Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6e64de75-625f-33df-9cb2-c04d2570367c.roa
File:                     6e64de75-625f-33df-9cb2-c04d2570367c.roa (raw, json)
Hash identifier:          d6X+h7mdelTfQgur2aIkKpUZk6Q5sYjAzkPMI/WWXCw=
Subject key identifier:   5F:71:4F:F2:FF:0C:37:4A:F7:98:CB:CC:D5:CB:8F:50:DD:13:CA:C0
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F4989BB0FCA63B75E92386D00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6e64de75-625f-33df-9cb2-c04d2570367c.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     60594
IP address blocks:        38.56.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:bb:0f:ca:63:b7:5e:92:38:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=0cf00eab-05ea-4b04-b597-34a9cc0bf6a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:70:0e:59:b7:9c:55:b8:95:c8:b0:19:fd:e3:
                    b3:14:e9:67:32:f8:8b:56:45:64:5e:38:9a:19:bc:
                    6a:b3:43:d4:f2:61:75:f7:0d:f9:49:c1:0c:bf:d9:
                    d5:0a:bf:d4:aa:a9:f1:bd:be:3f:cd:8b:50:c8:fd:
                    b1:89:12:6e:aa:39:ad:3c:90:5d:1b:b4:76:c7:ce:
                    9a:63:ee:4f:9e:45:6b:da:d0:aa:0b:87:bc:e1:ea:
                    b9:b3:c9:df:c3:72:a2:f0:01:6f:de:d2:76:a0:4c:
                    40:c1:51:31:82:d6:34:f6:ff:ab:ab:7c:af:27:17:
                    6d:bc:29:0c:9e:d0:11:9e:f4:dc:8e:8e:74:ba:47:
                    04:eb:65:aa:ac:b7:f0:5a:30:b7:d8:63:6e:ce:ce:
                    11:23:2d:71:73:8a:dd:11:28:f2:59:e4:49:5d:24:
                    55:a4:47:56:67:3a:82:0f:46:79:65:68:9a:f5:a7:
                    c0:7a:18:59:cb:f2:2f:f7:ce:49:42:9c:d3:81:d0:
                    62:3f:d6:92:b8:98:f1:9e:ac:51:ef:2f:c6:9a:e9:
                    5c:03:6b:0e:fe:73:97:96:5a:9a:9e:0e:7e:56:d1:
                    b4:1d:82:1d:72:55:a8:0f:43:9c:24:3d:d6:e1:08:
                    67:85:a6:67:49:3b:07:0a:d6:df:46:cd:63:d4:bc:
                    e8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:71:4F:F2:FF:0C:37:4A:F7:98:CB:CC:D5:CB:8F:50:DD:13:CA:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6e64de75-625f-33df-9cb2-c04d2570367c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.56.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:1c:2c:32:f2:52:22:6f:34:20:a1:5a:33:1e:ea:a0:0e:0d:
         6e:4a:c7:3d:35:08:94:1d:5a:4f:cb:61:b7:e5:01:6b:9b:1d:
         3d:92:84:36:b0:34:46:25:b3:20:43:59:b5:08:08:0e:27:69:
         02:f1:62:59:80:e9:13:80:f1:ff:a6:40:1a:4b:fc:6c:96:04:
         58:2f:da:9e:b0:6b:88:b4:87:86:1f:87:af:e2:c4:40:e8:bb:
         d5:7a:f2:51:60:c5:00:93:cd:70:d1:2a:fe:a1:4a:e4:25:2f:
         91:91:23:6f:cf:bf:40:92:03:ea:78:9d:15:df:3d:b3:75:2c:
         4a:da:22:ff:38:8a:6a:ad:b3:7e:48:f1:9a:bb:c5:81:31:6e:
         21:66:ca:a9:c2:8c:d5:ed:bf:19:05:6f:81:3d:88:57:70:2e:
         0f:05:65:01:9b:bc:d9:69:bc:07:c9:b9:90:34:fa:05:87:80:
         6f:13:d3:05:f1:a6:06:71:90:84:9a:60:1e:07:28:f3:df:44:
         4e:55:d1:8f:04:bc:8d:30:a5:b5:c0:f8:b1:8c:f7:b2:60:fc:
         c9:a8:81:83:3d:b0:46:42:cf:23:db:c5:1c:00:cd:e4:5c:89:
         bb:19:d7:d7:cd:8b:31:46:cb:b3:1c:e2:18:ec:df:08:43:ff:
         92:f9:dd:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:35:59 2026 by rpki-client