Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f11b79b8-c606-3c0a-8fbb-896d1c926128.roa
File:                     f11b79b8-c606-3c0a-8fbb-896d1c926128.roa (raw, json)
Hash identifier:          HAu29tIK2GmoIGPFjPE40Jl44jy17XKpCutsHLNFKXU=
Subject key identifier:   1D:74:D8:C8:DE:D4:01:F1:15:25:62:AE:74:CD:4F:7B:69:BB:E0:AC
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F6C58375B5ADEA04F16F7D4C0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f11b79b8-c606-3c0a-8fbb-896d1c926128.roa
Signing time:             Wed 07 Oct 2026 13:00:13 +0000
ROA not before:           Wed 07 Oct 2026 13:00:13 +0000
ROA not after:            Tue 05 Jan 2027 14:00:13 +0000
asID:                     27729
IP address blocks:        38.46.244.0/22 maxlen: 24
                          38.225.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6c:58:37:5b:5a:de:a0:4f:16:f7:d4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct  7 13:00:13 2026 GMT
            Not After : Jan  5 14:00:13 2027 GMT
        Subject: CN=472f8714-8cf6-4d48-9a62-f775eb7b0666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:18:5a:01:09:46:47:62:1c:5f:7b:e9:c2:56:
                    55:07:cf:c7:cc:53:ef:47:c4:27:c1:e2:b8:85:88:
                    8a:9c:b2:ca:bb:2b:1f:87:98:40:d9:3c:90:90:57:
                    71:38:9b:ab:7b:c3:3f:00:74:7e:7a:d2:cf:2e:23:
                    69:38:91:71:bc:a5:a6:98:93:a1:26:0a:a7:cd:d7:
                    46:f2:de:84:27:2a:05:51:b9:37:64:3d:80:df:75:
                    a8:1b:e2:d1:35:37:fa:d7:6f:10:ec:00:24:31:ce:
                    da:35:df:10:76:f8:df:bb:7f:44:b8:df:5f:1a:9c:
                    16:e6:11:d6:fe:3c:ab:0e:12:03:70:e8:49:91:ca:
                    ca:1a:7f:7d:92:05:4c:07:c7:d9:fb:c4:69:29:0d:
                    47:1e:c8:93:38:ab:64:d2:ca:41:09:50:5a:39:a6:
                    9f:b6:fc:1b:50:cd:38:44:b6:aa:8d:82:27:27:87:
                    2a:6d:18:fe:3a:7d:43:f4:14:29:c4:e2:36:d3:16:
                    5a:aa:76:07:c1:af:68:ec:fc:eb:45:4f:13:1e:9c:
                    8e:2f:64:35:eb:74:0a:a2:91:7c:48:23:fe:c9:79:
                    42:5a:4a:60:c4:ea:44:1c:ae:c3:ec:53:9a:b6:db:
                    ee:d0:d0:d9:23:33:3f:51:f4:34:59:8c:3f:67:18:
                    32:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:74:D8:C8:DE:D4:01:F1:15:25:62:AE:74:CD:4F:7B:69:BB:E0:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f11b79b8-c606-3c0a-8fbb-896d1c926128.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.46.244.0/22
                  38.225.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:b6:ed:7c:3c:3a:61:70:00:ed:35:67:57:f7:ac:ee:a9:79:
         fe:55:00:b5:6c:48:41:2e:a8:ab:b3:b0:f4:cc:09:2c:49:ec:
         b3:ac:b0:bb:1a:88:a6:53:8c:e9:38:cd:56:37:4b:1f:7c:57:
         dd:53:05:6d:69:c9:d3:b1:9c:e9:20:2f:66:03:f2:19:5b:fa:
         78:7d:08:66:b1:79:de:6b:7c:ff:bf:a4:12:b7:63:28:9b:07:
         8f:08:eb:24:e4:57:aa:98:33:09:87:63:c8:1b:31:d8:24:41:
         2e:a7:97:3c:bd:9f:cc:41:ae:17:d0:4d:94:83:5b:5d:86:cb:
         46:6e:3f:cb:6e:e0:90:5e:10:71:5c:24:7c:c5:da:bd:32:3e:
         63:69:6c:74:8a:02:e0:78:bf:41:1c:43:00:fb:ad:01:23:57:
         b9:c4:0e:fc:aa:3c:1d:06:b4:69:a2:62:0d:26:2e:c6:eb:cb:
         4c:8f:68:08:e8:5f:34:40:89:62:39:4c:60:0d:3e:8a:20:b4:
         cd:0f:d8:26:00:1c:56:bf:18:74:fb:60:d7:79:da:27:5f:fe:
         d2:62:8e:78:9e:9b:92:fb:2e:77:9b:7c:e9:37:dc:3a:c6:74:
         1b:85:5e:0a:fc:e5:20:03:9a:f9:32:61:7e:20:38:40:11:db:
         4a:72:2b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 13:27:55 2026 by rpki-client