Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0843de91-d74d-3d95-a319-4ab610e27a02.roa
File:                     0843de91-d74d-3d95-a319-4ab610e27a02.roa (raw, json)
Hash identifier:          9qWw0uEDn7U3JQglVmNizXbN+9oAuA61EtTpsQzh648=
Subject key identifier:   71:64:6C:7F:BE:73:15:86:EF:2D:DF:BF:E5:8F:E3:A0:27:AC:A7:FF
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584DBBA048E902A2FE037F7BBD60
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0843de91-d74d-3d95-a319-4ab610e27a02.roa
Signing time:             Tue 05 May 2026 13:00:31 +0000
ROA not before:           Tue 05 May 2026 13:00:31 +0000
ROA not after:            Mon 03 Aug 2026 13:00:31 +0000
asID:                     213305
IP address blocks:        38.188.112.0/20 maxlen: 24
                          154.17.82.0/23 maxlen: 24
                          206.148.2.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bb:a0:48:e9:02:a2:fe:03:7f:7b:bd:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: May  5 13:00:31 2026 GMT
            Not After : Aug  3 13:00:31 2026 GMT
        Subject: CN=a35c68d0-4469-4dfd-b6c9-32460ca3f988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:93:68:1c:27:88:27:da:56:e0:d0:a4:c4:08:
                    f8:e1:32:2e:6f:31:65:3d:64:46:76:ad:19:88:0d:
                    54:af:d9:fe:ae:aa:3e:3d:15:6e:7a:ba:0f:f5:2d:
                    76:4b:90:94:fc:69:8c:65:38:a3:cd:0b:6a:7a:11:
                    e1:53:98:63:b0:c4:82:93:3f:5c:5d:9a:77:f4:e3:
                    ec:7e:c5:33:3b:d3:bb:a0:c0:1b:7f:a7:94:74:58:
                    07:06:51:a6:60:9f:83:d7:93:29:1c:4e:23:f5:46:
                    02:d1:42:c6:c2:f6:01:d1:d2:c3:78:2c:bc:4b:02:
                    35:5b:3c:6d:64:80:3b:ed:59:8f:2e:57:a3:62:1d:
                    f1:47:12:69:f2:7b:ee:a5:e7:1c:4e:e6:24:70:42:
                    aa:d3:53:62:d3:3a:59:d4:85:0a:6d:d2:29:90:25:
                    3a:4c:c2:34:bc:03:ca:8a:cb:e9:50:aa:68:49:fb:
                    07:75:3e:f1:4f:48:aa:60:59:e8:e8:75:d4:87:fc:
                    ca:31:a5:4e:e5:54:7b:58:0d:65:8c:b0:ae:f4:0f:
                    1b:15:10:02:eb:44:5c:12:dd:83:c1:b4:71:f6:a6:
                    74:5a:66:57:cb:4d:e9:86:9e:90:f1:16:f2:5c:c9:
                    60:a5:f9:1b:1c:13:61:3d:68:53:50:0d:05:cf:00:
                    27:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:64:6C:7F:BE:73:15:86:EF:2D:DF:BF:E5:8F:E3:A0:27:AC:A7:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0843de91-d74d-3d95-a319-4ab610e27a02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.188.112.0/20
                  154.17.82.0/23
                  206.148.2.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:7e:55:67:d0:9b:07:08:47:33:d2:df:97:90:a1:e3:2b:ac:
         da:54:7a:07:3f:49:e7:40:9c:15:ea:24:89:34:db:e3:0f:67:
         11:b1:54:b6:0e:76:c2:6d:9a:d7:53:b8:b5:f1:d3:8d:96:d3:
         02:38:41:85:8f:ca:55:cf:2a:52:f7:b1:37:34:40:c0:e8:f5:
         53:31:a7:5f:d6:48:a6:23:75:43:f9:ce:ab:b7:9e:91:a0:90:
         78:79:b1:ed:5b:ab:6e:7c:ce:ce:68:7d:14:c8:41:ef:e2:39:
         90:bc:e8:b6:40:4c:29:fd:67:ff:ee:4f:a6:f9:f6:1a:02:b6:
         26:26:eb:18:55:92:60:1c:de:39:c8:07:20:15:44:34:b2:28:
         39:b5:5a:20:cb:02:eb:70:82:74:95:34:a1:4e:0e:91:5b:7d:
         29:3f:fb:22:5f:40:0b:22:12:20:64:87:49:19:bf:95:54:90:
         d1:c3:d4:0d:0b:23:8c:cb:f5:45:ee:28:c4:02:86:6b:08:d8:
         3d:3d:d0:f8:85:75:79:8d:bd:1f:6c:f4:e5:e7:20:ee:a4:8a:
         09:de:ed:1f:c9:9d:8a:f7:59:cc:1e:26:f6:fc:c3:7e:bf:21:
         46:6c:7b:68:27:fb:85:ee:19:cc:ef:6d:88:e2:ee:5f:50:2e:
         e3:17:9f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:27:44 2026 by rpki-client