Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6823b892-8074-3c8b-b1df-dd80acc0cdb2.roa
File:                     6823b892-8074-3c8b-b1df-dd80acc0cdb2.roa (raw, json)
Hash identifier:          7MraqAx9HJjUpyp5f80R91E00fW2YaeDwTe9wq6Jh9E=
Subject key identifier:   16:87:0C:BC:5C:17:63:EC:68:2F:5E:81:CF:9B:82:23:8D:5C:2C:84
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E74CF74392970F0A5B8D67580
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6823b892-8074-3c8b-b1df-dd80acc0cdb2.roa
Signing time:             Fri 10 Jul 2026 21:00:12 +0000
ROA not before:           Fri 10 Jul 2026 21:00:12 +0000
ROA not after:            Thu 08 Oct 2026 21:00:12 +0000
asID:                     264297
IP address blocks:        38.199.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:74:cf:74:39:29:70:f0:a5:b8:d6:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jul 10 21:00:12 2026 GMT
            Not After : Oct  8 21:00:12 2026 GMT
        Subject: CN=0fb8ac42-80ae-4679-bc43-a24f43401ec9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:75:54:d1:c3:07:43:17:04:57:8c:9f:09:6d:
                    f7:f6:93:5a:98:28:dd:0a:c2:be:3e:89:27:b6:9b:
                    60:ac:73:cb:a0:16:4c:af:dc:73:71:0f:8c:65:4f:
                    37:26:2e:d6:76:07:c3:8c:32:a0:11:4c:62:bd:08:
                    d5:89:98:58:b9:e9:d4:ca:4a:bc:59:65:a6:7a:d6:
                    ee:f2:49:1b:b8:7f:3f:4a:14:97:77:e2:a5:66:3c:
                    c0:25:fa:41:8c:5a:f7:c3:bd:c6:bc:80:7a:8d:d7:
                    24:99:69:ce:fb:46:b1:aa:4b:30:de:7f:54:4c:84:
                    0a:6a:c3:25:3f:12:34:d5:4c:d0:35:c7:cd:8e:77:
                    f8:40:c1:70:8b:2b:a5:9a:37:4e:96:b0:a7:59:1e:
                    66:82:f4:3f:fb:f5:5d:7d:12:4e:1c:10:1b:90:17:
                    07:4c:b0:80:97:d9:70:a1:c9:7a:2e:93:c1:88:67:
                    eb:36:ad:53:58:10:45:3c:b1:27:c5:8b:8a:6c:20:
                    18:4c:82:a2:26:d9:20:bf:44:41:7f:49:55:e8:ee:
                    1d:b3:f8:c5:8b:c9:8b:eb:58:33:3e:02:76:d5:b7:
                    0c:39:48:b1:00:cd:26:b6:42:42:fb:80:df:ff:85:
                    6b:61:8f:28:49:32:b6:d3:49:36:c6:23:61:f0:ac:
                    0b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:87:0C:BC:5C:17:63:EC:68:2F:5E:81:CF:9B:82:23:8D:5C:2C:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6823b892-8074-3c8b-b1df-dd80acc0cdb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.199.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:53:47:b4:6e:95:24:e3:e8:07:6a:61:ee:f9:7d:f4:6e:cd:
         73:ea:8a:95:ff:55:2a:c4:95:f1:c5:d0:1f:d8:75:db:01:01:
         51:d3:17:43:3b:67:33:54:94:78:0e:65:07:e7:49:16:03:59:
         0f:8a:c3:44:4a:18:54:68:04:f3:f2:8d:ee:1f:a9:eb:79:b4:
         f0:c3:1b:d2:ff:6c:f5:9b:62:bc:30:02:08:3f:a8:ee:3a:ca:
         a7:64:76:02:58:bd:be:da:22:d3:e3:90:ea:bb:45:0f:60:15:
         7a:ba:9e:f4:80:3b:2c:15:55:6c:c2:65:95:cf:1b:52:4d:c6:
         af:79:23:6e:73:0c:f6:b7:7b:fa:b5:fb:c2:d9:80:bc:71:40:
         7f:e6:0d:2c:d8:e0:e8:33:4b:72:58:b7:4f:d9:a5:a4:90:d2:
         37:26:0d:c3:73:60:d4:16:b1:06:af:1f:20:45:b3:41:ec:a9:
         5b:71:f6:f7:27:8c:dd:b4:a2:7a:fa:de:00:3c:c2:de:99:2c:
         22:40:53:28:fb:20:eb:c4:d0:8f:43:aa:73:8d:15:7b:1f:d7:
         c1:f2:6c:51:d3:7d:6c:e9:68:a3:70:66:8f:6e:b4:5b:dc:e2:
         6a:0d:5b:39:93:cd:7c:11:88:32:e4:cd:22:ec:3e:13:39:17:
         3d:f6:60:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:27:56 2026 by rpki-client