Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/87cd9966-48b9-36a7-afbd-d25ebc5944ca.roa
File:                     87cd9966-48b9-36a7-afbd-d25ebc5944ca.roa (raw, json)
Hash identifier:          4+iqQXGRMFAa4XbChWFb+ou3s9T0A6fAW1bDs2Apcz8=
Subject key identifier:   C4:0E:A0:6D:8D:28:05:01:97:17:70:64:63:A3:CD:3D:7B:E6:F7:F3
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E3CF9BF0501617CDBB3C40180
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/87cd9966-48b9-36a7-afbd-d25ebc5944ca.roa
Signing time:             Sat 20 Jun 2026 21:00:12 +0000
ROA not before:           Sat 20 Jun 2026 21:00:12 +0000
ROA not after:            Fri 18 Sep 2026 21:00:12 +0000
asID:                     204170
IP address blocks:        38.10.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3c:f9:bf:05:01:61:7c:db:b3:c4:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jun 20 21:00:12 2026 GMT
            Not After : Sep 18 21:00:12 2026 GMT
        Subject: CN=92b783e6-c4a6-48c1-8b99-4d2775f7905f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b7:ce:b7:48:29:d8:61:7b:38:51:07:14:02:
                    21:68:40:2b:ec:b8:bf:1b:51:91:64:54:8b:2f:ff:
                    37:0b:af:10:17:a5:28:14:32:4a:94:c2:60:78:a9:
                    f8:34:44:a8:ba:ab:6e:cb:5e:c1:b1:e6:88:94:1f:
                    5c:9c:d8:de:fe:5a:96:10:f7:fc:9b:3a:46:03:b9:
                    42:39:d5:57:6d:3d:15:3a:42:61:01:8c:b0:a5:bd:
                    d3:5a:3c:0c:67:be:1e:48:d7:2f:0a:20:5f:20:ea:
                    9e:6b:e2:ff:13:21:d1:bb:79:53:56:d8:6c:8f:bc:
                    a3:69:1d:7e:66:4d:10:0c:b9:9a:e2:3c:25:c6:de:
                    76:ec:80:10:78:e3:98:1d:b0:95:bb:52:db:e1:1a:
                    7c:51:12:7b:34:88:b7:f8:e4:87:e7:f9:ae:96:23:
                    71:3a:92:51:d6:24:19:9e:26:cd:ea:70:69:b6:30:
                    20:a5:c9:c5:d9:ef:af:71:fa:ac:5e:e9:29:e5:e4:
                    40:e8:77:9d:af:c5:eb:1e:9d:d9:db:95:e5:89:85:
                    0f:d3:5d:15:f9:e9:d6:93:1b:d8:f1:bd:30:13:94:
                    dd:ed:ad:2c:4b:75:84:c7:39:88:55:f2:c2:45:d2:
                    e6:34:38:58:16:fb:47:f4:d5:56:c7:ff:03:6c:ea:
                    6f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:0E:A0:6D:8D:28:05:01:97:17:70:64:63:A3:CD:3D:7B:E6:F7:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/87cd9966-48b9-36a7-afbd-d25ebc5944ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.10.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:f0:aa:eb:71:f0:ae:63:7e:a7:a8:68:fe:bd:57:bf:7c:4b:
         b8:af:db:1b:5d:f9:c9:c2:22:7b:0b:76:cc:93:84:c7:6b:e5:
         8d:1a:c5:75:01:90:35:48:5d:2a:19:a8:b1:9a:8d:bb:de:cb:
         c6:e6:31:f7:16:ab:03:e2:1e:56:c6:97:b3:2e:87:93:fe:a1:
         9f:31:a2:6a:c8:c2:b2:f1:31:4c:c7:78:f0:c7:f1:20:ce:65:
         76:06:08:53:e1:60:c5:1e:64:62:e9:8a:68:c9:2b:9a:ef:b4:
         06:45:47:28:1c:42:cc:32:fd:ee:73:e8:8a:a2:a0:38:2b:31:
         a7:27:b4:d2:f1:a4:6e:0a:d2:0a:98:69:e0:b8:26:61:34:58:
         3a:c7:a0:a4:bc:92:ca:14:f0:08:87:e8:5e:5f:7c:77:15:36:
         c3:59:df:cd:06:c6:c7:81:72:c0:7c:09:17:3f:b0:8c:b3:1e:
         4f:b0:7e:a1:cf:59:34:25:43:ca:2e:f9:19:21:cf:55:42:9b:
         c5:fe:16:db:a1:1a:9f:31:bc:fd:9c:98:f7:6a:66:16:5d:c5:
         68:ef:ab:b1:88:65:9e:e0:41:fa:e5:b2:a6:34:91:e8:b3:c1:
         23:30:3c:88:86:ab:8e:aa:a8:54:4e:9c:09:c0:08:f9:34:d2:
         e0:f3:be:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:21:35 2026 by rpki-client