Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a17e80e1-11ec-37b1-81dd-fed9392921d3.roa
File:                     a17e80e1-11ec-37b1-81dd-fed9392921d3.roa (raw, json)
Hash identifier:          BRq6cnlcODyFAZ3ClMyD4AWZLoByctD+DlErpuHXHok=
Subject key identifier:   BD:6D:71:7D:61:E7:52:06:AE:DF:61:24:2B:BD:D2:0E:50:45:FC:64
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F4112CE4DECB21B41D0C83A80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a17e80e1-11ec-37b1-81dd-fed9392921d3.roa
Signing time:             Tue 22 Sep 2026 01:00:12 +0000
ROA not before:           Tue 22 Sep 2026 01:00:12 +0000
ROA not after:            Mon 21 Dec 2026 02:00:12 +0000
asID:                     266065
IP address blocks:        38.224.180.0/23 maxlen: 24
                          38.236.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:41:12:ce:4d:ec:b2:1b:41:d0:c8:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep 22 01:00:12 2026 GMT
            Not After : Dec 21 02:00:12 2026 GMT
        Subject: CN=b13ae309-45a5-442e-a7d0-b34c40af116f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a6:dc:d3:ee:33:1a:c4:fc:76:f9:b4:58:69:
                    8b:44:2f:36:da:22:fb:e2:71:b1:e2:98:1e:80:5d:
                    8f:77:b1:16:05:be:f9:6f:b4:21:ab:07:ff:a4:ce:
                    cc:15:3b:8b:05:65:43:be:51:2e:00:22:e4:75:b0:
                    8a:3f:87:f9:ee:90:cd:40:a2:aa:80:f1:2d:8c:bf:
                    0b:e6:3f:61:00:b8:0c:59:d1:cc:cb:e9:14:a8:5f:
                    2d:cd:d2:c3:12:32:5e:0d:bf:a6:82:51:0a:57:5c:
                    c4:6a:4e:94:93:0a:f1:79:4a:77:e1:35:33:eb:e6:
                    02:9f:bf:4d:d7:f0:36:69:f3:18:0a:51:91:04:c8:
                    f2:d2:da:90:aa:2a:a3:27:98:06:6f:9c:c7:3c:90:
                    0a:2e:c0:04:8c:1e:72:cb:e2:7f:84:34:ab:87:ec:
                    22:40:ff:3f:1a:7c:6a:65:a7:a0:49:ae:89:f5:e6:
                    1e:3d:85:ba:06:5c:fb:36:30:3f:07:8e:dc:3f:77:
                    93:8e:b4:b6:f4:5b:c4:ab:35:20:3b:07:8e:73:5d:
                    5a:40:ef:d2:dc:4d:8a:67:5d:58:cc:7e:bc:59:d5:
                    b8:2d:09:97:99:56:7d:be:2a:11:a3:8c:be:19:35:
                    ce:84:0b:e1:ac:55:ab:33:27:f7:00:42:b7:1b:c0:
                    e5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:6D:71:7D:61:E7:52:06:AE:DF:61:24:2B:BD:D2:0E:50:45:FC:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a17e80e1-11ec-37b1-81dd-fed9392921d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.224.180.0/23
                  38.236.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:b7:70:43:97:70:9d:86:46:12:a5:99:9b:66:3c:58:66:32:
         7d:b4:7f:42:47:7a:71:bf:e3:4a:31:a3:cb:df:25:c7:a7:b4:
         b8:8f:0c:44:66:b1:a5:a2:60:c4:96:29:f8:53:f6:6a:18:e2:
         9c:85:7c:20:a5:46:e1:84:80:7c:bc:d7:bc:74:95:e9:13:f4:
         45:7e:89:c0:88:4c:18:4e:5d:9b:99:7e:97:4a:dc:20:c6:a9:
         cd:a6:23:29:28:df:06:2a:e9:28:f2:fd:62:2a:31:97:24:7a:
         42:cf:a9:50:b4:1b:42:9a:d0:31:7f:77:f7:da:17:4e:3d:15:
         d0:e2:3f:9c:11:08:86:72:fa:e1:e4:e1:8d:ab:bd:6c:1d:00:
         f7:cd:3c:18:2a:11:06:56:6d:2a:cb:a7:83:99:71:c3:1d:e4:
         cf:fb:9a:97:32:39:fe:f8:de:99:c1:cb:25:96:9a:97:e9:04:
         59:6f:86:bc:56:8a:d1:e3:1c:d6:2c:dc:e9:19:36:ff:3f:12:
         99:b1:16:c4:03:b2:b2:b6:3f:9d:96:40:9b:e6:02:04:f3:a3:
         bd:4e:f1:07:7c:e2:b1:ef:a8:e9:8b:a8:df:2d:f4:2b:04:22:
         ff:e5:5a:a4:86:ee:f2:2f:05:5e:1c:93:eb:71:14:28:ff:24:
         3c:f6:8e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:54:41 2026 by rpki-client