Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d8710e0f-8ca4-3965-88d3-9c598bb9a707.roa
File:                     d8710e0f-8ca4-3965-88d3-9c598bb9a707.roa (raw, json)
Hash identifier:          tP1vtCDLFIPkbN7i01F0upuC/phraImgR65LEZdBCFo=
Subject key identifier:   94:03:C8:55:FB:93:57:0F:1B:F3:A7:4A:6D:65:80:E5:C8:66:E0:97
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584DCDC5CF5F3B0F8705C44C1900
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d8710e0f-8ca4-3965-88d3-9c598bb9a707.roa
Signing time:             Tue 12 May 2026 01:00:24 +0000
ROA not before:           Tue 12 May 2026 01:00:24 +0000
ROA not after:            Mon 10 Aug 2026 01:00:24 +0000
asID:                     273271
IP address blocks:        38.236.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cd:c5:cf:5f:3b:0f:87:05:c4:4c:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: May 12 01:00:24 2026 GMT
            Not After : Aug 10 01:00:24 2026 GMT
        Subject: CN=d3a2b949-1911-4637-bbe3-54b2a0269a33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a6:08:a9:db:a9:9c:fe:a0:db:1d:f3:86:11:
                    f5:f3:ed:e6:29:97:7f:b9:14:a0:11:96:8c:93:4a:
                    75:d1:b7:92:e4:fc:1a:60:37:d1:61:df:d3:c0:22:
                    91:5a:3a:91:f5:24:24:37:d0:fe:2b:f1:a5:7b:e9:
                    d3:c9:a9:54:4f:28:f9:f2:3e:f7:ad:46:36:6f:c0:
                    ff:77:22:49:34:e9:16:c6:0e:a7:be:7b:f2:93:b3:
                    e4:41:0f:a7:8b:91:8e:d3:f7:ea:49:b1:a9:16:81:
                    08:71:7d:a1:34:b3:44:5e:9d:92:d8:03:d1:56:09:
                    ad:20:81:14:a8:29:07:ad:7a:73:ac:08:f0:01:27:
                    bd:e6:44:c4:d4:fe:5e:07:1f:27:d2:9f:7e:43:28:
                    9d:8a:ba:44:89:bd:12:87:df:6a:13:0b:46:a7:da:
                    19:90:fe:52:27:b6:e5:82:87:e1:2a:b1:aa:b4:ab:
                    c4:83:8a:58:25:50:e5:e9:2a:4a:74:91:76:8d:74:
                    ef:5f:12:db:13:7d:75:09:2d:de:9c:06:a5:79:49:
                    d1:04:4f:77:10:d5:bc:7b:a3:c7:a3:37:98:dc:55:
                    5e:d3:16:1c:8e:48:b4:50:93:18:93:4b:08:62:51:
                    e7:0f:e7:5b:50:21:08:de:36:7d:87:a5:64:f5:5b:
                    5d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:03:C8:55:FB:93:57:0F:1B:F3:A7:4A:6D:65:80:E5:C8:66:E0:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d8710e0f-8ca4-3965-88d3-9c598bb9a707.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.236.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:76:1c:a0:68:95:0a:96:2b:40:1c:7a:f0:2e:5d:d7:45:2d:
         01:f6:7f:e2:6b:ad:b8:a8:b3:73:0e:6d:87:0d:82:b5:d0:73:
         d6:85:35:b8:a3:43:a9:c1:73:82:a6:95:8e:f5:11:53:29:4a:
         6d:1b:cc:bd:13:6d:42:19:8c:ea:0d:79:3f:50:e3:3f:29:9d:
         af:55:52:40:fd:75:fb:05:50:55:db:15:80:0e:4f:c5:17:b0:
         6e:81:a5:f5:73:e4:61:45:56:86:30:dd:81:88:95:09:84:36:
         a5:79:ca:13:0f:84:60:d5:4e:d3:6e:26:16:3b:24:c8:7e:1a:
         09:70:5f:96:93:8d:a3:bd:fa:58:fa:2a:ee:b0:5a:94:8d:f2:
         16:e3:67:55:b0:b8:24:95:18:73:b7:f7:2a:98:07:c8:0f:90:
         70:bf:ee:5f:b1:2d:10:e9:68:81:d3:49:4d:d8:75:03:88:5c:
         d8:c8:db:82:21:b2:79:c9:8c:7a:c3:5c:46:79:df:ec:32:5e:
         d1:f8:7e:79:8a:c8:e0:05:93:cc:9f:f9:03:46:d7:26:91:fa:
         dd:ca:53:b1:b4:de:77:52:d3:b5:48:8a:24:aa:3f:ab:72:fc:
         0d:71:91:79:7c:82:08:87:92:1e:a1:e6:b0:8b:57:91:82:4c:
         a7:61:60:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:33:50 2026 by rpki-client