Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7fbc407-59cf-4c36-bec1-9e46479af77b/9279ec8c-949c-346a-89f2-5cf679fad74b.roa
File:                     9279ec8c-949c-346a-89f2-5cf679fad74b.roa (raw, json)
Hash identifier:          brJJz81+7RrYaTZ5M3o85JZj3JbPorVnzihSO+eU6zs=
Subject key identifier:   BB:67:31:9A:8E:F1:34:83:43:3B:1B:E8:50:C0:36:E1:07:B4:90:AF
Certificate issuer:       /CN=c7fbc407-59cf-4c36-bec1-9e46479af77b
Certificate serial:       010D0C9F4328584F549D6BBE9DE7E858F86F7280
Authority key identifier: 74:04:09:AD:2D:F2:49:45:91:01:07:8B:D6:68:BD:6D:11:73:6E:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7fbc407-59cf-4c36-bec1-9e46479af77b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7fbc407-59cf-4c36-bec1-9e46479af77b/9279ec8c-949c-346a-89f2-5cf679fad74b.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     25710
IP address blocks:        24.38.160.0/19 maxlen: 19
                          2606:af80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7fbc407-59cf-4c36-bec1-9e46479af77b/c7fbc407-59cf-4c36-bec1-9e46479af77b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7fbc407-59cf-4c36-bec1-9e46479af77b/c7fbc407-59cf-4c36-bec1-9e46479af77b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7fbc407-59cf-4c36-bec1-9e46479af77b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:6b:be:9d:e7:e8:58:f8:6f:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7fbc407-59cf-4c36-bec1-9e46479af77b
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=28bbcc19-0091-44ee-b31e-f05c7a31d506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:80:5f:57:4f:4d:08:82:92:bd:68:f2:3d:bf:
                    23:57:8a:2f:31:4a:9a:94:4e:52:48:e3:90:23:f3:
                    1c:2b:02:55:eb:9f:73:d0:da:95:c9:8c:bf:5d:18:
                    1a:1b:eb:aa:b7:a6:93:22:85:16:96:4e:15:8c:bc:
                    f7:a1:4c:5c:17:44:81:86:9f:4d:67:b8:3b:dd:45:
                    5b:41:66:a4:f8:cb:c4:5a:49:37:dc:00:7b:c2:4f:
                    bb:1a:fd:31:00:75:8f:e6:0e:35:6d:85:b5:76:75:
                    24:c0:6a:d3:cc:e8:7f:f9:17:bc:c7:8e:fc:9d:c6:
                    78:f7:14:eb:37:d1:bb:4f:01:d0:f8:ea:cc:73:c3:
                    18:48:aa:21:2b:80:34:cc:da:ea:0d:29:01:39:bb:
                    44:06:e8:b4:0b:8c:22:39:45:d6:7a:88:2f:5c:c4:
                    02:16:9e:0c:bd:a1:1e:bc:70:2a:82:92:b6:44:1a:
                    52:95:d9:10:95:1e:3d:5c:14:66:c9:46:8d:d6:69:
                    31:60:f8:e9:2e:95:49:99:39:35:d2:13:93:7c:28:
                    ad:44:5b:ba:4b:b2:9e:5b:21:53:da:95:91:00:f9:
                    1e:c8:58:4c:48:38:d9:61:8a:4e:c5:8c:35:ac:89:
                    90:d1:58:a5:4b:5b:0e:dd:4a:8d:c5:fe:44:63:e7:
                    60:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:67:31:9A:8E:F1:34:83:43:3B:1B:E8:50:C0:36:E1:07:B4:90:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7fbc407-59cf-4c36-bec1-9e46479af77b/9279ec8c-949c-346a-89f2-5cf679fad74b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7fbc407-59cf-4c36-bec1-9e46479af77b/c7fbc407-59cf-4c36-bec1-9e46479af77b.crl

