Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e9f5a67a-7e2d-32d3-80a1-c1258330d02c.roa
File:                     e9f5a67a-7e2d-32d3-80a1-c1258330d02c.roa (raw, json)
Hash identifier:          1MbNm7JyePpuqj0yGwDSdR4QmYTL6B70jiw8+Wz3LCA=
Subject key identifier:   22:37:9B:74:BF:7C:D3:75:46:F9:2D:9D:DB:A9:4C:33:EF:7F:48:BB
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E37646EE91D2B5DF98D279C00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e9f5a67a-7e2d-32d3-80a1-c1258330d02c.roa
Signing time:             Thu 18 Jun 2026 21:00:12 +0000
ROA not before:           Thu 18 Jun 2026 21:00:12 +0000
ROA not after:            Wed 16 Sep 2026 21:00:12 +0000
asID:                     138064
IP address blocks:        38.3.160.0/24 maxlen: 24
                          38.80.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:37:64:6e:e9:1d:2b:5d:f9:8d:27:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jun 18 21:00:12 2026 GMT
            Not After : Sep 16 21:00:12 2026 GMT
        Subject: CN=e174c2e9-ad33-4a24-a988-b86323ec2b40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:43:c0:fd:f0:de:1b:50:cd:cc:7b:7b:10:ef:
                    50:db:49:03:53:93:df:97:d6:9d:b9:5e:b1:1c:ad:
                    6d:bb:f6:b7:37:87:b2:50:c1:31:d4:fb:20:ab:e9:
                    f7:e2:2d:d9:08:90:06:7f:a5:33:ca:55:36:fa:ea:
                    34:bc:a9:2e:f6:82:c7:b5:f5:a5:9e:51:6d:bf:cb:
                    68:76:c4:cc:9a:a4:e2:8b:02:18:1d:49:b4:39:47:
                    9f:f0:3f:08:7b:d6:92:9b:85:b3:e7:4d:a5:b0:f7:
                    f6:bf:ed:0d:03:2b:fc:f0:c9:f5:c1:61:c9:48:26:
                    73:27:b3:30:cf:96:8a:8f:c5:81:c7:8c:e4:da:d7:
                    49:64:a2:c3:39:b5:f4:16:e9:cc:02:5a:f4:b5:d0:
                    4d:56:1a:bf:e7:82:de:6d:6e:de:40:dd:cc:11:c0:
                    d8:20:16:44:f2:58:e2:26:91:13:cd:de:f1:a4:cd:
                    15:61:d6:0c:ac:79:4e:42:ad:66:e8:bf:8c:41:84:
                    96:3f:15:7c:64:8d:d7:6b:50:95:d7:20:4a:e2:ff:
                    f6:96:37:41:e9:36:29:7f:17:fe:4d:e3:9b:aa:34:
                    55:04:e2:34:e8:88:d0:08:33:75:e3:3c:f9:ef:16:
                    5f:08:d1:2c:b1:9c:b9:e4:12:aa:48:83:51:9d:f5:
                    31:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:37:9B:74:BF:7C:D3:75:46:F9:2D:9D:DB:A9:4C:33:EF:7F:48:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e9f5a67a-7e2d-32d3-80a1-c1258330d02c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.3.160.0/24
                  38.80.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:0d:52:3d:21:3a:d8:6f:39:a6:f8:c2:2f:2f:b9:76:43:60:
         98:c7:ac:6f:03:d7:6c:e4:1e:a4:55:d3:7f:e0:76:a0:e9:1f:
         33:55:ca:c3:a7:f9:3b:7e:81:47:8d:4e:75:01:39:ee:26:46:
         5e:a7:4f:01:9d:89:0c:97:eb:20:6e:74:3a:53:78:64:cb:cf:
         70:40:7a:bf:d9:0c:8e:8e:c4:f9:f8:26:b7:bb:ec:e7:75:e4:
         9d:e7:01:05:ff:30:39:27:36:84:64:35:a8:38:6a:6a:6d:a4:
         ca:ad:db:d2:55:77:2a:54:83:40:27:aa:9e:a9:a8:59:50:da:
         a0:05:e0:70:24:09:ff:6e:7f:d4:8d:73:8e:46:6b:0d:7b:bf:
         cd:13:6c:20:48:bc:c9:66:30:bf:ba:df:b9:5f:ae:06:d8:11:
         c2:aa:a6:61:42:1c:42:47:36:08:9f:37:9a:75:28:81:e9:1d:
         40:67:72:a6:a5:df:de:8f:13:32:41:6a:92:da:99:46:39:0a:
         44:d6:9d:5e:f6:1a:b5:75:ea:5d:e2:e0:78:99:47:b3:e9:f5:
         a9:11:38:9a:87:a1:9a:90:54:cb:69:41:16:70:3b:ac:7a:1d:
         13:3b:72:10:a5:7d:58:f5:b5:e8:56:5e:12:c1:8f:88:48:4c:
         8c:f8:fb:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:03:45 2026 by rpki-client