Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f78c02c4-77e7-344b-92b6-85a4ac10591c.roa
File:                     f78c02c4-77e7-344b-92b6-85a4ac10591c.roa (raw, json)
Hash identifier:          KrCHBoZbl5m/GrFUtKZVPOr0TVQA4MiApXCuI5n0Kvk=
Subject key identifier:   29:5A:7C:9C:72:66:CF:A4:8E:63:64:91:18:C4:D1:36:94:DB:D5:CC
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584EB9AC51225315C38C79588700
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f78c02c4-77e7-344b-92b6-85a4ac10591c.roa
Signing time:             Tue 04 Aug 2026 13:00:12 +0000
ROA not before:           Tue 04 Aug 2026 13:00:12 +0000
ROA not after:            Mon 02 Nov 2026 14:00:12 +0000
asID:                     28398
IP address blocks:        38.7.16.0/21 maxlen: 24
                          206.85.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b9:ac:51:22:53:15:c3:8c:79:58:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Aug  4 13:00:12 2026 GMT
            Not After : Nov  2 14:00:12 2026 GMT
        Subject: CN=bbe68c2f-84e7-4d93-b452-eec136d2ea22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:22:79:65:18:f1:33:32:e9:8f:61:32:61:ad:
                    50:e2:4e:f7:4b:e4:1a:76:71:31:0f:64:69:39:74:
                    db:75:99:6d:2a:b7:63:66:dc:bf:33:42:71:61:80:
                    1c:02:f6:2a:43:aa:92:46:f5:4c:40:b8:73:d4:7d:
                    d6:3a:d6:e2:28:51:c8:00:dd:9d:ed:d4:81:b9:12:
                    f8:0a:ef:d4:75:3f:70:04:92:2f:9b:42:c4:3e:1d:
                    49:68:2c:8b:98:44:dc:54:7e:a7:46:db:4c:95:37:
                    a2:bc:ee:0f:b3:6a:97:ae:9c:e8:43:89:42:63:48:
                    d5:4c:a0:ef:05:2f:6e:1a:a3:37:47:86:00:8f:bc:
                    21:42:5d:46:95:3e:44:a3:94:00:a2:09:df:de:41:
                    24:fd:51:e2:eb:c2:3a:fe:14:f9:3c:17:28:ef:94:
                    fc:b1:bf:2f:9c:ca:bd:8c:4f:cb:76:f3:be:35:70:
                    2d:ca:25:a3:6d:de:f2:2d:87:e1:07:24:3e:5c:da:
                    e0:23:4f:3a:7b:e6:9a:34:55:02:96:77:0a:18:94:
                    fe:a4:7d:b6:50:30:03:4f:6b:c8:b7:f9:1c:ff:b5:
                    21:8a:c9:c0:6a:59:14:e6:38:e1:b1:28:42:20:4d:
                    76:9b:44:e9:63:36:9e:b4:dc:25:c5:03:cb:ad:5a:
                    cd:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:5A:7C:9C:72:66:CF:A4:8E:63:64:91:18:C4:D1:36:94:DB:D5:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f78c02c4-77e7-344b-92b6-85a4ac10591c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.7.16.0/21
                  206.85.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:0f:a9:4a:2e:88:96:16:ba:25:b2:f5:b6:99:04:53:0e:5a:
         4a:f0:8b:50:8c:26:ce:d6:5d:ba:dd:02:3c:c7:e7:22:ef:c5:
         9c:55:ee:66:40:83:cc:a8:ff:79:10:c8:dd:ef:b1:9c:20:14:
         98:74:e9:70:77:24:ba:4a:6c:14:e0:29:6e:5c:64:02:e6:2d:
         74:25:97:9d:b5:44:7a:0a:9a:3e:ef:25:42:c2:3c:42:13:73:
         33:21:93:ec:02:4a:01:b7:7d:55:f9:98:46:c3:86:6a:09:de:
         58:df:ad:a1:ca:47:3f:f1:73:b7:2e:96:e8:df:61:79:a4:69:
         13:2d:bb:7a:3d:95:af:69:f0:db:34:e9:cc:eb:1e:8c:98:00:
         0b:1d:a7:07:cd:ba:84:28:6c:91:3a:05:bb:f2:24:9c:d5:f9:
         08:30:47:69:4d:ec:d6:0c:e9:c8:aa:d7:2b:12:c0:f3:90:b5:
         92:24:47:6a:3c:44:0d:dc:6f:07:3d:c4:76:23:58:4f:be:d3:
         04:37:aa:ee:18:ca:66:8e:ce:83:06:c9:97:41:b1:89:77:76:
         b9:11:2e:1d:54:d5:49:5c:e3:63:dc:f7:23:c6:e7:a5:7d:ae:
         bf:ed:65:f2:2a:df:da:3f:5a:6a:b1:48:c5:81:f3:c2:2e:47:
         18:1a:04:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:30:58 2026 by rpki-client