Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/269e6e83-2a0d-4c81-ac1b-0611cf797293/3430934f-1559-3834-9666-ebb72d355783.roa
File:                     3430934f-1559-3834-9666-ebb72d355783.roa (raw, json)
Hash identifier:          PC3T5iYFMNPqSU8QtJmEXPODnmYljn4uRl9uizxm0TM=
Subject key identifier:   F9:B4:E3:05:62:CF:F9:D3:1B:40:56:F4:5A:E9:C4:96:DE:6F:7D:0A
Certificate issuer:       /CN=269e6e83-2a0d-4c81-ac1b-0611cf797293
Certificate serial:       010D0C9F4328584D0A77A80CE753A178C4F810A0
Authority key identifier: C3:91:15:34:64:14:83:9D:A3:33:21:38:C7:32:A0:D1:0F:C8:AE:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/269e6e83-2a0d-4c81-ac1b-0611cf797293.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/269e6e83-2a0d-4c81-ac1b-0611cf797293/3430934f-1559-3834-9666-ebb72d355783.roa
Signing time:             Tue 03 Mar 2026 02:00:32 +0000
ROA not before:           Tue 03 Mar 2026 02:00:32 +0000
ROA not after:            Mon 01 Jun 2026 01:00:32 +0000
asID:                     40149
IP address blocks:        192.107.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/269e6e83-2a0d-4c81-ac1b-0611cf797293/269e6e83-2a0d-4c81-ac1b-0611cf797293.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/269e6e83-2a0d-4c81-ac1b-0611cf797293/269e6e83-2a0d-4c81-ac1b-0611cf797293.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/269e6e83-2a0d-4c81-ac1b-0611cf797293.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0a:77:a8:0c:e7:53:a1:78:c4:f8:10:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=269e6e83-2a0d-4c81-ac1b-0611cf797293
        Validity
            Not Before: Mar  3 02:00:32 2026 GMT
            Not After : Jun  1 01:00:32 2026 GMT
        Subject: CN=f6c663ea-9e23-45a7-8895-28cc93f02af9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f9:20:3d:17:eb:cb:69:11:0c:26:cb:3f:a7:
                    5e:ab:cd:e4:51:2d:a8:e0:16:2a:01:b5:a7:fb:2e:
                    ac:31:46:13:9e:6d:5f:85:88:ff:64:bf:70:87:be:
                    72:71:20:21:39:88:9f:76:ab:be:4f:9f:9a:93:c2:
                    9e:95:55:d9:49:79:a7:d3:a1:4d:f0:0b:02:4d:a1:
                    9b:0d:14:fa:c0:49:18:9c:ec:34:a1:ea:4c:1c:f6:
                    62:38:c3:92:c2:d7:f8:41:b9:96:bd:98:53:8f:f1:
                    47:e2:13:ba:a0:dd:c7:a4:b1:82:57:1a:e7:ea:f3:
                    3b:e4:55:7a:95:a2:a9:9a:59:a4:cc:c3:de:77:be:
                    01:f3:22:68:13:01:c5:8f:2c:16:64:55:a8:f8:a8:
                    7a:0b:9d:5c:3d:74:cd:09:c5:5c:b5:ce:56:67:41:
                    2b:39:92:49:85:b1:58:91:90:20:0d:92:9c:e6:75:
                    e7:eb:56:9f:98:d9:c7:f9:fd:a8:d5:81:4c:b5:0d:
                    68:96:73:f1:ba:ae:ca:ab:5b:2a:f6:38:c3:e6:7e:
                    61:bd:42:1d:0c:85:c4:ca:31:7a:36:7b:35:0f:c6:
                    b9:70:fe:5e:34:0c:32:9a:e7:9b:1d:c8:9a:9c:23:
                    2c:57:f7:60:a2:b8:06:07:65:10:bf:5a:42:8a:9a:
                    ee:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B4:E3:05:62:CF:F9:D3:1B:40:56:F4:5A:E9:C4:96:DE:6F:7D:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/269e6e83-2a0d-4c81-ac1b-0611cf797293/3430934f-1559-3834-9666-ebb72d355783.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/269e6e83-2a0d-4c81-ac1b-0611cf797293/269e6e83-2a0d-4c81-ac1b-0611cf797293.crl

            X509v3 Authority Key Identifier:
                keyid:C3:91:15:34:64:14:83:9D:A3:33:21:38:C7:32:A0:D1:0F:C8:AE:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/269e6e83-2a0d-4c81-ac1b-0611cf797293.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.107.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:81:90:e1:42:10:3a:cb:05:2f:5c:d7:98:f6:f5:f0:d2:dc:
         9a:09:6c:b9:30:ad:4f:d1:a5:47:2c:b3:fc:42:00:75:65:04:
         35:f5:b4:4f:83:7b:75:ea:5a:38:ee:7c:b2:62:71:f7:f3:cf:
         d8:3c:a6:b7:ae:23:e7:55:df:fb:4a:69:73:ee:f5:72:40:c4:
         95:a9:79:77:07:68:79:f3:55:e1:83:07:9c:92:a8:98:c5:44:
         3c:de:0f:68:cd:92:3c:01:0d:f9:81:ec:5c:96:cb:ad:8b:fe:
         57:79:b6:1e:c1:fa:99:db:ef:f9:c7:2f:e0:27:70:73:38:9c:
         e7:c7:25:41:94:d6:be:77:a4:1c:3b:38:7a:9f:5e:57:af:8d:
         f2:20:3e:94:cf:65:35:f4:3c:e8:26:e7:6c:2d:5f:cd:cc:d6:
         2f:1d:6f:66:7a:50:98:67:1d:a2:07:fd:6d:fe:4f:f5:bd:65:
         d2:68:eb:bb:42:ed:3d:e3:bc:29:c5:1f:a5:b6:e4:57:93:82:
         38:29:45:4f:e1:c6:d9:0c:df:c4:1d:ac:08:1f:68:d6:f9:58:
         ba:81:6b:81:6d:47:72:22:87:20:4a:99:e2:88:92:15:ca:5d:
         a8:99:a5:cc:3d:2e:bb:bd:f3:96:32:fb:cc:d6:e2:47:f7:dd:
         31:00:bd:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:44:53 2026 by rpki-client