Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d246c8a6-e1f3-3fb6-9853-98473673e67d.roa
File:                     d246c8a6-e1f3-3fb6-9853-98473673e67d.roa (raw, json)
Hash identifier:          7nE3oyIBfcRLFRHuizlKsum/qyZin1xkZQp55CCYTCk=
Subject key identifier:   92:EC:46:7D:5C:85:C3:EF:11:7C:14:3C:9B:C3:1E:56:54:87:1A:86
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F4973445B1D4AE98CDF7EE800
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d246c8a6-e1f3-3fb6-9853-98473673e67d.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     395088
IP address blocks:        38.87.226.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:44:5b:1d:4a:e9:8c:df:7e:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=2ccd1162-c953-451f-aa56-8e50def1fb4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:2f:d0:96:61:85:63:ba:d3:ff:ae:9c:33:1e:
                    a3:76:3d:3b:6b:95:98:7a:cf:3e:fd:f1:3a:74:f8:
                    11:0c:28:13:a4:bc:c6:69:b7:2b:56:7e:cd:33:03:
                    2f:b0:69:88:9a:ac:78:2d:37:27:95:22:ce:2a:32:
                    93:fe:16:a2:18:60:9d:17:6b:fb:c8:fc:cd:04:de:
                    fd:ee:17:6d:66:5b:67:a5:b9:bd:be:4d:b7:f8:a7:
                    d2:56:e5:a9:61:0a:da:ef:15:b1:a1:8a:10:c3:87:
                    65:3a:75:8b:89:fb:8c:27:0c:b8:16:34:95:9c:36:
                    ee:67:10:46:66:2f:2a:85:4c:25:74:cd:b3:60:f4:
                    0f:20:e8:50:2e:d8:70:fb:ce:8e:18:55:11:c9:46:
                    1f:0c:d6:71:45:77:38:37:5a:6d:f0:3c:11:fd:5a:
                    68:27:55:49:9a:d3:a0:9d:bf:1a:47:5d:a1:6c:a3:
                    16:96:5e:4e:a2:5c:a6:82:e4:d9:31:20:6e:52:f6:
                    bd:5e:db:b8:08:e7:9e:74:62:82:1e:ec:e6:eb:82:
                    d4:1a:be:7a:97:7e:a0:dc:98:97:d6:aa:27:f5:88:
                    33:b6:a3:0b:1e:b0:db:56:11:19:cf:22:c0:5f:05:
                    79:db:c7:14:46:c4:60:c9:c2:4d:59:82:33:ba:cd:
                    58:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:EC:46:7D:5C:85:C3:EF:11:7C:14:3C:9B:C3:1E:56:54:87:1A:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d246c8a6-e1f3-3fb6-9853-98473673e67d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.87.226.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:51:9b:d1:bb:1f:91:e0:d5:73:ba:89:8b:a0:c9:cf:ef:45:
         d0:0e:6a:c9:0b:7c:6a:09:74:08:a4:04:80:54:4d:d3:74:0a:
         20:e5:fe:b5:c4:79:3f:c6:9a:0f:0d:f0:f2:2f:1a:c3:db:f0:
         70:e8:63:40:e1:89:58:8b:ae:0d:65:c7:dc:73:00:1f:88:76:
         c1:b8:04:09:6b:f0:b0:a6:5f:0d:9c:75:2e:e5:a8:4c:a9:aa:
         b7:87:01:c1:69:45:ca:45:a5:d7:59:43:cf:81:6a:bf:48:4d:
         f2:c7:9c:48:6d:e7:27:08:72:0a:47:b5:dc:a8:b5:11:3a:a0:
         28:58:c7:1b:d8:fe:ba:55:18:8b:92:08:8d:3b:60:8b:7f:9b:
         29:9d:4a:c7:6a:1b:6c:2f:47:93:b2:35:56:7f:ef:11:33:a5:
         7a:29:14:2b:f8:c7:41:42:49:98:a9:21:10:8a:78:05:36:12:
         97:67:d7:01:10:f0:4c:be:2a:7d:27:ab:c8:b0:88:58:04:ba:
         cb:4e:64:ce:88:9b:35:f0:0b:0b:c6:97:62:94:44:bc:d3:c5:
         a0:ee:68:ae:a7:b7:04:b3:d4:25:5d:05:fb:f8:df:a6:2d:a3:
         36:7e:2d:ef:07:c6:72:79:69:a6:97:2e:53:8b:64:a6:6a:54:
         85:77:f2:da
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc0RbHUrpjN9+6AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MmNjZDExNjItYzk1My00NTFmLWFhNTYtOGU1MGRlZjFmYjRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgi/QlmGFY7rT/66cMx6jdj07a5WYes8+/fE6
dPgRDCgTpLzGabcrVn7NMwMvsGmImqx4LTcnlSLOKjKT/haiGGCdF2v7yPzNBN79
7hdtZltnpbm9vk23+KfSVuWpYQra7xWxoYoQw4dlOnWLifuMJwy4FjSVnDbuZxBG
Zi8qhUwldM2zYPQPIOhQLthw+86OGFURyUYfDNZxRXc4N1pt8DwR/VpoJ1VJmtOg
nb8aR12hbKMWll5OolymguTZMSBuUva9Xtu4COeedGKCHuzm64LUGr56l36g3JiX
1qon9YgztqMLHrDbVhEZzyLAXwV528cURsRgycJNWYIzus1YaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJLsRn1chcPvEXwUPJvDHlZUhxqGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZDI0NmM4YTYtZTFmMy0z
ZmI2LTk4NTMtOTg0NzM2NzNlNjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJlfiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK1Rm9G7H5Hg1XO6iYugyc/vRdAOaskLfGoJdAikBIBUTdN0CiDl/rXE
eT/Gmg8N8PIvGsPb8HDoY0DhiViLrg1lx9xzAB+IdsG4BAlr8LCmXw2cdS7lqEyp
qreHAcFpRcpFpddZQ8+Bar9ITfLHnEht5ycIcgpHtdyotRE6oChYxxvY/rpVGIuS
CI07YIt/mymdSsdqG2wvR5OyNVZ/7xEzpXopFCv4x0FCSZipIRCKeAU2Epdn1wEQ
8Ey+Kn0nq8iwiFgEustOZM6ImzXwCwvGl2KURLzTxaDuaK6ntwSz1CVdBfv436Yt
ozZ+Le8HxnJ5aaaXLlOLZKZqVIV38to=
-----END CERTIFICATE-----
Generated at Sat Oct 3 22:56:12 2026 by rpki-client