            X509v3 Authority Key Identifier:
                keyid:74:04:09:AD:2D:F2:49:45:91:01:07:8B:D6:68:BD:6D:11:73:6E:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7fbc407-59cf-4c36-bec1-9e46479af77b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.38.160.0/19
                IPv6:
                  2606:af80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:b1:e9:8c:aa:ac:9a:74:40:32:ca:02:de:e2:e3:bf:0e:36:
         a6:3d:06:a4:b5:3e:17:ee:8e:ea:ea:90:68:cc:34:b1:40:55:
         39:61:00:91:1c:89:71:35:5b:55:81:eb:bd:04:d4:56:26:1d:
         bb:87:a5:7a:3a:af:74:74:d3:31:d2:d3:ac:c0:1c:2f:cf:04:
         8f:dc:bf:2a:42:99:f6:a0:b3:af:49:54:e8:24:43:09:bb:00:
         8e:6a:78:cc:c3:05:37:e6:62:0e:14:9b:2c:2d:d6:9d:d7:3e:
         01:c2:db:10:23:95:2c:f5:ea:b5:f3:5a:f4:90:5c:19:64:a2:
         82:26:49:31:96:25:31:d7:bb:c8:8f:11:96:90:53:66:bf:14:
         50:8c:ce:f3:bd:f1:04:c1:84:14:c4:0f:95:4c:9e:65:45:80:
         f0:92:14:26:c5:ec:08:94:99:1e:96:0a:a0:52:37:a3:e0:e4:
         86:8c:64:fb:cf:0b:80:e3:97:b0:dd:77:ff:51:af:b3:68:0a:
         c1:b7:b7:d7:9b:78:25:cc:af:a8:84:70:ef:1f:eb:9a:85:cb:
         1a:53:d5:80:b6:a9:eb:d6:58:dc:f4:24:f8:de:d9:f4:7a:e0:
         a1:3f:50:3e:f7:67:ef:b6:5a:ae:50:ae:75:4e:e3:1c:9e:60:
         c6:c9:be:73
-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE9UnWu+nefoWPhvcoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzdmYmM0MDctNTljZi00YzM2LWJlYzEtOWU0NjQ3OWFm
NzdiMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk
MjhiYmNjMTktMDA5MS00NGVlLWIzMWUtZjA1YzdhMzFkNTA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIBfV09NCIKSvWjyPb8jV4ovMUqalE5SSOOQ
I/McKwJV659z0NqVyYy/XRgaG+uqt6aTIoUWlk4VjLz3oUxcF0SBhp9NZ7g73UVb
QWak+MvEWkk33AB7wk+7Gv0xAHWP5g41bYW1dnUkwGrTzOh/+Re8x478ncZ49xTr
N9G7TwHQ+OrMc8MYSKohK4A0zNrqDSkBObtEBui0C4wiOUXWeogvXMQCFp4MvaEe
vHAqgpK2RBpSldkQlR49XBRmyUaN1mkxYPjpLpVJmTk10hOTfCitRFu6S7KeWyFT
2pWRAPkeyFhMSDjZYYpOxYw1rImQ0VilS1sO3UqNxf5EY+dgwwIDAQABo4IDZDCC
A2AwHQYDVR0OBBYEFLtnMZqO8TSDQzsb6FDANuEHtJCvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jN2Zi
YzQwNy01OWNmLTRjMzYtYmVjMS05ZTQ2NDc5YWY3N2IvOTI3OWVjOGMtOTQ5Yy0z
NDZhLTg5ZjItNWNmNjc5ZmFkNzRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzdmYmM0MDctNTljZi00YzM2LWJl
YzEtOWU0NjQ3OWFmNzdiL2M3ZmJjNDA3LTU5Y2YtNGMzNi1iZWMxLTllNDY0Nzlh
Zjc3Yi5jcmwwHwYDVR0jBBgwFoAUdAQJrS3ySUWRAQeL1mi9bRFzbjcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9jN2ZiYzQwNy01OWNmLTRjMzYtYmVjMS05ZTQ2
NDc5YWY3N2IuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQFGCagMA0E
AgACMAcDBQAmBq+AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF
BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0
bWwwDQYJKoZIhvcNAQELBQADggEBAIix6YyqrJp0QDLKAt7i478ONqY9BqS1Phfu
jurqkGjMNLFAVTlhAJEciXE1W1WB670E1FYmHbuHpXo6r3R00zHS06zAHC/PBI/c
vypCmfags69JVOgkQwm7AI5qeMzDBTfmYg4Umywt1p3XPgHC2xAjlSz16rXzWvSQ
XBlkooImSTGWJTHXu8iPEZaQU2a/FFCMzvO98QTBhBTED5VMnmVFgPCSFCbF7AiU
mR6WCqBSN6Pg5IaMZPvPC4Djl7Ddd/9Rr7NoCsG3t9ebeCXMr6iEcO8f65qFyxpT
1YC2qevWWNz0JPje2fR64KE/UD73Z++2Wq5QrnVO4xyeYMbJvnM=
-----END CERTIFICATE-----
Generated at Sun Oct 11 22:28:50 2026 by rpki-client