Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f7a010ba-2b82-36c5-bf81-9a282f332ce5.roa
File:                     f7a010ba-2b82-36c5-bf81-9a282f332ce5.roa (raw, json)
Hash identifier:          DcfOdu0LtQEXoNtHqfwL+nXHxEqfqP8WbOVMW59f7Nk=
Subject key identifier:   A4:24:E3:02:CD:77:0A:AF:B4:F5:89:D4:02:51:16:64:1D:62:09:BD
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584EB8476AEAD38BC743701D9280
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f7a010ba-2b82-36c5-bf81-9a282f332ce5.roa
Signing time:             Tue 04 Aug 2026 01:00:12 +0000
ROA not before:           Tue 04 Aug 2026 01:00:12 +0000
ROA not after:            Mon 02 Nov 2026 02:00:12 +0000
asID:                     400618
IP address blocks:        38.47.192.0/18 maxlen: 24
                          38.181.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b8:47:6a:ea:d3:8b:c7:43:70:1d:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Aug  4 01:00:12 2026 GMT
            Not After : Nov  2 02:00:12 2026 GMT
        Subject: CN=322200b9-13ce-4b28-8c4b-cc2edd7fd0ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:28:f5:09:a7:1c:de:5a:2c:98:46:4e:e5:3a:
                    cc:af:6b:eb:31:9f:85:13:61:d0:91:16:30:39:7e:
                    02:f6:c3:f5:90:ae:ce:ac:db:28:05:0b:f2:3f:f5:
                    32:49:88:50:6e:66:fd:0c:34:46:99:34:bd:32:53:
                    f8:a2:d0:03:21:c5:09:f1:60:62:ca:02:12:94:92:
                    de:90:42:68:a0:4b:f2:8b:f8:38:38:f6:95:6b:a4:
                    e8:e5:c2:87:3b:c8:61:b6:94:c9:1f:96:27:ce:7d:
                    a2:08:9e:82:38:69:92:ef:3d:e4:b0:99:9a:0b:2d:
                    5b:b2:e6:f2:20:1d:c4:78:c7:49:24:10:d6:05:a5:
                    11:14:b2:67:a6:a6:e9:dc:38:3d:e2:a3:ef:96:95:
                    bc:fd:d2:48:8c:d8:9b:67:49:32:ec:86:32:e5:de:
                    f0:61:ea:a7:a1:20:48:18:a2:1d:eb:93:16:a4:f9:
                    0f:3b:9b:92:ad:da:5a:fe:9a:07:1c:d1:3f:bf:3f:
                    5e:ee:bb:da:ae:46:56:04:38:27:0f:5a:60:72:e6:
                    37:f7:01:4f:9b:9e:40:4f:5e:ad:9b:5f:d1:ec:fd:
                    80:b8:3b:f2:33:48:d4:32:35:81:2a:13:40:09:bd:
                    9e:5a:e2:4e:41:8b:62:0a:c1:7d:02:3d:09:4e:fc:
                    49:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:24:E3:02:CD:77:0A:AF:B4:F5:89:D4:02:51:16:64:1D:62:09:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f7a010ba-2b82-36c5-bf81-9a282f332ce5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.47.192.0/18
                  38.181.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:be:e9:be:2e:82:c9:c7:ad:f8:40:b8:15:d1:f0:e2:05:ec:
         54:05:91:7d:23:0f:71:4e:67:93:d7:b8:3a:5b:d0:97:b2:cd:
         ee:f5:64:f6:ca:7a:48:1e:3e:d5:e3:5a:28:ce:2e:99:f0:b2:
         9d:61:36:57:7d:6f:7f:06:41:2f:08:93:6d:65:ec:eb:25:47:
         ac:d5:4d:9d:fa:38:d3:54:c5:ae:d9:84:fc:f4:17:2a:2e:6f:
         e3:1d:be:77:d7:52:bc:5d:cb:c6:8b:b5:c4:0b:11:ee:bc:2b:
         56:83:62:dd:0b:b6:6f:64:79:2e:cb:c6:4f:5c:76:75:34:d7:
         6c:f5:e8:e3:d0:0d:a7:c0:c1:4f:08:39:8c:5b:b9:3d:43:8f:
         bb:23:8f:f1:c3:eb:95:4b:99:e5:19:c1:43:f9:dc:d6:f9:61:
         8d:c7:13:bd:f1:e9:ff:2c:12:eb:64:b8:95:3e:6a:a9:62:0f:
         35:24:08:d7:57:7e:00:4f:25:05:e5:96:cd:1a:ab:f7:a1:66:
         09:27:34:ec:4b:f0:11:73:fc:a7:e4:e6:e0:47:96:98:1f:e8:
         1e:e3:26:68:0c:47:6a:ca:e2:ef:13:4b:83:0d:1e:3d:d0:4c:
         d9:70:1d:e3:67:94:43:48:88:0e:a9:69:f2:2a:53:18:b3:b1:
         d0:4a:10:70
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE64R2rq04vHQ3AdkoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDgwNDAxMDAxMloXDTI2MTEwMjAyMDAxMlowLzEtMCsGA1UEAxMk
MzIyMjAwYjktMTNjZS00YjI4LThjNGItY2MyZWRkN2ZkMGVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yj1Cacc3losmEZO5TrMr2vrMZ+FE2HQkRYw
OX4C9sP1kK7OrNsoBQvyP/UySYhQbmb9DDRGmTS9MlP4otADIcUJ8WBiygISlJLe
kEJooEvyi/g4OPaVa6To5cKHO8hhtpTJH5Ynzn2iCJ6COGmS7z3ksJmaCy1bsuby
IB3EeMdJJBDWBaURFLJnpqbp3Dg94qPvlpW8/dJIjNibZ0ky7IYy5d7wYeqnoSBI
GKId65MWpPkPO5uSrdpa/poHHNE/vz9e7rvarkZWBDgnD1pgcuY39wFPm55AT16t
m1/R7P2AuDvyM0jUMjWBKhNACb2eWuJOQYtiCsF9Aj0JTvxJeQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFKQk4wLNdwqvtPWJ1AJRFmQdYgm9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZjdhMDEwYmEtMmI4Mi0z
NmM1LWJmODEtOWEyODJmMzMyY2U1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQGJi/AAwQG
JrUAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAGK+6b4ugsnHrfhAuBXR8OIF7FQFkX0jD3FOZ5PXuDpb0Jey
ze71ZPbKekgePtXjWijOLpnwsp1hNld9b38GQS8Ik21l7OslR6zVTZ36ONNUxa7Z
hPz0Fyoub+MdvnfXUrxdy8aLtcQLEe68K1aDYt0Ltm9keS7Lxk9cdnU012z16OPQ
DafAwU8IOYxbuT1Dj7sjj/HD65VLmeUZwUP53Nb5YY3HE73x6f8sEutkuJU+aqli
DzUkCNdXfgBPJQXlls0aq/ehZgknNOxL8BFz/Kfk5uBHlpgf6B7jJmgMR2rK4u8T
S4MNHj3QTNlwHeNnlENIiA6pafIqUxizsdBKEHA=
-----END CERTIFICATE-----
Generated at Sat Sep 5 04:56:51 2026 by rpki-client