Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e107575b-aa38-3b02-afcd-3d1cc09459e6.roa
File:                     e107575b-aa38-3b02-afcd-3d1cc09459e6.roa (raw, json)
Hash identifier:          FwW6YGGbpGYeL6IUi6DoyVx7qT+TPbs8JD6/SAMqeeU=
Subject key identifier:   1F:2B:43:6E:EC:3A:B5:FC:6E:F3:61:90:06:7B:3E:10:A2:37:1F:2E
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584DA8156D438F1C0D2E8B4B8510
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e107575b-aa38-3b02-afcd-3d1cc09459e6.roa
Signing time:             Tue 28 Apr 2026 13:00:30 +0000
ROA not before:           Tue 28 Apr 2026 13:00:30 +0000
ROA not after:            Mon 27 Jul 2026 13:00:30 +0000
asID:                     265867
IP address blocks:        38.7.102.0/23 maxlen: 24
                          38.156.248.0/22 maxlen: 24
                          38.191.72.0/22 maxlen: 24
                          38.191.175.0/24 maxlen: 24
                          38.248.28.0/22 maxlen: 24
                          38.252.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a8:15:6d:43:8f:1c:0d:2e:8b:4b:85:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Apr 28 13:00:30 2026 GMT
            Not After : Jul 27 13:00:30 2026 GMT
        Subject: CN=c8a0ad7b-c132-42ba-8927-433d3688be71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:45:82:75:5a:0d:98:31:23:17:d7:f8:14:5a:
                    2e:f0:f9:8e:8d:2b:1b:36:8a:83:e4:21:bc:d4:23:
                    e7:bd:5b:13:b2:c7:76:45:36:63:20:5b:91:db:ac:
                    9a:9f:fe:d6:49:59:ee:7b:c8:71:fa:d0:d7:ab:47:
                    67:d6:74:9f:c6:9e:75:95:f4:45:c4:24:1b:c4:3e:
                    b7:de:83:40:5d:44:5f:b6:81:8e:a8:12:26:d8:28:
                    25:1f:b2:ea:af:d6:dd:6b:b4:4e:c7:46:a6:f3:76:
                    0e:48:da:92:4b:e6:3c:5c:5f:f8:54:b0:92:af:00:
                    54:2a:9c:f8:0c:7b:60:4a:c5:5e:65:f3:62:fe:22:
                    41:a9:22:24:a0:41:06:45:be:ef:c9:ba:80:e1:3c:
                    04:16:f9:f3:07:85:4f:34:59:0a:d9:e8:2d:f2:cf:
                    86:af:87:2a:fa:5e:fb:21:00:43:ad:6f:b1:99:3c:
                    f8:bb:92:73:85:e9:16:78:ae:d8:55:30:90:29:72:
                    5d:18:f2:77:e1:71:f4:2c:6f:4b:17:b3:c4:3e:ff:
                    df:8b:f5:bd:67:f0:c2:76:19:bc:fe:7c:de:76:96:
                    71:83:0d:fb:e2:5b:87:e4:87:33:51:5c:39:14:5f:
                    de:d2:51:d7:8d:12:de:69:de:19:af:29:c2:e7:13:
                    1a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:2B:43:6E:EC:3A:B5:FC:6E:F3:61:90:06:7B:3E:10:A2:37:1F:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e107575b-aa38-3b02-afcd-3d1cc09459e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.7.102.0/23
                  38.156.248.0/22
                  38.191.72.0/22
                  38.191.175.0/24
                  38.248.28.0/22
                  38.252.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:53:63:c7:25:07:50:c8:22:6e:b8:28:a2:ed:4d:e4:e0:82:
         4a:3b:51:0c:78:25:a8:05:88:92:3a:5c:6b:f3:87:08:06:1b:
         d6:80:fa:5e:1d:b0:33:cd:73:78:e6:dc:5c:b6:72:d0:5c:8e:
         25:ce:12:e5:5e:ad:c2:fa:f9:cb:c3:2b:ac:5b:df:39:dd:a1:
         0e:db:62:6a:5c:8e:c0:31:7b:56:e1:97:e3:d2:9a:2b:e2:a8:
         bf:63:cf:a6:e6:bb:57:a4:88:a7:c6:e0:58:28:e4:74:36:21:
         63:b4:76:57:2f:6c:29:30:d8:20:34:47:2c:c2:0b:03:bb:01:
         d4:24:e5:aa:26:da:9c:71:7a:52:df:32:98:bd:89:ed:78:0e:
         c2:59:d2:0d:d3:85:93:11:13:39:ac:96:f5:5b:be:b6:a6:14:
         5d:c8:6f:11:3c:79:36:67:ef:86:9c:11:7e:4c:bb:5c:38:76:
         6a:b4:be:fd:75:a1:69:e6:bf:11:85:1a:93:64:dc:0d:80:51:
         6e:8c:82:ae:ef:f0:3d:71:be:ef:8f:7a:9a:f7:12:15:bb:7a:
         b0:95:5f:02:91:7b:ea:26:ad:a9:9d:17:b8:27:05:e8:0b:bf:
         c8:10:e3:94:e0:6b:72:4c:10:6c:13:ef:86:8d:58:18:15:a1:
         59:31:0e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 21:12:47 2026 by rpki-client