Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/7c438d96-c9d9-3bac-a718-2f15f0a375f9.roa
File:                     7c438d96-c9d9-3bac-a718-2f15f0a375f9.roa (raw, json)
Hash identifier:          lOtFyu5yent+ExtTveplsJTpUvtBfLZ7FXAUNYq0TJc=
Subject key identifier:   09:98:2F:2F:B3:E9:C8:A1:82:05:BB:45:35:E1:04:AC:B0:02:03:19
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F31E8DF418560F7C894340590
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/7c438d96-c9d9-3bac-a718-2f15f0a375f9.roa
Signing time:             Wed 16 Sep 2026 14:39:16 +0000
ROA not before:           Wed 16 Sep 2026 14:39:16 +0000
ROA not after:            Tue 15 Dec 2026 15:39:16 +0000
asID:                     264582
IP address blocks:        38.9.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:31:e8:df:41:85:60:f7:c8:94:34:05:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep 16 14:39:16 2026 GMT
            Not After : Dec 15 15:39:16 2026 GMT
        Subject: CN=10e92b9a-378c-409f-a618-d77d5d5f913a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c8:a3:80:8f:17:7e:f8:4c:52:ea:2b:bd:5d:
                    de:37:7f:6c:73:3e:83:7d:87:67:10:cd:10:f1:2b:
                    a1:8c:e6:bb:c1:66:d6:29:f0:09:27:ad:bc:0c:32:
                    0e:b5:d7:e7:bc:b4:c3:2c:b3:b1:34:d3:19:d5:21:
                    4e:a6:48:23:61:86:a2:6b:ea:03:68:19:b6:da:b0:
                    a1:fd:83:48:8f:e4:dc:e9:81:98:94:36:b5:f7:d3:
                    66:47:0f:c2:33:7c:b3:c9:41:ea:f0:10:3c:4d:2d:
                    77:fd:ca:39:c5:e5:c4:82:36:31:fa:dd:30:f3:3f:
                    b6:10:4d:26:24:13:4b:e9:8d:ea:6e:fc:d8:61:17:
                    3e:ae:4d:74:f0:e6:cd:f1:fd:90:b3:9c:5d:1f:08:
                    97:88:be:d9:91:c8:25:4d:96:f5:fb:f5:bc:28:13:
                    a5:2d:7b:63:ee:0a:7b:ff:08:2b:03:f1:fa:82:53:
                    af:04:47:90:76:cc:8d:56:50:1b:a5:62:1c:94:db:
                    d6:97:f9:7c:b9:89:cc:64:09:e3:95:58:5f:ef:03:
                    51:c4:00:17:39:e5:5d:c1:b9:98:2a:fa:80:b9:ed:
                    ff:33:38:70:d6:8f:4c:4e:76:d4:61:cf:4f:ba:ff:
                    93:56:3a:66:9e:2e:84:ea:9b:a3:09:aa:2d:38:6a:
                    8c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:98:2F:2F:B3:E9:C8:A1:82:05:BB:45:35:E1:04:AC:B0:02:03:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/7c438d96-c9d9-3bac-a718-2f15f0a375f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.9.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:c3:11:d9:e1:b0:4f:51:cd:93:cf:09:c4:b4:51:89:77:c6:
         31:cd:fe:8b:b5:d5:9a:be:b9:1d:dd:f2:fa:92:2a:c6:5e:a0:
         bc:53:df:3f:7c:28:eb:6b:09:6a:46:b1:63:ac:fc:c7:a5:32:
         1b:00:50:d1:e9:13:bb:f1:0c:02:e3:19:3e:97:81:6d:6b:d7:
         9f:2e:38:53:55:7b:62:6f:61:a5:25:cc:7a:b8:bf:b2:5f:dc:
         54:53:64:e3:ed:6b:4c:4d:2f:de:f0:43:a2:a1:84:8d:88:86:
         48:0a:e8:6e:fd:0e:e7:5f:b2:15:fd:12:f2:70:7d:7c:de:61:
         1b:9f:d5:61:45:bf:51:8c:56:e7:80:5a:44:12:72:f1:e3:b9:
         05:13:3a:84:ce:33:32:b1:93:b9:ed:f8:2a:f4:ac:0e:cb:51:
         b4:67:fc:6f:9d:8d:c5:a1:0c:1e:0a:b2:4f:62:7e:a9:7e:4f:
         c5:79:c9:dc:2f:d7:5a:95:8f:a2:fc:00:1d:54:16:9f:0a:c3:
         64:c5:03:d0:a0:2b:ee:d9:36:a9:60:f8:96:3e:88:f3:a3:7a:
         e2:6b:ec:95:3f:53:cd:c6:65:65:b2:aa:97:f6:ae:01:78:62:
         d5:9a:a2:65:b1:b6:09:56:86:4d:12:2b:ae:0f:85:0f:73:ff:
         16:50:93:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:53:09 2026 by rpki-client