Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5c476cda-4d82-3cbb-83ad-f5c7b29cbcc9.roa
File:                     5c476cda-4d82-3cbb-83ad-f5c7b29cbcc9.roa (raw, json)
Hash identifier:          GKcIF/TtYeBACEOB9VnY8LRct4CRbM1IW9AfwBCpjAs=
Subject key identifier:   36:72:B2:4B:AF:A3:8E:37:61:53:CD:C5:37:32:B3:5C:72:37:44:E0
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D3704B93BEE766FCEE0E17D80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5c476cda-4d82-3cbb-83ad-f5c7b29cbcc9.roa
Signing time:             Thu 19 Mar 2026 01:00:31 +0000
ROA not before:           Thu 19 Mar 2026 01:00:31 +0000
ROA not after:            Wed 17 Jun 2026 01:00:31 +0000
asID:                     133585
IP address blocks:        38.226.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:37:04:b9:3b:ee:76:6f:ce:e0:e1:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Mar 19 01:00:31 2026 GMT
            Not After : Jun 17 01:00:31 2026 GMT
        Subject: CN=1eb48a15-466b-42de-bc46-c90ec72c59e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f7:c4:14:ba:f3:e3:f6:da:c9:0a:c9:e5:21:
                    01:7b:0e:7c:08:cf:61:c5:79:76:df:91:a7:58:f1:
                    4a:a8:2c:74:de:91:9d:1a:82:0d:6c:ee:73:08:ae:
                    94:d1:a4:93:ad:9e:7a:38:6a:d0:dc:1e:3f:ee:a2:
                    58:6c:38:a3:5b:af:6b:06:71:6f:bd:ef:a5:2d:db:
                    66:c5:fc:f4:80:e3:f3:e2:18:ec:75:00:23:59:b5:
                    1b:cf:fd:e7:2f:a4:b4:5f:ee:f9:2e:c5:ba:2f:b1:
                    d2:92:a5:06:e3:71:b8:6f:a2:38:d8:d6:92:4b:2c:
                    a9:81:2a:9f:c6:91:91:01:6f:d6:1b:36:a5:7e:77:
                    c4:20:a7:6a:32:7d:c9:bb:ec:a2:8d:39:be:fc:15:
                    f2:2d:b8:12:0e:75:bf:83:39:08:ba:86:d6:65:c1:
                    77:79:07:4f:12:fd:bf:19:ab:2c:ba:9a:22:be:ee:
                    db:b6:19:47:a0:5e:f3:22:3a:b2:0d:17:53:d2:49:
                    aa:f0:54:8c:57:95:e9:e1:9a:97:c3:ad:56:bb:ef:
                    e0:78:7d:d6:76:c5:6d:77:62:f6:12:4d:18:9a:69:
                    06:65:7c:a8:64:55:81:6b:09:86:ac:95:fa:2b:b2:
                    b8:3a:6d:0e:61:3c:df:e9:33:bc:b2:dc:d7:1e:89:
                    71:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:72:B2:4B:AF:A3:8E:37:61:53:CD:C5:37:32:B3:5C:72:37:44:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5c476cda-4d82-3cbb-83ad-f5c7b29cbcc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.226.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:94:df:ce:31:e3:f7:b2:26:4a:d5:c1:24:39:78:82:c7:5c:
         33:99:06:d3:4c:70:22:d0:a5:ec:eb:8a:dc:17:08:bf:b1:87:
         ec:77:6a:73:f3:80:1e:0e:cd:24:33:17:3f:5f:95:9c:6e:66:
         ab:8e:31:a4:05:9a:3a:85:81:c4:27:54:53:c3:8e:b1:84:02:
         fc:d9:24:91:7d:4d:a9:68:52:98:a1:3f:99:c0:72:a8:be:41:
         21:7b:a8:74:ff:13:17:7d:ca:15:77:ff:7a:97:3c:ca:21:25:
         d1:5b:49:0b:ea:9c:ab:70:a6:79:78:55:83:cc:be:2f:0e:51:
         e0:b4:3d:4c:e2:3b:be:65:5e:89:6c:1c:49:d8:3c:51:39:86:
         42:40:f6:e8:2c:3d:ac:c3:ff:71:3e:88:2b:5f:76:39:76:56:
         5e:76:a7:67:19:93:fe:2d:e6:70:78:80:bd:27:ca:02:92:63:
         27:12:4b:10:c2:90:67:e5:32:8d:12:fe:1e:da:72:73:bf:ac:
         c7:41:65:96:78:d9:0a:41:d0:ce:3c:a9:5f:ab:52:f4:37:bf:
         6f:48:e3:c2:fc:d1:25:da:05:0d:3f:ec:da:a1:b8:27:f3:a4:
         0a:b2:f8:60:9b:f7:91:d5:93:2c:df:f1:34:0e:06:0f:bc:94:
         68:70:d5:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:27 2026 by rpki-client