Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bb48864d-47b2-37de-8d6a-f6f93dd5a7ce.roa
File:                     bb48864d-47b2-37de-8d6a-f6f93dd5a7ce.roa (raw, json)
Hash identifier:          eucUxnDzrNKCtxf/44xsCVPZbqItQUqHM3GyPPftngI=
Subject key identifier:   CB:59:7E:79:F3:CE:3E:AD:17:64:50:56:F3:EA:E9:0C:56:62:B9:F4
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E991A51BD04AE822E7CE89200
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bb48864d-47b2-37de-8d6a-f6f93dd5a7ce.roa
Signing time:             Thu 23 Jul 2026 21:00:11 +0000
ROA not before:           Thu 23 Jul 2026 21:00:11 +0000
ROA not after:            Wed 21 Oct 2026 21:00:11 +0000
asID:                     212337
IP address blocks:        38.224.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:99:1a:51:bd:04:ae:82:2e:7c:e8:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jul 23 21:00:11 2026 GMT
            Not After : Oct 21 21:00:11 2026 GMT
        Subject: CN=cb6bea17-828e-4e43-a861-0238ccf6fcca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a1:13:8f:e2:58:3d:a4:65:98:4e:b4:f9:9a:
                    67:fb:a0:5d:0d:9c:d1:29:54:a5:1d:3a:11:27:0d:
                    af:13:b3:c1:4e:62:f5:46:19:9f:f7:77:c7:44:bd:
                    ae:ae:5c:2f:0b:77:55:c2:cd:f7:e2:3f:3f:04:e4:
                    8f:6d:19:a3:1e:5e:ff:56:4b:4c:ad:d3:3c:18:45:
                    a9:dd:ab:31:f7:6a:2c:09:3e:a1:69:85:f8:06:99:
                    e2:62:f2:ad:0a:d5:37:ec:e5:58:89:a7:5a:3d:8b:
                    08:74:9b:38:89:49:7c:46:46:03:a9:c9:da:78:de:
                    38:e6:a8:4e:1b:18:28:e5:27:05:14:cc:8f:8a:fd:
                    51:90:24:b9:4d:f4:12:71:1a:be:60:8d:94:4d:b6:
                    db:1c:97:cd:2f:ae:5e:32:df:c9:d7:6f:24:e2:df:
                    fb:f4:58:16:ed:0f:1c:90:89:87:44:eb:10:69:7e:
                    e7:95:dc:8f:43:4d:c5:de:3a:d3:00:95:6f:6b:94:
                    dd:e1:39:e9:44:38:15:16:31:43:37:40:fc:c9:a5:
                    5b:5f:e4:da:db:78:61:d5:41:ca:c8:d1:12:d8:68:
                    bb:86:98:ea:fa:80:c0:80:3e:02:89:17:dc:ec:c7:
                    28:78:e9:f5:91:b6:a3:c9:af:32:23:03:37:44:c1:
                    1e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:59:7E:79:F3:CE:3E:AD:17:64:50:56:F3:EA:E9:0C:56:62:B9:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bb48864d-47b2-37de-8d6a-f6f93dd5a7ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.224.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:b1:ce:0b:93:40:ac:36:47:03:a3:d1:10:e8:97:db:56:f5:
         99:18:aa:1a:46:bb:53:28:53:a5:2c:c3:92:f5:84:e6:31:e5:
         44:48:f3:95:5b:07:38:3e:03:fc:00:3e:d4:95:07:2d:e8:37:
         1d:e7:3e:54:40:46:83:89:47:2d:97:4e:ef:c7:24:6f:16:45:
         16:9f:14:97:83:71:ed:cf:26:64:a6:96:a5:76:51:3e:83:f6:
         1d:dc:f1:31:71:c7:83:fe:03:08:e7:8c:6f:de:c3:e6:33:c8:
         b9:e2:2a:11:ff:32:92:2f:a1:c5:36:e9:e9:17:b5:f9:2a:24:
         76:01:7e:fe:b7:3a:58:b9:18:7a:a6:d0:cc:95:13:b1:18:ce:
         28:9f:7c:48:05:56:c6:47:f1:52:df:b9:5d:b3:e2:7d:32:c1:
         f6:31:2c:eb:3f:00:c2:a7:2e:81:0e:16:4b:80:7f:76:2e:71:
         db:c8:a1:59:b1:6a:88:cb:7d:a9:18:a7:d8:21:81:97:72:d5:
         c0:58:ca:40:94:a7:a5:ef:dd:41:d9:eb:80:c4:90:1c:df:8a:
         14:ec:5e:8f:42:4f:46:cf:a6:53:85:09:f5:7a:ad:eb:d5:69:
         ad:f5:2c:fe:39:ea:ff:d6:fc:55:af:2b:d4:b9:16:de:b8:e4:
         fc:0c:60:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:06:16 2026 by rpki-client