Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/41a6c06d-31fc-338a-a700-a53de96667a0.roa
File:                     41a6c06d-31fc-338a-a700-a53de96667a0.roa (raw, json)
Hash identifier:          LRe6UWpDfJ0QsUXo1gTd9u1Q0wek05xGlpRHzYpzisY=
Subject key identifier:   37:B8:42:DF:AC:06:BC:0C:E3:3B:28:75:51:6E:89:26:F7:85:38:60
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D1DE491941D646CBF35487F80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/41a6c06d-31fc-338a-a700-a53de96667a0.roa
Signing time:             Tue 10 Mar 2026 01:00:31 +0000
ROA not before:           Tue 10 Mar 2026 01:00:31 +0000
ROA not after:            Mon 08 Jun 2026 01:00:31 +0000
asID:                     214337
IP address blocks:        38.99.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1d:e4:91:94:1d:64:6c:bf:35:48:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Mar 10 01:00:31 2026 GMT
            Not After : Jun  8 01:00:31 2026 GMT
        Subject: CN=6d5e80de-748e-461f-99f5-97df375dd105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:96:7b:5d:5f:b9:4c:e1:7f:d1:9d:d6:c5:af:
                    a7:bf:68:3d:39:ad:61:34:f0:a3:6e:5a:fd:16:8d:
                    a9:80:da:c6:dd:1b:65:1b:8b:4c:4e:c5:54:a8:fa:
                    14:96:c5:6a:f3:3f:cf:65:50:e8:27:fb:06:8c:85:
                    dc:08:70:86:13:c9:68:39:74:6f:d6:ab:7c:a7:95:
                    0d:b5:40:ba:50:c1:8f:03:e8:7d:eb:77:d7:3e:85:
                    b8:3b:1f:83:f3:21:ac:7a:97:0f:b4:90:ba:e1:56:
                    95:67:e9:bb:34:d1:22:c4:19:85:80:e1:19:27:9f:
                    3c:26:21:eb:36:09:48:76:7b:95:77:fa:15:43:da:
                    1c:c3:db:24:eb:5a:39:84:fc:97:8f:bf:db:cc:fd:
                    1f:87:7c:32:2a:e0:f5:d6:5e:ba:a8:f6:1c:fc:93:
                    e8:b6:9f:a2:2d:79:40:80:ac:b8:65:5d:1b:0e:b3:
                    76:e4:8b:d3:eb:61:55:b2:3f:96:aa:45:6a:42:ad:
                    c4:34:0d:cb:3b:de:5b:b2:16:f6:02:9c:18:3a:87:
                    e1:40:07:f3:c9:ec:ac:dc:60:0c:c5:63:4e:51:cc:
                    70:dd:62:ad:ef:3c:08:c2:ac:ac:75:82:02:93:6e:
                    43:b2:4b:ef:ed:fe:6d:9b:5e:54:64:71:eb:fd:0b:
                    8a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:B8:42:DF:AC:06:BC:0C:E3:3B:28:75:51:6E:89:26:F7:85:38:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/41a6c06d-31fc-338a-a700-a53de96667a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.99.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:c6:ca:ef:0c:df:d8:9e:1d:49:e5:bb:02:36:ba:f7:20:cd:
         19:66:56:cb:d1:0a:36:b3:45:0e:7b:4b:ba:5b:e8:30:c1:77:
         04:3b:a6:2f:2e:db:67:1e:3e:22:63:1d:8c:f6:f9:42:e2:38:
         96:e2:42:ad:49:61:1b:f5:9e:ff:d9:64:f2:a2:cc:3f:e5:9e:
         94:fd:41:43:e8:26:ff:17:5e:25:e5:d5:2a:a8:cb:2f:58:c0:
         14:1d:7d:f2:dc:6e:d0:b6:23:39:34:c0:97:55:67:d0:78:89:
         79:3b:26:c8:f0:0d:b2:20:01:db:b6:9e:30:4d:ff:51:71:37:
         a3:1f:10:b2:e4:fa:7b:8f:32:61:3d:0c:1b:f9:24:42:c5:6e:
         e9:ba:0b:2e:65:c5:1f:6e:25:26:6c:0b:48:6c:3a:27:cc:f3:
         fc:ef:bc:b1:f0:08:bb:b9:be:02:64:55:b2:70:a9:19:3a:e1:
         6e:15:fc:6b:49:0d:4d:12:ee:d7:9c:c0:ce:70:82:76:72:6b:
         2b:b3:17:d2:49:30:1f:22:ac:1d:14:85:40:70:15:8d:12:2b:
         96:54:23:b6:3e:62:cf:b5:95:92:a9:44:9d:cb:40:92:a3:5f:
         8c:5d:2c:cf:02:f8:1c:ed:ba:3b:ac:28:db:3c:5a:bd:70:a7:
         36:90:65:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:25 2026 by rpki-client