Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ecf51332-d73e-32fb-9c5a-355af3d7577b.roa
File:                     ecf51332-d73e-32fb-9c5a-355af3d7577b.roa (raw, json)
Hash identifier:          aJzaIWnDH/Zyo1bOjgd41RpmXsRZrAXmfs+ursmXEvU=
Subject key identifier:   42:48:12:86:DC:57:E7:6F:F0:6D:9E:E4:F3:C6:8B:2A:27:4B:BB:E1
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E3CF9BE02EE011F028ED1E4E0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ecf51332-d73e-32fb-9c5a-355af3d7577b.roa
Signing time:             Sat 20 Jun 2026 21:00:12 +0000
ROA not before:           Sat 20 Jun 2026 21:00:12 +0000
ROA not after:            Fri 18 Sep 2026 21:00:12 +0000
asID:                     212698
IP address blocks:        38.64.218.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3c:f9:be:02:ee:01:1f:02:8e:d1:e4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jun 20 21:00:12 2026 GMT
            Not After : Sep 18 21:00:12 2026 GMT
        Subject: CN=fcbab44c-8f8a-4ecb-952e-ccf9685cc12c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f9:d8:57:bc:a2:4c:f5:c7:57:05:d4:b6:2f:
                    e6:61:e7:a9:5c:3e:74:18:6e:49:d9:8b:97:0f:25:
                    3b:cb:f8:94:fd:86:dc:40:d9:02:ec:8a:d0:04:63:
                    e1:76:9a:bf:d9:83:87:f3:d3:dd:e2:27:78:e6:02:
                    ad:b2:94:68:15:4a:2f:cc:e9:26:19:3d:8f:b4:23:
                    57:5b:e5:e3:1a:83:c0:14:3c:af:03:9b:5d:33:13:
                    79:15:43:3a:f4:eb:a1:a4:47:59:a7:d0:9b:68:ca:
                    7c:fc:e7:bc:34:e1:d8:55:67:d5:58:40:b4:7f:e6:
                    1a:3a:d2:64:8b:11:75:f8:22:cf:95:5a:92:35:54:
                    6a:c9:25:75:16:6d:8f:59:6d:0e:82:68:15:ee:7f:
                    e6:47:d0:bb:db:f9:08:0a:6c:68:d8:49:e8:46:de:
                    8e:4f:a4:c0:f0:2f:83:69:fc:cf:c1:8b:49:1c:09:
                    62:a0:26:2d:96:6c:f1:ba:9d:9f:2b:66:ad:e6:8c:
                    5c:e1:0a:b1:eb:8c:57:c0:4a:36:e1:2e:9c:44:c1:
                    87:27:e1:6a:c8:0e:3f:ad:ba:a1:02:b5:bb:17:35:
                    f8:13:9f:49:2f:0c:92:4b:af:05:49:03:e2:e8:0a:
                    0d:22:bd:95:04:e7:73:3e:26:9b:d5:fa:da:44:dc:
                    57:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:48:12:86:DC:57:E7:6F:F0:6D:9E:E4:F3:C6:8B:2A:27:4B:BB:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ecf51332-d73e-32fb-9c5a-355af3d7577b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.64.218.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:71:0f:cd:c0:7b:7a:27:65:21:c2:1a:65:0f:33:74:05:06:
         06:a6:e2:3f:80:09:56:54:75:42:41:de:52:41:12:52:5b:13:
         47:cf:bb:11:75:a0:a9:6e:22:6e:50:7c:e8:30:df:ba:54:1f:
         c6:91:75:55:9c:db:bf:a8:28:e4:6f:46:ba:aa:cc:7c:9b:91:
         27:29:b7:39:5b:db:7c:9d:c0:17:2c:7f:be:28:23:0b:22:ed:
         3c:1a:51:28:4c:70:8b:09:73:4a:b5:58:bb:2d:ea:d4:eb:5b:
         1b:52:29:d6:e7:91:b2:b1:44:20:1e:bb:8a:a4:df:f2:4f:af:
         dc:a0:f2:54:46:6b:e5:e1:00:ea:0b:4f:1d:4f:42:7d:dc:4f:
         7e:7b:c9:b3:77:3b:21:e8:3f:97:47:3c:fb:b6:4f:7c:8b:1f:
         6f:2f:ba:b9:ac:a9:6c:b5:2c:cd:d6:3d:7e:18:76:50:43:4c:
         70:87:91:2d:7a:5c:df:c2:80:e6:6e:14:6c:b9:8a:63:d0:32:
         96:6c:2f:06:c4:bb:9e:e8:dc:3a:ea:b7:e4:7a:0a:cc:5b:5f:
         9d:45:9f:25:18:f5:ba:b3:d2:e2:e9:1c:93:7e:a4:93:70:85:
         2c:d7:db:13:d7:e5:38:79:9c:97:6a:e6:e0:ab:46:cf:4a:e2:
         81:99:f9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:05:58 2026 by rpki-client