Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0b3f570c-cd3e-3e4d-be38-4da4c7d678f6.roa
File:                     0b3f570c-cd3e-3e4d-be38-4da4c7d678f6.roa (raw, json)
Hash identifier:          VP4QOleMiiPdUsM3ZgugN0Luc1VHGXjPZGqZFbscvTU=
Subject key identifier:   96:2A:39:0A:D9:B4:FD:88:2F:FC:EA:16:BC:27:47:29:7C:94:A9:85
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E4C548E09D64BE2992B9D1E80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0b3f570c-cd3e-3e4d-be38-4da4c7d678f6.roa
Signing time:             Fri 26 Jun 2026 09:00:12 +0000
ROA not before:           Fri 26 Jun 2026 09:00:12 +0000
ROA not after:            Thu 24 Sep 2026 09:00:12 +0000
asID:                     204457
IP address blocks:        38.145.112.0/21 maxlen: 24
                          154.22.150.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4c:54:8e:09:d6:4b:e2:99:2b:9d:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jun 26 09:00:12 2026 GMT
            Not After : Sep 24 09:00:12 2026 GMT
        Subject: CN=fc7bb66f-d271-4d3f-b630-1395171aa08c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:4c:5d:13:a5:68:f1:da:55:ab:04:04:25:e3:
                    7e:28:0e:40:e2:7f:f0:34:22:88:6e:ac:56:94:a3:
                    a6:09:29:de:7d:50:9d:b1:b7:40:39:6e:04:18:f1:
                    79:23:dc:49:31:9f:80:cd:a6:45:de:86:19:03:b5:
                    a4:c5:47:90:3a:80:66:86:fc:89:6d:b5:f8:1a:20:
                    4b:91:c6:5d:ef:67:81:47:13:ba:f7:8b:57:0e:db:
                    1d:c6:1a:19:46:1b:63:a0:ee:f9:cb:f9:95:7a:11:
                    b4:4e:60:76:ff:d5:c0:5a:34:18:72:94:74:66:2c:
                    82:77:6c:c2:1c:cc:ad:77:62:ef:8e:5a:3c:34:49:
                    65:25:31:09:e4:f3:b4:db:ca:d5:11:ac:ed:1b:8d:
                    65:4f:ed:87:fe:85:4a:28:21:e4:45:d7:f2:ea:a6:
                    4b:77:1a:54:82:ca:65:47:a5:83:43:7e:5e:f6:8e:
                    25:51:e7:7f:65:e6:3e:2d:69:70:5e:c6:2a:68:03:
                    c4:16:37:43:46:a9:b8:52:14:b4:00:3d:a1:ae:d1:
                    3b:71:0c:f0:b3:e6:e2:3f:50:42:bf:cb:66:bd:68:
                    cc:17:a0:79:00:9d:c5:c3:e3:0b:98:44:8d:f0:20:
                    17:ce:7a:e7:35:c2:29:c0:0c:eb:fe:1d:9a:c2:49:
                    d9:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:2A:39:0A:D9:B4:FD:88:2F:FC:EA:16:BC:27:47:29:7C:94:A9:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0b3f570c-cd3e-3e4d-be38-4da4c7d678f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.145.112.0/21
                  154.22.150.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:6e:50:f8:c7:3b:b5:1d:27:9b:73:fe:f3:35:5f:dd:b7:e1:
         03:0b:46:9d:f3:03:9f:8a:17:8f:d6:7e:be:a5:1a:21:21:b6:
         97:30:e4:8b:0e:f4:3a:79:a8:02:da:eb:a9:ee:1c:6a:79:2b:
         64:d4:ee:73:c8:df:08:be:07:95:02:15:5f:32:fd:b5:f8:7f:
         de:ca:28:c6:ab:dd:68:ab:1b:a4:2b:d7:29:38:d3:ea:2d:0e:
         eb:03:1b:01:68:ab:d3:da:be:c5:2c:1c:cd:d6:d9:6b:d6:ff:
         a8:d0:92:6d:b6:2d:ee:dd:33:c4:c9:84:94:60:23:b0:c2:9b:
         53:3c:31:09:c6:2d:b4:9e:0e:2d:d2:38:5d:ee:3b:26:d0:47:
         4c:9b:ec:be:13:6b:3d:87:89:a2:cd:71:4b:4f:bc:87:3e:6c:
         ba:af:8b:17:94:5e:00:2f:e5:bb:b6:df:24:83:33:59:ce:de:
         17:11:80:2e:92:67:23:71:f7:79:d7:e1:b1:64:15:6a:53:92:
         bf:b1:5b:35:cf:03:a6:fd:4d:1b:7c:2f:ba:3a:73:da:1b:6c:
         9e:e9:aa:74:81:cb:70:b7:0d:bd:4d:39:fc:ee:b7:ec:61:88:
         4a:e9:32:42:9f:54:d1:80:8c:3d:6f:05:79:90:5f:6c:17:c5:
         e0:49:82:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:01:41 2026 by rpki-client