Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8dc5e404-d457-327e-acc0-7d988251b645.roa
File:                     8dc5e404-d457-327e-acc0-7d988251b645.roa (raw, json)
Hash identifier:          DhecDjnKzcA7uBinTSCTMkryPDxigC2PAUJ4w7V16O4=
Subject key identifier:   EA:E3:77:1A:AF:B3:50:CA:E0:F4:65:86:90:21:4E:A1:55:24:5E:73
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E7E94D0F03993011678A0BF40
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8dc5e404-d457-327e-acc0-7d988251b645.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     272809
IP address blocks:        38.51.156.0/22 maxlen: 24
                          38.51.176.0/22 maxlen: 24
                          38.51.180.0/22 maxlen: 24
                          38.51.184.0/24 maxlen: 24
                          38.83.88.0/22 maxlen: 24
                          38.83.92.0/24 maxlen: 24
                          38.83.93.0/24 maxlen: 24
                          38.207.192.0/18 maxlen: 24
                          38.247.192.0/18 maxlen: 24
                          38.248.128.0/18 maxlen: 24
                          154.45.128.0/18 maxlen: 24
                          206.85.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:94:d0:f0:39:93:01:16:78:a0:bf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=ad97632b-f8bd-4721-9a2e-b7ac2d9c8468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a2:5a:56:9d:a8:51:4f:00:5c:96:fc:95:af:
                    02:71:96:0d:59:98:13:8a:69:1c:33:0d:a6:6c:23:
                    7d:1d:a8:09:29:44:ab:2a:63:a3:fc:2d:30:e6:2a:
                    df:c0:96:20:ba:e2:f1:56:22:19:0a:d6:a3:78:8b:
                    76:34:cc:4b:be:ca:13:00:f3:01:13:19:34:32:2d:
                    ce:9c:7f:73:df:dd:34:c1:c3:da:7b:b3:04:30:49:
                    64:55:3b:97:e7:af:da:13:5e:4e:eb:14:8f:f2:02:
                    38:fd:56:86:d9:7f:b5:cf:9e:ca:34:6e:23:08:d8:
                    b8:0d:92:d9:02:b3:bf:a2:1e:a7:79:0a:d9:61:d7:
                    29:6c:79:72:c0:3b:e0:5b:c8:a7:98:52:39:2f:e2:
                    eb:49:53:22:00:c8:b9:ae:b9:0a:48:f2:88:b3:cf:
                    75:1d:a3:db:93:9f:c6:18:25:ae:cb:0f:c3:bf:3c:
                    7b:28:99:c4:7e:0e:d3:b5:34:e8:58:d4:e0:52:45:
                    10:44:d8:e3:4b:f4:e7:61:b5:02:2e:af:a3:7b:25:
                    d4:25:fa:24:7d:80:fb:59:5d:8e:e0:af:e1:02:90:
                    e3:ed:b1:ca:0d:7d:d7:81:3f:b1:21:17:73:55:13:
                    17:41:c9:f8:0d:d1:45:47:22:55:5d:81:6b:e4:05:
                    12:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:E3:77:1A:AF:B3:50:CA:E0:F4:65:86:90:21:4E:A1:55:24:5E:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8dc5e404-d457-327e-acc0-7d988251b645.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.51.156.0/22
                  38.51.176.0-38.51.184.255
                  38.83.88.0-38.83.93.255
                  38.207.192.0/18
                  38.247.192.0/18
                  38.248.128.0/18
                  154.45.128.0/18
                  206.85.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:9a:cb:49:17:b4:6e:63:04:91:c8:0a:b2:a1:58:89:91:b9:
         f6:90:55:f3:ea:e9:15:b0:0d:71:47:de:11:ac:a7:4a:98:9d:
         eb:5c:de:69:27:d7:8a:aa:77:67:95:e2:55:2c:09:6d:f9:55:
         ac:cb:e6:f1:74:e2:23:b4:f0:a8:53:be:5a:ee:a2:16:52:8c:
         c8:6d:b5:89:cb:20:fa:5e:a2:de:17:6d:8f:90:20:56:2c:9a:
         17:6c:ad:6d:d0:ac:4d:31:58:c6:8f:88:a8:f5:5b:d5:d2:01:
         84:93:69:b5:af:b4:8b:f1:11:77:79:68:b3:bc:75:e0:60:2e:
         22:eb:c8:8b:36:19:1e:60:c7:53:c2:91:6d:23:ec:91:18:23:
         07:cb:2a:5b:f2:ee:69:b7:62:47:b9:d7:a9:2d:df:11:27:5c:
         34:21:c4:7d:cc:a0:c0:52:2c:34:c6:61:70:48:28:ce:e9:ba:
         05:00:8a:cc:9d:fd:72:a9:f1:76:af:89:03:f9:8a:ec:85:32:
         d7:ae:e5:f7:2f:be:f5:e4:e2:ca:c5:e7:31:7b:13:38:a0:c7:
         a6:7b:e8:08:b6:f3:e2:ad:3d:94:19:5a:f4:d1:bc:b2:58:c5:
         db:98:e8:76:b9:9c:ac:75:ee:d9:c9:93:e7:8b:1d:d0:1a:b6:
         9f:35:93:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:26:25 2026 by rpki-client