Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/dcf55144-e9e1-317f-ae55-f1762a157490.roa
File:                     dcf55144-e9e1-317f-ae55-f1762a157490.roa (raw, json)
Hash identifier:          qvXtvWg5zbdFCPgr8wGYPb1wxLmLhophEItI5mgK22U=
Subject key identifier:   F2:64:E2:A6:42:AC:5F:1E:F0:93:09:7C:9B:57:98:52:7C:D0:8C:8E
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584DFEA0740EF804B20AE014DFC0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/dcf55144-e9e1-317f-ae55-f1762a157490.roa
Signing time:             Fri 29 May 2026 13:00:10 +0000
ROA not before:           Fri 29 May 2026 13:00:10 +0000
ROA not after:            Thu 27 Aug 2026 13:00:10 +0000
asID:                     274117
IP address blocks:        38.41.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fe:a0:74:0e:f8:04:b2:0a:e0:14:df:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: May 29 13:00:10 2026 GMT
            Not After : Aug 27 13:00:10 2026 GMT
        Subject: CN=e0bc24c0-54ff-45f3-8ec7-c39e045a24a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3a:89:3c:71:3d:a3:09:96:db:c0:b8:eb:a5:
                    86:2a:5d:e4:4d:43:2f:42:a0:68:2c:2a:08:e1:80:
                    27:6d:53:d6:ba:40:25:47:48:6e:3b:35:d9:9c:4d:
                    13:7f:b9:f7:eb:77:c2:14:88:c6:73:db:f4:e6:a8:
                    ce:e7:4e:6f:2c:d7:73:20:af:70:0b:c5:31:f5:36:
                    5c:7d:f8:46:a5:b7:72:48:ca:09:92:14:f6:c3:6b:
                    aa:ed:31:b7:95:ae:8b:38:5f:8a:4b:c8:0a:10:d1:
                    ad:04:60:f9:f9:d9:cd:1f:9d:e5:96:a2:ce:e1:b1:
                    a2:da:e2:b7:7c:1e:77:02:89:52:be:89:56:6a:05:
                    c3:08:67:d4:2f:6d:4e:68:02:e1:9b:8b:c6:b2:da:
                    b1:73:c2:96:1e:27:cc:40:62:e1:e0:88:d3:1c:2d:
                    36:c9:34:7b:0b:85:89:b9:6a:3c:84:c1:b6:e4:55:
                    34:c6:46:39:7c:4a:b2:bb:31:8d:af:02:fb:ed:64:
                    aa:41:40:09:6f:ff:34:e7:b4:5a:d7:a3:be:88:4d:
                    21:f7:2c:73:de:1a:3d:3d:6a:3b:ee:95:3d:49:e3:
                    eb:88:67:de:3a:78:a7:de:ab:e6:67:9e:25:4c:e5:
                    ac:40:27:26:45:23:1c:71:d7:3b:e0:f5:ca:60:df:
                    4b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:64:E2:A6:42:AC:5F:1E:F0:93:09:7C:9B:57:98:52:7C:D0:8C:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/dcf55144-e9e1-317f-ae55-f1762a157490.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.41.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:f6:46:eb:5e:f4:2b:e8:c1:c2:56:67:3b:b7:5c:5d:15:79:
         a4:52:0a:89:1c:8f:c5:f3:d6:a5:4c:fa:2e:1a:dd:15:15:d5:
         45:78:5e:13:0d:71:f3:fc:8e:72:50:6a:9c:e1:3c:03:40:bd:
         bc:19:2a:83:91:49:76:08:28:2c:a6:0a:7b:ab:74:f3:2b:f8:
         c7:81:a0:ea:b4:ae:65:3d:c5:1d:37:a4:05:b4:5c:06:d1:d2:
         6c:b1:23:17:5b:0b:c2:82:3e:26:d0:4a:ab:47:40:85:c2:b7:
         68:79:79:68:09:a7:b7:d1:c3:e5:8a:ab:60:58:7d:3a:34:00:
         b6:6b:24:58:8b:2f:b1:11:ef:b4:da:e9:53:cd:e6:bc:ee:38:
         98:c4:4d:ad:16:40:00:2e:61:5d:6b:22:75:66:3e:22:c3:06:
         5f:ea:49:3f:96:37:8e:90:65:56:55:c7:04:ea:33:58:68:3f:
         ec:c3:53:f1:76:0c:45:c2:24:ec:e4:c3:d3:75:69:03:65:fc:
         88:8a:6b:1f:4f:7a:aa:82:3b:cc:f0:54:06:8f:07:9f:70:b3:
         e6:40:72:7d:92:05:c5:c8:f0:e5:27:d3:55:11:fa:60:d1:1a:
         1c:9a:f4:e7:c0:40:11:a5:4c:99:3b:3e:a8:77:ff:fa:99:b8:
         c2:35:0b:69
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3+oHQO+ASyCuAU38AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDUyOTEzMDAxMFoXDTI2MDgyNzEzMDAxMFowLzEtMCsGA1UEAxMk
ZTBiYzI0YzAtNTRmZi00NWYzLThlYzctYzM5ZTA0NWEyNGEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDqJPHE9owmW28C466WGKl3kTUMvQqBoLCoI
4YAnbVPWukAlR0huOzXZnE0Tf7n363fCFIjGc9v05qjO505vLNdzIK9wC8Ux9TZc
ffhGpbdySMoJkhT2w2uq7TG3la6LOF+KS8gKENGtBGD5+dnNH53llqLO4bGi2uK3
fB53AolSvolWagXDCGfUL21OaALhm4vGstqxc8KWHifMQGLh4IjTHC02yTR7C4WJ
uWo8hMG25FU0xkY5fEqyuzGNrwL77WSqQUAJb/8057Ra16O+iE0h9yxz3ho9PWo7
7pU9SePriGfeOnin3qvmZ54lTOWsQCcmRSMccdc74PXKYN9LNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPJk4qZCrF8e8JMJfJtXmFJ80IyOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZGNmNTUxNDQtZTllMS0z
MTdmLWFlNTUtZjE3NjJhMTU3NDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJikwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK72Rute9CvowcJWZzu3XF0VeaRSCokcj8Xz1qVM+i4a3RUV1UV4XhMN
cfP8jnJQapzhPANAvbwZKoORSXYIKCymCnurdPMr+MeBoOq0rmU9xR03pAW0XAbR
0myxIxdbC8KCPibQSqtHQIXCt2h5eWgJp7fRw+WKq2BYfTo0ALZrJFiLL7ER77Ta
6VPN5rzuOJjETa0WQAAuYV1rInVmPiLDBl/qST+WN46QZVZVxwTqM1hoP+zDU/F2
DEXCJOzkw9N1aQNl/IiKax9PeqqCO8zwVAaPB59ws+ZAcn2SBcXI8OUn01UR+mDR
Ghya9OfAQBGlTJk7Pqh3//qZuMI1C2k=
-----END CERTIFICATE-----
Generated at Fri Jun 12 22:40:40 2026 by rpki-client