Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ee4402c4-57eb-3695-9f4b-e2e292165bd0.roa
File:                     ee4402c4-57eb-3695-9f4b-e2e292165bd0.roa (raw, json)
Hash identifier:          pAnAaNg1Hi68Mn9JgMaNbv+nN7m+ko3zgpQjNvorSgA=
Subject key identifier:   C7:B2:10:2F:88:53:53:BB:E7:C1:4F:55:AB:AA:12:B6:8C:19:76:BE
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E683F5EE4DFEA407F233A8540
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ee4402c4-57eb-3695-9f4b-e2e292165bd0.roa
Signing time:             Mon 06 Jul 2026 09:00:12 +0000
ROA not before:           Mon 06 Jul 2026 09:00:12 +0000
ROA not after:            Sun 04 Oct 2026 09:00:12 +0000
asID:                     271612
IP address blocks:        38.3.172.0/22 maxlen: 24
                          198.242.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:68:3f:5e:e4:df:ea:40:7f:23:3a:85:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jul  6 09:00:12 2026 GMT
            Not After : Oct  4 09:00:12 2026 GMT
        Subject: CN=90477a9a-fb4f-42a2-8ec8-9b3c1c12009c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:35:52:78:ad:d6:58:5f:8c:01:02:33:46:00:
                    9f:75:dc:3d:40:57:6f:48:1b:9b:ec:4f:42:35:58:
                    2c:55:d3:45:7b:42:67:d8:33:00:27:ef:38:91:93:
                    25:7e:10:5c:ee:f2:54:88:86:22:77:24:c1:b9:fd:
                    1e:95:18:be:da:38:39:cc:37:57:2b:51:e7:f4:6b:
                    3b:78:3b:88:ca:ff:cc:66:11:bd:c9:da:bf:6e:ec:
                    df:c6:78:41:09:eb:4a:6b:63:47:1f:c9:e0:2f:c4:
                    49:ec:18:53:b9:92:79:a9:55:34:ff:b2:8c:e4:cc:
                    af:bb:a2:39:6d:e2:5a:07:20:1c:a1:9e:86:d7:0a:
                    11:1c:02:46:d8:e4:43:e2:7b:b2:62:ec:6f:59:7f:
                    f3:b3:b4:87:09:0a:98:e8:e4:43:61:cc:f7:30:23:
                    bf:50:8c:02:42:68:18:5b:b7:3e:c8:da:2d:2e:b7:
                    88:87:de:c2:06:d0:72:bc:b8:0e:ed:5f:09:3d:77:
                    8f:4e:bb:f9:29:20:b6:23:3c:e6:e0:5f:59:ae:05:
                    ee:cd:17:f3:c5:d7:3e:16:a3:88:07:57:f6:7c:e0:
                    e1:e2:1a:e5:be:a2:c8:d2:53:53:53:51:c6:81:f5:
                    ed:d0:56:4e:7e:86:da:96:ec:82:09:2b:d8:12:bf:
                    f9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:B2:10:2F:88:53:53:BB:E7:C1:4F:55:AB:AA:12:B6:8C:19:76:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ee4402c4-57eb-3695-9f4b-e2e292165bd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.3.172.0/22
                  198.242.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:d5:56:e8:45:f3:76:33:c2:42:87:08:63:c9:e8:8d:36:00:
         b8:2a:ce:e0:47:46:da:95:cd:30:26:8d:e5:96:2b:c4:c6:26:
         e0:b6:90:7d:b8:88:8b:de:33:50:87:e6:43:99:61:f7:38:9e:
         be:49:4a:7f:83:06:df:02:0a:90:c7:ce:f0:03:4e:85:33:6b:
         26:f1:c3:47:c0:ef:3c:45:96:35:b9:2b:cc:53:df:c5:3c:5d:
         dc:89:79:db:2e:26:45:82:f8:34:0e:9e:b5:6e:b6:7d:2c:04:
         d4:ee:dc:17:fe:31:c9:5b:e8:91:c0:21:75:1d:61:bc:78:0b:
         ca:6b:65:45:50:30:11:12:41:c1:3c:c9:8e:bd:57:50:73:5f:
         4b:9c:9e:09:19:0f:a6:1c:bc:47:74:10:d1:7f:3b:4e:5d:1c:
         d8:36:d6:63:bc:fe:82:69:d0:61:8b:ca:4c:fc:e9:02:b6:4d:
         5d:b1:58:c2:50:ce:37:9a:06:2d:f1:fc:49:04:eb:d2:8e:d7:
         93:c5:63:1b:49:8b:df:af:5d:56:ee:43:16:52:a0:95:7a:bd:
         ea:bd:e1:92:c5:85:0c:af:01:fd:47:59:cc:66:94:c8:84:aa:
         43:7d:d4:a4:9d:be:3f:ef:9e:c5:fa:f3:66:f0:40:1a:27:35:
         47:47:1f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:46:00 2026 by rpki-client