Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ea923b5f-bf75-3bac-8b99-435b272251c2.roa
File:                     ea923b5f-bf75-3bac-8b99-435b272251c2.roa (raw, json)
Hash identifier:          Fcw0v0gHd03+Q8XK4VtuQlVKQBwQZqCz2x0fCeP0LsI=
Subject key identifier:   63:88:54:BA:0C:8C:74:D3:32:87:69:23:82:37:7A:C1:64:FD:4F:BC
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E1A144B6C9F6E23C1A3A1F080
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ea923b5f-bf75-3bac-8b99-435b272251c2.roa
Signing time:             Mon 08 Jun 2026 09:00:12 +0000
ROA not before:           Mon 08 Jun 2026 09:00:12 +0000
ROA not after:            Sun 06 Sep 2026 09:00:12 +0000
asID:                     205634
IP address blocks:        38.147.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1a:14:4b:6c:9f:6e:23:c1:a3:a1:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jun  8 09:00:12 2026 GMT
            Not After : Sep  6 09:00:12 2026 GMT
        Subject: CN=b0507011-27e5-4bd9-b2c9-0a614dbf530a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:15:23:ae:04:12:59:d4:7c:c1:be:ed:e1:56:
                    38:3a:1c:1e:b4:60:40:08:e2:bc:ab:94:86:82:6b:
                    bd:e0:7e:20:3c:2d:c3:2f:50:0a:af:0a:56:34:f5:
                    70:ae:11:fb:b3:f7:8a:14:ad:37:c4:24:2f:5f:83:
                    34:fc:73:13:4a:50:bd:33:9a:6c:7b:2c:09:fe:a9:
                    f0:fe:39:3e:e1:66:0f:50:e1:6d:73:8e:9b:fa:e8:
                    cf:89:fc:ae:8f:a5:60:7f:10:4b:00:e9:92:23:08:
                    41:2b:c1:10:af:0e:f9:b9:c1:16:ad:06:dc:58:d9:
                    ab:72:9d:86:e4:34:e1:0f:cb:5d:ec:f7:d5:fe:38:
                    59:43:f7:ea:84:2d:b8:3d:08:ae:df:e7:9d:eb:c1:
                    ec:3d:4e:0b:f2:3f:c8:01:4c:e3:d5:18:ad:6e:3e:
                    8b:1f:f8:78:be:bc:28:f8:29:be:dd:54:c9:7b:63:
                    b3:e2:c2:04:a1:06:cc:c6:3f:00:69:ba:43:bf:b5:
                    70:7b:ea:12:32:4e:0b:77:99:8a:fb:64:a8:1a:e4:
                    ab:84:5f:bb:92:0e:aa:f1:30:b5:47:a7:a4:ab:73:
                    52:ae:5f:0f:7d:53:5b:a9:01:8c:c2:3c:f6:ac:d2:
                    70:ad:96:88:63:bd:c2:bb:f8:04:04:67:48:df:d5:
                    fd:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:88:54:BA:0C:8C:74:D3:32:87:69:23:82:37:7A:C1:64:FD:4F:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ea923b5f-bf75-3bac-8b99-435b272251c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.147.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:c7:80:9f:48:8e:d1:49:5d:52:6c:01:c5:7f:e7:1f:36:80:
         24:c6:82:74:b0:74:f7:dd:5f:06:b2:5a:0a:30:89:18:c3:43:
         62:97:bb:48:b1:ca:c1:ff:80:09:6e:dc:05:25:18:e4:d1:e8:
         1a:e0:32:5b:df:38:80:38:bd:8f:9a:e1:3c:03:f6:1b:01:4b:
         a0:6b:7a:09:0f:18:d7:ed:25:61:93:50:c2:e6:a2:15:8b:36:
         3a:ea:bc:24:54:f8:1f:46:a8:de:af:00:26:e2:5e:76:e1:7c:
         a6:7e:8a:02:60:3a:f1:00:53:a4:fb:26:f7:c6:63:f1:bf:4e:
         7f:31:3e:65:0b:48:b2:35:d2:88:c6:94:6e:d3:80:0e:29:16:
         96:d0:3d:d4:a4:4a:1e:87:fe:94:79:60:44:7e:80:1b:a3:65:
         37:ab:85:b3:7e:1c:08:27:e1:41:cc:38:a1:6e:32:4f:7a:f0:
         04:ee:70:77:b2:de:45:3e:46:72:53:49:80:3c:25:bd:b5:30:
         28:c7:01:af:c7:ab:94:43:e6:59:47:7a:bc:37:87:42:66:12:
         88:50:19:31:2f:15:4e:70:37:69:05:4f:70:2b:24:a5:e8:6d:
         44:6e:52:1d:74:ea:78:dc:08:2c:9f:4a:1c:c8:de:1f:de:a0:
         c5:38:a7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 22:37:32 2026 by rpki-client