Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/38a6de71-55e9-453c-8cf4-1a205aef0191/2abb1020-91fa-3d34-ab8d-0cee35dab18f.roa
File:                     2abb1020-91fa-3d34-ab8d-0cee35dab18f.roa (raw, json)
Hash identifier:          xqu+kb1rxzwubjYNo6jlrT+peYZWUx0wXWBWyYI8j4Y=
Subject key identifier:   CE:9B:D5:8E:8A:15:6D:74:25:92:AF:B3:3F:76:EF:76:29:FC:68:CE
Certificate issuer:       /CN=38a6de71-55e9-453c-8cf4-1a205aef0191
Certificate serial:       010D0C9F4328584F4972DF63C05A67FAF8D845C0
Authority key identifier: 1B:37:B0:A0:E1:D4:09:F7:4F:49:8E:9F:75:11:14:CC:4C:8F:90:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/38a6de71-55e9-453c-8cf4-1a205aef0191.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/38a6de71-55e9-453c-8cf4-1a205aef0191/2abb1020-91fa-3d34-ab8d-0cee35dab18f.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     40772
IP address blocks:        74.116.44.0/24 maxlen: 24
                          74.116.45.0/24 maxlen: 24
                          74.116.46.0/24 maxlen: 24
                          74.116.47.0/24 maxlen: 24
                          104.36.104.0/24 maxlen: 24
                          104.36.105.0/24 maxlen: 24
                          104.36.106.0/24 maxlen: 24
                          104.36.107.0/24 maxlen: 24
                          208.89.36.0/24 maxlen: 24
                          208.89.37.0/24 maxlen: 24
                          208.89.38.0/24 maxlen: 24
                          208.89.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/38a6de71-55e9-453c-8cf4-1a205aef0191/38a6de71-55e9-453c-8cf4-1a205aef0191.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/38a6de71-55e9-453c-8cf4-1a205aef0191/38a6de71-55e9-453c-8cf4-1a205aef0191.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/38a6de71-55e9-453c-8cf4-1a205aef0191.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:df:63:c0:5a:67:fa:f8:d8:45:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38a6de71-55e9-453c-8cf4-1a205aef0191
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=2364589b-3d47-4a92-8bef-8a5d1cded2ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:64:68:eb:13:cc:9f:a8:cf:6c:b9:00:3a:da:
                    12:95:9c:58:ad:ec:48:3c:62:7c:5e:29:84:ed:d0:
                    e2:0d:de:42:d4:3e:de:89:ee:87:e7:6f:e1:84:ea:
                    c0:9a:06:84:d2:b0:a4:7e:8e:0e:9d:fa:43:43:3a:
                    12:a4:27:36:31:b8:9a:f0:a1:71:37:43:1b:cd:d2:
                    8c:5f:7e:79:c4:49:c6:74:87:95:30:ee:15:4b:22:
                    95:bd:11:0d:40:2f:72:71:4f:9b:e9:81:7e:e8:c5:
                    ad:70:46:e1:8a:e8:7d:d2:d3:f4:90:6f:b6:bd:aa:
                    96:65:fd:1e:ee:08:a3:1d:ae:60:ca:44:87:a0:cf:
                    eb:9c:ee:4f:91:53:d6:1d:9f:9e:ab:95:c6:24:cd:
                    db:49:77:71:76:d6:b0:e9:96:9c:e9:d7:f5:aa:79:
                    59:3e:94:a7:a5:78:a2:8e:b5:a3:18:45:69:d0:49:
                    80:cf:16:de:4f:61:7a:9c:0f:a5:dd:26:a8:c9:ec:
                    84:17:28:1c:bb:25:41:f1:65:0f:59:fc:da:bc:4a:
                    1e:17:74:36:55:c7:7e:29:a4:52:89:4a:52:b3:36:
                    9f:1a:56:95:e3:87:08:43:f5:78:bf:9a:e5:38:55:
                    dd:f1:0a:a7:98:e9:7a:15:f1:9c:d6:0f:ea:12:22:
                    fc:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:9B:D5:8E:8A:15:6D:74:25:92:AF:B3:3F:76:EF:76:29:FC:68:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/38a6de71-55e9-453c-8cf4-1a205aef0191/2abb1020-91fa-3d34-ab8d-0cee35dab18f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/38a6de71-55e9-453c-8cf4-1a205aef0191/38a6de71-55e9-453c-8cf4-1a205aef0191.crl

            X509v3 Authority Key Identifier:
                keyid:1B:37:B0:A0:E1:D4:09:F7:4F:49:8E:9F:75:11:14:CC:4C:8F:90:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/38a6de71-55e9-453c-8cf4-1a205aef0191.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.116.44.0/22
                  104.36.104.0/22
                  208.89.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:46:cd:c6:03:44:54:df:b7:80:f2:7f:c9:22:3c:ce:2d:c8:
         19:f1:77:2d:5f:96:ae:33:18:38:59:c9:53:ce:01:3e:b3:89:
         1c:79:14:ae:40:49:2f:7d:3b:05:b5:2a:5d:2d:c2:85:13:c5:
         4d:b1:61:c4:ee:7f:96:2f:fd:17:54:69:9b:bc:c4:90:c4:85:
         d9:0b:7b:96:b8:16:a6:66:88:3e:04:5d:3e:2e:3a:2b:cc:f6:
         78:38:87:8a:8f:7d:f9:8c:09:74:f6:0b:b4:b9:b6:0e:88:e6:
         35:95:da:52:f1:9e:80:ca:a6:79:04:01:9c:57:e2:f4:ba:ab:
         44:f6:0e:76:b6:be:8d:57:c3:25:9a:47:b8:81:20:6e:dd:af:
         7e:8f:f9:64:31:12:38:7e:5b:d9:7a:af:54:81:f7:39:84:29:
         5a:99:23:d3:d2:60:f9:da:af:ca:0e:10:7d:62:98:e6:b5:08:
         96:68:2b:02:8f:5a:29:de:2c:84:e7:0d:87:74:ae:86:19:ad:
         8c:9b:c0:a4:ca:5e:1b:d3:2f:ee:3f:2e:37:72:a9:05:c5:f4:
         6a:37:b2:bc:0f:dc:12:8d:72:82:2c:f8:ac:1c:67:2d:19:e1:
         9c:23:24:2f:08:02:ca:ab:c4:d8:92:f3:e8:4e:58:73:34:04:
         95:30:62:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:11:58 2026 by rpki-client