Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ad195996-8cb9-371a-82f4-fe8e8d191c1f.roa
File:                     ad195996-8cb9-371a-82f4-fe8e8d191c1f.roa (raw, json)
Hash identifier:          Ne97ClDFPv0P2loXd7iBavYZLt2Nmi2BI95jKTgPikA=
Subject key identifier:   BF:60:C1:8F:3A:99:97:FF:62:EB:31:86:69:7D:4E:57:0E:FB:86:B1
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E2E1E43DEAFB24BC6D13ED500
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ad195996-8cb9-371a-82f4-fe8e8d191c1f.roa
Signing time:             Mon 15 Jun 2026 13:16:41 +0000
ROA not before:           Mon 15 Jun 2026 13:16:41 +0000
ROA not after:            Sun 13 Sep 2026 13:16:41 +0000
asID:                     270158
IP address blocks:        38.21.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2e:1e:43:de:af:b2:4b:c6:d1:3e:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jun 15 13:16:41 2026 GMT
            Not After : Sep 13 13:16:41 2026 GMT
        Subject: CN=1b5b286c-1abb-48cd-a965-5124044594d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:da:97:34:dd:20:c1:a8:06:58:4a:2c:4f:f8:
                    40:12:1c:cd:c7:76:c2:79:d0:d5:c6:3c:33:77:7c:
                    1a:3d:8c:a8:32:67:15:c4:94:7f:76:04:44:55:76:
                    b8:a6:1d:07:fe:e2:2f:c4:12:b0:af:87:c6:5a:91:
                    51:05:04:53:a7:40:c4:80:a9:7b:6a:ba:f0:0c:76:
                    1f:21:b7:a9:ea:56:01:50:80:4e:b3:e2:46:d2:23:
                    94:5c:c2:52:d5:db:c6:33:9d:ee:a5:48:9c:ad:99:
                    27:fd:39:b8:8a:ca:01:a9:03:9f:5a:00:d9:3e:aa:
                    b8:65:22:43:b3:f0:4f:9e:28:22:2a:eb:76:98:b3:
                    44:c1:09:e8:20:eb:5c:f9:02:7e:f3:5c:ac:d1:39:
                    a6:f6:3b:fc:d2:b0:3d:7f:ca:b7:f9:f2:be:6a:23:
                    52:92:4f:74:c4:10:4a:c0:60:5e:75:d0:43:a1:40:
                    75:09:e3:e7:01:87:6a:68:ff:d1:03:9a:80:92:41:
                    56:87:27:f4:a6:0a:71:55:85:1e:e6:7e:cf:d5:ff:
                    3c:d1:10:1d:b6:cb:5f:3d:c7:2e:b3:0e:18:7a:8d:
                    de:86:a8:d6:30:17:49:3f:5a:24:a4:3c:81:fc:34:
                    26:f6:55:8c:3a:32:8f:f8:36:11:8b:ee:35:34:79:
                    87:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:60:C1:8F:3A:99:97:FF:62:EB:31:86:69:7D:4E:57:0E:FB:86:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ad195996-8cb9-371a-82f4-fe8e8d191c1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.21.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:63:bc:d9:61:20:0d:dc:54:fc:26:98:32:af:80:a0:95:bb:
         67:d7:07:21:ea:b9:55:0c:8b:f0:0c:d4:ab:d6:80:38:86:6e:
         f6:b0:18:b9:3f:4a:80:aa:54:e8:1a:d6:58:ee:a1:be:0c:34:
         ba:55:18:dc:4c:0c:35:bf:08:2d:4b:e0:ef:1e:f6:b0:cd:61:
         9b:ce:cf:45:47:ef:95:53:96:2a:ef:27:9b:51:99:e6:c1:91:
         66:cb:7f:7a:0a:4d:2d:8c:29:36:e5:3b:6d:67:9f:c0:37:ea:
         54:ff:09:a7:2d:15:65:99:31:4c:4c:37:46:fd:ad:93:9a:57:
         de:15:6c:95:bb:86:9a:ce:34:fb:b3:6a:9c:b4:09:83:9b:c6:
         5a:68:3d:8b:f7:66:8e:79:31:e6:3e:99:36:54:77:db:55:74:
         82:ab:a6:44:da:ce:86:cd:dd:89:26:77:82:57:2b:a0:c9:8c:
         01:8c:2a:bd:05:83:8f:80:dd:e1:55:4a:a0:8b:4d:f1:5b:3e:
         ee:f8:0c:18:b7:c9:86:1b:94:aa:8c:b9:de:54:b8:c8:67:02:
         3b:85:47:49:07:fd:a0:2b:de:65:18:c8:e2:98:29:b5:a1:63:
         10:7c:a4:d3:98:d1:80:0e:a3:cc:41:30:b1:9c:64:82:96:e7:
         a5:81:56:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:19:49 2026 by rpki-client