Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/78d64f9d-a439-3c6f-b61a-0b52a08b3eb5.roa
File:                     78d64f9d-a439-3c6f-b61a-0b52a08b3eb5.roa (raw, json)
Hash identifier:          lG1KZ649lCrym8aTNgAwPESIiLvfJVOwXc52r0DICkc=
Subject key identifier:   6D:39:4E:73:1D:AE:07:74:54:97:55:10:3D:3E:F1:44:99:34:18:12
Certificate issuer:       /CN=b7c805d5-58a4-453e-b16e-c677ccb6b46d
Certificate serial:       010D0C9F4328584EE0C20B439FC5D68EEFCECC80
Authority key identifier: C1:06:A2:F8:0D:B3:B7:93:4C:72:3B:1F:70:2A:B4:8F:48:52:AF:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/78d64f9d-a439-3c6f-b61a-0b52a08b3eb5.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     395347
IP address blocks:        138.43.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/b7c805d5-58a4-453e-b16e-c677ccb6b46d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/b7c805d5-58a4-453e-b16e-c677ccb6b46d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c2:0b:43:9f:c5:d6:8e:ef:ce:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7c805d5-58a4-453e-b16e-c677ccb6b46d
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=d6038bff-84c1-4f63-804b-c6c98765b48f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8f:f5:36:2f:66:f4:c0:0f:44:da:58:2f:62:
                    1f:91:d2:e6:dd:ae:e3:ab:9b:1f:a5:7e:41:4a:6c:
                    11:46:cb:24:86:46:84:a5:8d:48:1e:9b:de:2f:01:
                    76:97:7a:f6:d9:91:e5:8c:d4:d9:cc:4d:3e:a5:2f:
                    70:51:06:3a:08:5b:84:90:a9:8b:3f:23:3e:9e:75:
                    3b:92:b7:7a:a5:e3:55:6d:29:9f:94:98:05:cc:70:
                    e4:2b:2e:20:fa:93:9d:65:df:19:14:87:ef:ec:a0:
                    56:21:50:30:7b:a2:2c:c9:0e:5d:d6:72:70:c0:70:
                    29:26:f8:1a:2e:86:9f:0c:2d:fe:96:f4:69:e6:f1:
                    92:e2:02:69:6b:a5:44:b6:30:42:e1:fc:6e:b0:52:
                    6b:9f:26:a1:fb:48:0a:b8:6c:e6:21:21:68:15:6e:
                    12:e6:7d:3a:eb:24:d3:e4:8f:27:95:81:7f:cc:6a:
                    c6:53:2f:37:aa:d4:7f:7f:9b:dd:fc:4b:3d:75:5d:
                    3a:69:a1:86:a3:78:f1:45:9b:1b:e3:8e:6a:e2:43:
                    f0:98:f3:ed:67:cf:a5:fe:f2:74:60:cd:46:49:b8:
                    eb:af:ac:d8:a8:da:a1:7d:6a:fc:87:83:2e:4b:32:
                    a1:f0:46:a8:94:fd:3c:2b:91:ed:19:f9:bd:cb:b9:
                    8f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:39:4E:73:1D:AE:07:74:54:97:55:10:3D:3E:F1:44:99:34:18:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/78d64f9d-a439-3c6f-b61a-0b52a08b3eb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/b7c805d5-58a4-453e-b16e-c677ccb6b46d.crl

            X509v3 Authority Key Identifier:
                keyid:C1:06:A2:F8:0D:B3:B7:93:4C:72:3B:1F:70:2A:B4:8F:48:52:AF:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.43.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:e7:08:03:a8:40:2a:82:ec:6c:6d:82:dd:ec:f6:9e:79:e5:
         cb:23:c3:18:2d:e9:ac:93:65:a4:c5:d2:72:64:90:22:96:05:
         5d:d2:e1:c7:6f:6d:08:42:0a:05:a4:ef:ee:e2:bc:14:5b:3d:
         56:7a:0f:06:ec:e3:c7:41:17:13:56:77:66:f9:09:68:5b:f7:
         e0:6c:31:a7:31:8a:41:36:2c:96:3f:31:76:ad:f7:c1:75:75:
         eb:3d:08:bc:69:88:66:ec:78:aa:66:15:7c:22:7a:01:e2:b9:
         77:b3:c0:4f:27:dc:13:da:3a:d9:d3:61:42:e8:ff:82:c6:b7:
         55:6c:15:d8:4f:2a:d5:0e:56:af:2c:ff:cc:60:35:1f:c2:3b:
         63:5f:48:07:43:12:4e:cb:30:ee:b0:76:40:84:41:4f:4b:4e:
         36:af:c0:a0:c9:7c:3a:f8:fa:f2:a5:01:d9:12:4f:9f:36:d9:
         b6:2f:37:ba:16:63:58:98:35:4e:08:31:75:a7:73:56:22:3a:
         6c:df:90:d5:0b:3c:af:5e:05:4a:58:41:68:b3:34:97:e8:e7:
         53:40:51:36:31:b5:c6:54:98:d0:86:9d:40:91:18:96:a6:db:
         91:8e:7e:d7:84:78:8a:86:cd:09:4c:bc:d4:15:5c:88:a8:d3:
         c6:6b:71:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:14:18 2026 by rpki-client