Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/bd0394ed-edd3-3142-9dc6-7367aeb7b236.roa
File:                     bd0394ed-edd3-3142-9dc6-7367aeb7b236.roa (raw, json)
Hash identifier:          9yOutmi+5smviYtYM1COPs7qtZLVc+OGoeqS7t1b8Dc=
Subject key identifier:   B5:3A:9D:A3:10:59:93:BD:3D:EB:70:F6:0B:10:E0:7F:7A:69:AA:6C
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584D300A30720837C0016E1AC000
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/bd0394ed-edd3-3142-9dc6-7367aeb7b236.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     397630
IP address blocks:        168.91.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:30:72:08:37:c0:01:6e:1a:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=55c4004d-d471-41a6-8c7e-4b6d6410d769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:05:58:ba:35:62:36:0c:79:3a:fa:e2:d3:4b:
                    07:d7:9c:0b:09:37:58:c7:c4:b8:1c:6a:39:5b:4c:
                    78:2e:97:51:a7:bc:d9:f4:30:71:10:44:36:63:48:
                    3c:08:20:bb:4a:6f:ec:c1:ed:0c:81:49:4e:6a:4b:
                    b2:e9:ae:f7:f4:36:c3:39:05:2a:bf:7a:d8:9a:ea:
                    3c:4c:bf:ee:c7:0b:61:ed:e5:b3:eb:60:e0:cc:6f:
                    b9:15:e5:bd:0c:8a:df:29:8d:ca:73:bd:8b:86:a1:
                    bf:44:5e:9b:61:91:89:6c:92:6e:b0:2e:e1:20:a4:
                    99:84:04:34:01:90:8f:7a:4d:7f:79:cf:4a:7a:af:
                    05:cb:b3:99:93:83:5e:3f:9e:7b:22:31:e1:0e:a0:
                    f6:35:f1:3e:01:eb:79:d2:7a:53:7f:46:bc:12:a6:
                    7b:91:d9:67:96:b6:bf:83:bd:4d:3b:33:e7:be:d9:
                    09:d4:e7:15:0f:fc:43:c7:9d:f1:1c:6a:7a:b1:d6:
                    d5:2b:89:10:38:3f:37:53:45:9f:3a:ec:1c:c2:40:
                    4e:f2:79:bb:c7:10:18:94:f7:2a:4a:2c:f9:d2:e5:
                    08:7a:82:70:a2:a8:51:d7:14:65:fa:53:94:b3:d4:
                    74:5b:65:36:d2:99:4a:2a:5f:ca:85:ea:55:89:94:
                    5a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:3A:9D:A3:10:59:93:BD:3D:EB:70:F6:0B:10:E0:7F:7A:69:AA:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/bd0394ed-edd3-3142-9dc6-7367aeb7b236.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.91.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:2e:c5:2b:da:f0:96:95:7d:9b:2d:cd:e2:30:8f:4a:a1:ed:
         74:a5:1e:e6:dc:3b:ca:b1:ad:98:de:ec:3d:9e:d6:4e:d5:b3:
         42:bd:55:b2:69:da:bf:0b:eb:37:58:65:5b:33:c7:e2:8f:93:
         2c:23:fe:f4:5e:4f:82:bf:6d:92:fd:6b:cf:fe:e4:51:96:25:
         6f:2a:f0:83:f0:22:71:ef:be:62:d9:84:14:46:45:52:48:ab:
         9a:6f:db:5d:74:2d:b8:6d:f7:07:8d:40:d1:08:26:07:34:14:
         64:0a:3b:d3:3e:27:16:4e:ce:19:f8:87:7f:48:98:86:48:63:
         ae:a6:19:12:48:35:2d:0d:21:5d:1a:d9:c1:c5:39:57:9e:e4:
         6d:6a:c5:f6:11:2a:8f:4e:6e:44:b7:f0:6c:f5:ca:3f:e1:1b:
         e9:5e:fe:6e:31:a5:fb:f7:b2:9d:5d:7c:cf:fa:a0:96:8c:36:
         7e:f5:78:d2:b5:d6:7e:76:c6:d2:41:9e:65:df:72:81:98:64:
         01:6d:31:63:cb:ab:e1:c5:29:99:d3:db:03:1a:9e:3f:dc:99:
         45:0c:e6:f2:12:0c:51:64:41:47:a0:48:72:7f:20:2f:05:25:
         42:27:2a:39:7c:b2:aa:8a:d2:67:a3:2b:36:fc:0e:13:46:39:
         17:bc:9a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:33:21 2026 by rpki-client