Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ef88f90c-766d-37b0-b41c-2156fd863745.roa
File:                     ef88f90c-766d-37b0-b41c-2156fd863745.roa (raw, json)
Hash identifier:          5ZvG2VF/rcs+aRnCeY8HOEEFpgYdsepBzZvwe1EWr2c=
Subject key identifier:   CC:A1:DE:91:7E:66:8E:62:B2:1A:3C:11:C0:6A:E7:40:74:9C:EE:71
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F5B9805265C3AF8A5D38DDEB0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ef88f90c-766d-37b0-b41c-2156fd863745.roa
Signing time:             Thu 01 Oct 2026 13:00:12 +0000
ROA not before:           Thu 01 Oct 2026 13:00:12 +0000
ROA not after:            Wed 30 Dec 2026 14:00:12 +0000
asID:                     265622
IP address blocks:        38.156.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5b:98:05:26:5c:3a:f8:a5:d3:8d:de:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct  1 13:00:12 2026 GMT
            Not After : Dec 30 14:00:12 2026 GMT
        Subject: CN=12949409-1823-4dd5-98cf-d8e2a382ea90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:94:9d:f6:fe:a7:7f:f3:b4:bb:31:3a:f6:85:
                    f6:15:79:7b:69:b0:88:bd:7c:59:1b:8c:e6:13:7f:
                    04:88:9b:42:f2:e9:a1:a3:37:75:79:42:96:30:6f:
                    5a:ac:fa:cb:be:01:c8:33:4d:fd:64:87:1d:b7:91:
                    88:6a:e7:1c:9e:d0:1a:8f:2d:32:3d:a1:f6:a6:b8:
                    75:a9:df:54:e4:92:bc:69:4f:61:27:67:16:81:97:
                    c6:be:88:04:32:35:cf:2b:3c:3a:9a:51:a2:7c:cc:
                    b5:bb:76:78:49:ea:ba:06:cb:e7:e9:53:72:ec:5d:
                    a4:26:3e:c8:68:9e:62:d7:35:d7:74:f0:f5:0f:8c:
                    e4:26:7d:ea:e9:63:f6:ed:9d:66:26:9b:e2:11:11:
                    41:c7:32:7e:93:66:24:37:fc:f9:98:3f:6b:23:62:
                    04:dc:fa:02:16:20:80:eb:07:0d:49:6b:cb:20:7d:
                    0a:6f:0f:bb:07:58:b1:1e:3e:ec:36:a8:e7:fd:aa:
                    73:6d:1d:82:51:b7:67:1e:e9:f7:31:1d:90:3c:da:
                    be:67:65:b9:7b:69:d4:67:4d:85:98:22:78:35:03:
                    32:8f:27:9f:0a:c6:7f:0a:d2:ef:c2:5c:2e:06:d5:
                    f8:a6:76:5c:27:e7:93:10:3e:05:c4:cd:79:10:ca:
                    30:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:A1:DE:91:7E:66:8E:62:B2:1A:3C:11:C0:6A:E7:40:74:9C:EE:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ef88f90c-766d-37b0-b41c-2156fd863745.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.156.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:59:ee:df:b6:71:b1:79:a5:64:86:d4:58:cf:13:35:5d:28:
         e1:ae:3c:8c:f0:06:4e:a1:76:32:6f:33:4c:ef:91:c0:9b:eb:
         18:7d:4c:91:76:d3:cd:2a:21:bf:23:44:8a:a0:9e:db:a9:69:
         eb:c6:db:e5:b0:fa:55:07:a3:60:a8:a0:59:6e:0f:83:8e:f7:
         52:28:a1:59:fd:19:14:ce:27:e8:73:18:5e:55:c3:75:10:6e:
         dd:92:24:4a:c6:05:e6:c1:ee:03:6b:7b:63:4b:82:67:e0:f9:
         ed:4b:89:21:22:42:48:9d:d2:e9:64:a3:33:3a:ec:22:dc:8c:
         f5:a0:50:07:70:c1:b3:76:43:cb:6e:09:11:36:0c:ba:e9:4f:
         5a:42:e2:b3:ee:47:d2:29:3f:e3:4e:af:18:f0:58:c3:9a:af:
         f2:b3:e2:78:cc:74:85:9e:8a:1c:bc:a6:a3:ec:3c:ac:6d:99:
         12:1b:42:d4:55:a7:a0:58:c5:f8:28:53:12:be:fe:99:dc:18:
         0e:16:a9:37:99:4c:43:a2:a3:17:24:1b:11:2d:bc:8f:12:18:
         b8:2f:e5:41:b0:bc:60:ea:cd:66:a7:f9:66:aa:c0:98:2e:28:
         42:e7:37:0b:9c:4d:96:76:5f:0f:85:1d:3b:df:76:a5:b8:a9:
         e3:d6:16:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:39:39 2026 by rpki-client