Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bb6918c7-0317-3306-a245-d122a325cf6c.roa
File:                     bb6918c7-0317-3306-a245-d122a325cf6c.roa (raw, json)
Hash identifier:          yUUHz3Os1TH9u9Xyh0jmvsi5n4SdFcpmZl+saFZUSw4=
Subject key identifier:   C3:CB:55:1A:BC:EF:DB:2D:8B:12:B9:2B:75:1E:20:90:94:A2:84:AF
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E31A7077286C60B52064E53C0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bb6918c7-0317-3306-a245-d122a325cf6c.roa
Signing time:             Tue 16 Jun 2026 19:39:40 +0000
ROA not before:           Tue 16 Jun 2026 19:39:40 +0000
ROA not after:            Mon 07 Sep 2026 16:45:01 +0000
asID:                     44259
IP address blocks:        38.89.142.0/24 maxlen: 24
                          38.127.8.0/24 maxlen: 24
                          38.127.216.0/24 maxlen: 24
                          38.134.189.0/24 maxlen: 24
                          38.247.64.0/24 maxlen: 24
                          154.18.187.0/24 maxlen: 24
                          154.18.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:31:a7:07:72:86:c6:0b:52:06:4e:53:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jun 16 19:39:40 2026 GMT
            Not After : Sep  7 16:45:01 2026 GMT
        Subject: CN=de477c9e-4410-4178-a145-91a501339433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7e:e2:54:df:4b:54:57:62:cf:9a:dc:b4:19:
                    ae:5e:b0:51:b1:3c:a0:c9:30:51:ec:df:ee:67:dc:
                    e9:8a:14:00:f5:f0:1c:26:30:a2:80:9c:20:b5:39:
                    25:c1:fb:da:78:41:5d:f5:07:72:5f:c2:9a:1d:51:
                    5d:fd:ec:bd:dd:c0:8e:ad:7f:1f:d4:6c:de:00:ff:
                    9e:5a:6f:15:4a:45:91:ff:00:61:3b:7f:44:ef:89:
                    19:90:4b:eb:46:6a:d7:aa:89:53:33:a2:cb:3d:e2:
                    2a:d9:31:a5:16:7e:4e:d0:20:96:0e:00:ef:f2:79:
                    87:38:d1:96:56:c4:69:25:65:6d:ac:f7:92:b8:88:
                    b0:3a:52:6d:77:04:26:b7:fe:49:62:e3:b0:b5:d5:
                    ad:2f:c7:15:51:d8:a8:9f:09:de:1a:5d:9d:95:9d:
                    ce:27:bd:4e:77:65:90:eb:4a:24:20:d3:58:c2:94:
                    9d:4d:94:64:14:b9:db:03:a0:a9:1c:4d:98:60:b6:
                    5c:3e:c3:44:2e:57:89:72:d2:53:53:21:42:b4:2b:
                    fb:30:18:7c:f8:fb:8f:5e:9c:26:c0:08:39:8c:cb:
                    86:07:b0:d2:b3:5d:a2:fa:3a:59:7f:ce:fe:e0:7f:
                    3f:d1:87:19:cd:99:55:7a:23:7b:ce:a4:f8:70:57:
                    dc:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:CB:55:1A:BC:EF:DB:2D:8B:12:B9:2B:75:1E:20:90:94:A2:84:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bb6918c7-0317-3306-a245-d122a325cf6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.89.142.0/24
