Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/07af6007-9238-3590-b27e-b2cbdfe81ec2.roa
File:                     07af6007-9238-3590-b27e-b2cbdfe81ec2.roa (raw, json)
Hash identifier:          QPnaKlG+ghxgNLrGth69ZVjG7SMYpHOcQwNtgv0WRWk=
Subject key identifier:   1A:28:EA:FC:F1:1B:26:32:11:A2:C5:39:7A:22:01:F5:0F:4F:90:C8
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E58BF423C374105BF543E1400
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/07af6007-9238-3590-b27e-b2cbdfe81ec2.roa
Signing time:             Tue 30 Jun 2026 19:45:01 +0000
ROA not before:           Tue 30 Jun 2026 19:45:01 +0000
ROA not after:            Mon 28 Sep 2026 19:45:01 +0000
asID:                     273069
IP address blocks:        38.130.64.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:58:bf:42:3c:37:41:05:bf:54:3e:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jun 30 19:45:01 2026 GMT
            Not After : Sep 28 19:45:01 2026 GMT
        Subject: CN=afac8941-36a2-4688-95d8-9f4a73faa25a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:04:3c:46:57:b0:bf:73:4a:46:78:b4:e4:2a:
                    ec:c1:be:58:03:cd:04:83:92:86:43:e2:c6:ec:55:
                    ee:10:9c:a9:80:14:0b:02:e1:b1:19:a3:e6:d8:4a:
                    a1:b0:32:2a:73:1b:6a:4c:7a:b3:16:c0:40:53:fe:
                    12:53:67:69:4e:86:e4:5f:7c:32:b2:0d:b3:c9:ba:
                    7c:c6:81:2e:69:ab:8b:d1:37:b3:75:c0:7f:36:48:
                    ff:d5:b4:60:e5:16:36:28:0a:a7:96:7c:8e:dd:f0:
                    22:6f:f9:35:32:68:5e:94:bc:a1:4e:a7:1c:72:66:
                    b2:6d:3b:6b:d5:c8:88:03:06:6b:8b:7b:fe:86:a9:
                    1d:18:ac:a5:6b:06:ce:57:e6:a1:6e:82:d6:3b:5d:
                    0b:c1:4f:ad:18:f1:38:03:be:1d:14:12:f3:1c:45:
                    66:dd:ce:64:4a:8d:4a:92:e9:6e:6f:59:44:aa:f5:
                    6d:50:62:6a:e6:e6:a6:7b:ad:20:f9:78:26:8a:c2:
                    74:1e:08:62:e1:d8:01:d7:93:2a:c5:3d:cb:70:43:
                    b1:16:24:fa:a6:a9:35:c8:4d:40:b3:a3:ea:ed:d1:
                    0a:19:cb:a5:cb:28:bb:a5:2e:91:18:a0:69:e6:09:
                    2c:69:81:47:d6:33:39:39:ba:59:a7:2d:7f:82:e0:
                    b0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:28:EA:FC:F1:1B:26:32:11:A2:C5:39:7A:22:01:F5:0F:4F:90:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/07af6007-9238-3590-b27e-b2cbdfe81ec2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.130.64.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:ac:5c:7d:52:fc:0c:b9:8e:98:60:21:a9:7b:30:40:c4:36:
         6c:34:2e:8b:b7:f1:6e:df:6c:b4:58:3b:41:2a:b8:95:87:e9:
         a8:e2:9d:7a:65:aa:0d:ac:37:11:79:93:bf:15:38:4b:0b:64:
         f0:22:e4:c5:69:01:fe:fd:cb:5c:c8:af:10:34:55:ff:bc:31:
         8a:bc:1b:df:0e:6b:22:3b:39:7b:3a:78:4b:92:0e:c9:05:75:
         8a:1a:80:2b:be:17:c4:e2:80:ec:a1:b4:ba:f3:26:ec:13:6f:
         af:f8:2e:78:61:15:9d:38:88:a6:51:a0:f9:f2:b1:51:01:9b:
         4b:09:e2:94:cb:a7:6d:32:22:12:c8:4e:ca:30:63:d6:5f:f8:
         5b:66:0f:0b:6e:23:d8:9a:6c:32:24:4e:40:82:ee:7d:9d:ea:
         28:7a:cf:22:7d:57:cc:b8:23:1d:ba:83:94:78:eb:f3:73:a8:
         d0:ba:85:b2:9f:ae:a3:ee:4c:08:ae:c0:02:64:45:69:aa:a8:
         7e:f4:8a:04:ab:54:1b:22:48:e4:07:02:19:b5:af:15:c0:81:
         b6:ff:c9:cc:6c:05:2a:ca:ba:a3:e0:db:3c:3f:d6:27:47:b3:
         aa:66:f1:7b:2d:13:bb:b2:6f:b1:a1:d1:df:86:64:35:c2:9a:
         43:df:32:9e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5Yv0I8N0EFv1Q+FAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDYzMDE5NDUwMVoXDTI2MDkyODE5NDUwMVowLzEtMCsGA1UEAxMk
YWZhYzg5NDEtMzZhMi00Njg4LTk1ZDgtOWY0YTczZmFhMjVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQQ8Rlewv3NKRni05Crswb5YA80Eg5KGQ+LG
7FXuEJypgBQLAuGxGaPm2EqhsDIqcxtqTHqzFsBAU/4SU2dpTobkX3wysg2zybp8
xoEuaauL0TezdcB/Nkj/1bRg5RY2KAqnlnyO3fAib/k1MmhelLyhTqcccmaybTtr
1ciIAwZri3v+hqkdGKylawbOV+ahboLWO10LwU+tGPE4A74dFBLzHEVm3c5kSo1K
kulub1lEqvVtUGJq5uame60g+XgmisJ0Hghi4dgB15MqxT3LcEOxFiT6pqk1yE1A
s6Pq7dEKGculyyi7pS6RGKBp5gksaYFH1jM5ObpZpy1/guCwDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBoo6vzxGyYyEaLFOXoiAfUPT5DIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMDdhZjYwMDctOTIzOC0z
NTkwLWIyN2UtYjJjYmRmZTgxZWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJoJAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADWsXH1S/Ay5jphgIal7MEDENmw0Lou38W7fbLRYO0EquJWH6ajinXpl
qg2sNxF5k78VOEsLZPAi5MVpAf79y1zIrxA0Vf+8MYq8G98OayI7OXs6eEuSDskF
dYoagCu+F8TigOyhtLrzJuwTb6/4LnhhFZ04iKZRoPnysVEBm0sJ4pTLp20yIhLI
TsowY9Zf+FtmDwtuI9iabDIkTkCC7n2d6ih6zyJ9V8y4Ix26g5R46/NzqNC6hbKf
rqPuTAiuwAJkRWmqqH70igSrVBsiSOQHAhm1rxXAgbb/ycxsBSrKuqPg2zw/1idH
s6pm8XstE7uyb7Gh0d+GZDXCmkPfMp4=
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:19:53 2026 by rpki-client