Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e0ab1069-7dbc-3f59-9a8d-f4dfb54adcbf.roa
File:                     e0ab1069-7dbc-3f59-9a8d-f4dfb54adcbf.roa (raw, json)
Hash identifier:          5IqHCPNpcvq4RmlP2akyx3bVrS7aAeY/QQLkzGBflFc=
Subject key identifier:   C2:4B:E4:27:90:D3:D7:EE:6F:31:4E:1A:BD:B6:A0:12:B8:93:38:B3
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584DFCCB9DD6A21AE7249D2F9D00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e0ab1069-7dbc-3f59-9a8d-f4dfb54adcbf.roa
Signing time:             Thu 28 May 2026 21:15:32 +0000
ROA not before:           Thu 28 May 2026 21:15:32 +0000
ROA not after:            Wed 26 Aug 2026 21:15:32 +0000
asID:                     13692
IP address blocks:        38.77.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 03 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fc:cb:9d:d6:a2:1a:e7:24:9d:2f:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: May 28 21:15:32 2026 GMT
            Not After : Aug 26 21:15:32 2026 GMT
        Subject: CN=c3761053-4901-44f7-bf8b-14a38d555e92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:67:f0:ac:e7:a4:04:80:a6:3b:52:88:aa:6e:
                    13:15:48:6e:59:4f:7e:9d:84:5a:d1:53:5b:78:99:
                    df:29:02:36:84:d7:51:7d:c6:d7:bf:45:8c:12:e6:
                    dc:19:00:e7:ca:83:22:9c:7a:13:0a:a4:b0:16:b7:
                    66:ea:72:36:b1:1e:82:49:19:5a:a2:9e:51:75:c6:
                    6c:6c:c0:5b:e8:a1:fb:b0:c5:c1:d5:e3:0a:13:67:
                    3a:fe:3e:0b:5a:44:e0:c4:86:5a:27:77:9e:65:71:
                    84:82:ab:de:02:94:67:19:c7:3f:9b:8d:81:ce:47:
                    29:1a:f8:a9:46:93:7f:dc:32:f1:f4:4c:03:a9:46:
                    f5:73:f8:27:a6:e4:cc:65:a5:7b:78:65:38:16:6a:
                    a4:9e:ec:04:d3:6a:83:95:82:b9:08:0d:6d:8a:65:
                    de:18:fd:ed:fa:c1:09:66:66:a5:f6:50:0e:2d:f8:
                    6a:3a:2d:f9:ab:f2:e0:71:ea:6d:8e:4c:f6:1d:5f:
                    ef:1e:c0:cd:b9:08:78:b4:35:67:2d:a1:22:1e:c4:
                    6a:77:1d:46:c3:10:d4:82:ff:fb:f2:31:6a:01:6f:
                    b4:03:ec:55:91:c8:e8:37:e7:7f:42:58:e1:ad:71:
                    05:92:37:13:4e:ba:5c:1f:86:ce:6e:e6:c9:af:37:
                    f1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:4B:E4:27:90:D3:D7:EE:6F:31:4E:1A:BD:B6:A0:12:B8:93:38:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e0ab1069-7dbc-3f59-9a8d-f4dfb54adcbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.77.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:0e:1c:ae:c6:c7:56:0c:74:9b:48:f8:12:77:93:5c:e0:83:
         70:a7:ae:e1:0f:22:0c:73:f9:a4:3f:4c:44:c4:b0:b3:60:e5:
         a3:1d:9c:8c:46:70:69:ed:f6:5e:f0:56:79:d1:d1:64:47:28:
         49:af:02:32:78:7f:0f:6c:db:33:0d:bf:9b:b8:9d:9c:ba:f7:
         c2:6b:b9:8d:78:8a:64:a2:55:f3:8f:8d:92:8b:90:42:ec:b5:
         5f:5d:04:b8:72:5f:8e:eb:88:4b:b3:0c:3f:75:33:6d:99:a4:
         31:5e:72:e0:54:a9:05:0f:eb:0d:57:dc:6e:98:a9:24:80:55:
         a3:1d:d5:f9:e4:11:46:e1:4a:5c:6b:4e:ae:88:4c:fe:de:b8:
         9a:8f:3d:64:77:0b:5e:e1:be:cb:ba:06:f4:26:2c:a6:38:a1:
         39:a4:b5:77:f4:25:52:69:fe:87:8f:e7:b9:d5:f7:12:13:90:
         fd:52:0c:ab:dc:4e:e2:5d:dd:d6:4e:5a:16:94:46:6a:63:2d:
         3a:4a:f4:29:3f:1b:a4:a3:d9:66:40:a2:c4:7d:f7:7b:8d:9d:
         56:dc:2a:c2:4f:ea:08:ba:7e:a0:41:a9:45:16:9f:a0:82:f8:
         22:b1:89:a6:57:f0:0e:08:b6:69:6f:15:53:b6:80:de:3f:4e:
         2a:92:59:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 1 23:11:41 2026 by rpki-client