                  38.127.8.0/24
                  38.127.216.0/24
                  38.134.189.0/24
                  38.247.64.0/24
                  154.18.187.0/24
                  154.18.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:66:d3:b5:54:38:15:e3:4b:3b:de:9d:c0:d8:c4:13:85:c3:
         45:52:d5:e8:3e:2b:06:bb:fa:ce:f9:b8:07:43:25:a0:62:15:
         66:4a:60:83:cb:2e:50:d6:3d:d4:7f:67:cd:fc:65:0e:21:57:
         62:6a:df:55:8a:38:b9:9d:2e:5c:e5:ea:2b:05:b7:ef:c4:e1:
         ed:c0:85:8d:61:ae:7e:b9:4e:49:eb:08:62:2a:c0:88:37:51:
         82:bb:a0:a1:8b:ce:8c:2f:8c:ba:4e:8a:46:08:56:ef:2f:de:
         4a:6c:91:eb:1d:89:09:7e:24:9f:b2:0f:16:55:04:e8:67:54:
         28:b3:78:49:ce:2a:48:d3:60:53:18:d4:0b:64:00:ff:b2:45:
         ec:01:9b:af:e4:8f:47:fd:9f:79:a4:ab:e4:de:b1:7d:06:bd:
         c9:4a:fb:94:81:89:75:7a:96:9d:07:cd:0a:4d:99:00:c4:3e:
         74:7b:26:f3:5c:a0:1d:b8:3a:6f:3a:be:5b:09:89:70:0e:0b:
         1a:dd:b1:6f:be:63:e6:b4:5f:4a:74:e2:bb:7e:71:9f:e6:87:
         82:ae:4f:f0:41:cf:6f:a2:29:9e:16:27:a6:04:98:f4:d8:77:
         d8:96:91:e2:05:88:38:09:ce:1e:3e:df:97:b0:1d:e4:be:82:
         24:b1:33:31
-----BEGIN CERTIFICATE-----
MIIGZzCCBU+gAwIBAgIUAQ0Mn0MoWE4xpwdyhsYLUgZOU8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDYxNjE5Mzk0MFoXDTI2MDkwNzE2NDUwMVowLzEtMCsGA1UEAxMk
ZGU0NzdjOWUtNDQxMC00MTc4LWExNDUtOTFhNTAxMzM5NDMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnX7iVN9LVFdiz5rctBmuXrBRsTygyTBR7N/u
Z9zpihQA9fAcJjCigJwgtTklwfvaeEFd9QdyX8KaHVFd/ey93cCOrX8f1GzeAP+e
Wm8VSkWR/wBhO39E74kZkEvrRmrXqolTM6LLPeIq2TGlFn5O0CCWDgDv8nmHONGW
VsRpJWVtrPeSuIiwOlJtdwQmt/5JYuOwtdWtL8cVUdionwneGl2dlZ3OJ71Od2WQ
60okINNYwpSdTZRkFLnbA6CpHE2YYLZcPsNELleJctJTUyFCtCv7MBh8+PuPXpwm
wAg5jMuGB7DSs12i+jpZf87+4H8/0YcZzZlVeiN7zqT4cFfceQIDAQABo4IDeTCC
A3UwHQYDVR0OBBYEFMPLVRq879stixK5K3UeIJCUooSvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYmI2OTE4YzctMDMxNy0z
MzA2LWEyNDUtZDEyMmEzMjVjZjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAJlmOAwQA
Jn8IAwQAJn/YAwQAJoa9AwQAJvdAAwQAmhK7AwQAmhLvMFQGA1UdIAEB/wRKMEgw
RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv
cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAFm07VU
OBXjSzvencDYxBOFw0VS1eg+Kwa7+s75uAdDJaBiFWZKYIPLLlDWPdR/Z838ZQ4h
V2Jq31WKOLmdLlzl6isFt+/E4e3AhY1hrn65TknrCGIqwIg3UYK7oKGLzowvjLpO
ikYIVu8v3kpskesdiQl+JJ+yDxZVBOhnVCizeEnOKkjTYFMY1AtkAP+yRewBm6/k
j0f9n3mkq+TesX0GvclK+5SBiXV6lp0HzQpNmQDEPnR7JvNcoB24Om86vlsJiXAO
CxrdsW++Y+a0X0p04rt+cZ/mh4KuT/BBz2+iKZ4WJ6YEmPTYd9iWkeIFiDgJzh4+
35ewHeS+giSxMzE=
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:19:40 2026 by rpki-client