Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/683becb0-477a-3173-b330-2b640f5dd3b4.roa
File:                     683becb0-477a-3173-b330-2b640f5dd3b4.roa (raw, json)
Hash identifier:          ytl2eaxDHWjMsUuY51emJnLkZyBni2mxYllTnbUWIVY=
Subject key identifier:   67:4B:FD:59:76:1E:28:2B:0C:AD:A9:4D:BB:FA:BC:1C:8E:F8:8F:6A
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E736A153835A6D2683391BA80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/683becb0-477a-3173-b330-2b640f5dd3b4.roa
Signing time:             Fri 10 Jul 2026 09:00:12 +0000
ROA not before:           Fri 10 Jul 2026 09:00:12 +0000
ROA not after:            Thu 08 Oct 2026 09:00:12 +0000
asID:                     274202
IP address blocks:        38.127.220.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:73:6a:15:38:35:a6:d2:68:33:91:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jul 10 09:00:12 2026 GMT
            Not After : Oct  8 09:00:12 2026 GMT
        Subject: CN=778f2170-0cea-4658-9578-13db2048c41a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:36:ed:75:a0:5f:61:f3:4b:11:07:45:58:d3:
                    f7:80:95:cf:06:a3:f6:c5:6b:e8:5a:84:a6:52:c0:
                    2e:10:58:10:f4:24:cd:40:2e:b9:55:85:04:02:cb:
                    b4:50:02:7a:39:3d:d6:c9:c5:68:7b:2c:76:69:b3:
                    3c:c1:af:11:80:e0:d7:e1:00:e1:43:b8:f8:70:f3:
                    7f:4c:cf:99:a3:ea:7b:5c:c4:68:2a:19:26:1d:ff:
                    b6:5b:05:90:5d:18:2b:53:47:9d:ee:57:94:28:98:
                    59:83:5d:04:fc:ae:7e:be:59:8f:62:e9:99:16:c2:
                    1e:4a:e6:b7:50:5a:22:2c:49:82:af:a7:df:2d:ba:
                    ad:8c:72:30:22:40:87:30:a2:fb:b5:a2:02:14:41:
                    7d:c8:85:88:6e:05:1b:29:fe:2e:d9:e0:1a:1c:5b:
                    73:a6:1e:c9:90:67:84:28:45:e6:89:fc:c2:b7:3f:
                    25:ed:85:5e:ad:f7:12:5b:26:c5:39:8b:d1:71:d3:
                    50:f9:82:9e:b3:e9:bd:08:7a:90:f8:20:48:cb:5a:
                    75:ea:21:44:09:5b:b6:e4:78:77:d6:07:a5:b7:39:
                    d4:42:af:d2:8a:7e:fc:58:ad:4b:f2:b2:dd:49:44:
                    b6:83:c8:66:1a:c3:d3:9a:8d:37:9f:0e:8d:00:30:
                    af:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:4B:FD:59:76:1E:28:2B:0C:AD:A9:4D:BB:FA:BC:1C:8E:F8:8F:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/683becb0-477a-3173-b330-2b640f5dd3b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.127.220.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:f6:30:ad:d1:10:da:66:f4:6c:69:01:f3:3d:c5:85:c4:d6:
         a1:71:a3:1b:48:a2:a0:b1:a6:42:a7:44:e3:d1:bb:24:1d:8f:
         cc:c1:ee:27:dd:17:36:f0:34:98:f9:4b:2d:44:48:7d:b2:78:
         3e:67:3b:a9:79:52:e8:c7:c2:ca:94:95:3d:5c:c8:87:b9:c9:
         47:08:41:86:69:cf:c4:00:fa:01:b3:2f:5b:3f:49:fd:7e:9c:
         b3:cc:32:6f:ad:fd:88:26:3e:b6:e2:17:a0:c2:31:04:51:fc:
         27:46:b6:b7:11:c4:81:8d:44:95:c7:71:47:4d:85:bf:d8:41:
         24:50:7b:4c:14:89:85:27:c6:b1:8d:27:b3:13:4e:2e:f1:73:
         fd:5b:2a:99:ec:58:c0:ca:57:f1:1a:9d:a3:9a:32:bd:f4:2e:
         76:38:a8:69:68:b0:04:c4:94:47:cb:14:08:8e:22:59:13:8e:
         44:59:07:d7:c4:9a:99:39:59:bd:ce:63:7b:d0:df:de:4b:ae:
         a2:2b:40:c4:2a:01:6b:b5:00:84:2e:93:4a:28:f0:15:5b:90:
         42:b8:ee:e0:98:27:00:6e:89:3e:c3:6d:89:45:fc:bf:01:a6:
         fb:ee:49:9f:05:cb:89:07:96:ee:91:9b:17:d4:f1:a0:3a:e1:
         35:0f:ba:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:55:54 2026 by rpki-client