c:
                    52:3c:b5:82:cd:99:d7:92:d7:ab:a1:3c:3c:aa:d1:
                    a0:32:02:2d:7b:52:c4:ff:c1:89:30:de:91:df:4f:
                    4a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:3C:33:EA:42:9B:A4:89:ED:A3:40:A2:6B:B3:8E:23:DF:BE:75:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d8093c20-8ea4-370b-8b3b-c420f9e007df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.9.16.0/20
                  38.50.176.0/20
                  38.188.0.0/19
                  154.56.32.0/19
                  204.157.186.0/23
                  206.2.128.0/18
                  206.84.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:28:59:a2:1c:3f:c7:09:8c:57:c0:73:8d:ab:9b:4d:ba:f0:
         de:1f:ac:e9:74:b1:2b:ff:07:4a:51:ad:09:cc:f8:b5:69:2c:
         3c:6a:6b:f6:ad:9e:76:fd:73:03:3f:6a:0e:48:c2:23:6a:29:
         e4:a4:25:17:bf:0b:d6:54:80:21:83:d9:0a:d6:74:a2:82:0f:
         63:99:6b:58:b0:73:16:71:3b:e8:61:42:31:78:dc:93:1f:7c:
         8b:52:d9:36:e0:ba:13:f8:43:6a:d3:be:d7:98:2a:2b:0e:fb:
         67:dd:61:80:81:5e:0f:32:2e:13:f1:eb:be:1f:ce:c1:5c:f8:
         24:51:ca:1e:d8:eb:bc:b2:91:5a:4a:e5:f8:0a:51:31:19:47:
         4f:7a:34:60:31:21:2b:cc:71:ed:3c:d5:a8:63:59:b4:49:de:
         2a:cc:ec:9f:bd:05:bf:bc:a4:5c:77:4e:a6:2c:ff:13:49:5f:
         d2:17:47:55:9e:06:e9:20:00:79:83:6a:e4:43:95:3b:ff:ac:
         cc:ad:c3:ea:ab:4e:54:98:ff:a8:3d:9d:56:36:53:a3:cc:9a:
         e0:87:46:7f:4f:af:b7:72:7c:a7:26:09:b2:b0:de:9e:75:03:
         13:f4:8e:9c:ac:b6:94:01:0a:8a:6d:8b:16:a7:df:95:0e:42:
         05:98:bb:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:28:07 2026 by rpki-client