Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/fa9071b7-2809-328f-982c-da5361281bd6.roa
File:                     fa9071b7-2809-328f-982c-da5361281bd6.roa (raw, json)
Hash identifier:          K1imtHuY2h8vARzdmcYMV3Li0cVXxKDYomj9AiU2ZnE=
Subject key identifier:   18:3F:C9:61:7A:37:2D:9B:CD:EF:D2:7E:E5:1C:83:72:07:5D:F7:9F
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F498B2810282FE39DA1352100
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/fa9071b7-2809-328f-982c-da5361281bd6.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     274072
IP address blocks:        38.150.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8b:28:10:28:2f:e3:9d:a1:35:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=78dffb34-3798-4bd3-82c7-888f9fd405a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e4:f3:d5:84:d0:2f:a7:82:66:e6:b5:cd:f5:
                    66:15:06:c1:93:60:cb:28:a7:bf:a2:b0:47:ab:71:
                    b4:99:3c:96:33:2e:07:95:55:b7:aa:40:b6:f6:a3:
                    90:d4:7c:a3:d3:5a:52:cf:22:b1:76:5d:c8:81:78:
                    da:ac:4b:9d:d8:ec:5b:86:44:bf:40:f5:40:31:3a:
                    a6:b4:9b:16:e9:9d:fd:63:ec:fb:5a:b1:3a:3e:80:
                    69:d1:19:34:b1:af:0f:b0:71:d5:c0:10:13:4c:2d:
                    97:a8:df:89:18:8e:51:38:69:d7:57:e0:e7:15:9f:
                    d7:76:bc:4a:d6:13:03:98:dd:19:9a:2e:f2:05:5c:
                    f9:3a:70:56:e0:9b:23:41:4f:2f:cf:4f:20:5b:de:
                    48:dd:78:2e:30:c4:2c:7e:32:b3:5c:82:32:6e:a0:
                    6a:16:99:1f:81:62:6c:99:f1:9c:2c:e5:f1:c3:21:
                    b6:3b:0e:04:b9:48:ef:b4:93:25:fc:6b:19:8a:2e:
                    5b:1c:76:f2:fd:d1:8b:ac:59:e5:d4:9a:e6:aa:be:
                    8c:71:ac:db:f7:35:cc:0e:9d:d4:d5:8b:7b:fd:e2:
                    24:4a:6e:d8:a1:24:9e:98:d9:ae:d1:f0:46:11:c1:
                    ba:30:5f:a9:02:5b:84:05:a3:d2:52:18:53:ad:08:
                    cd:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:3F:C9:61:7A:37:2D:9B:CD:EF:D2:7E:E5:1C:83:72:07:5D:F7:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/fa9071b7-2809-328f-982c-da5361281bd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.150.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:7e:b6:99:3b:01:dd:40:d0:67:f8:bf:1b:41:1f:a7:4d:da:
         48:14:ff:4e:fe:52:fb:5e:2e:a8:7b:dc:88:66:24:d6:26:3d:
         0e:11:0f:41:d2:34:46:6b:6a:4a:6a:fc:ff:91:66:b7:41:5c:
         1d:5f:c9:e1:2e:36:c9:90:f3:06:5a:9a:a4:85:1b:11:59:2f:
         a0:2e:85:03:59:22:1d:be:aa:fd:d5:eb:15:b2:28:b5:95:62:
         b7:37:f2:08:ba:e1:28:04:2e:65:63:86:31:a2:1e:e6:0e:49:
         f6:e0:fb:4a:33:9c:2f:b8:1c:d8:2f:67:f6:51:20:e7:2c:00:
         5f:c1:e6:4a:6b:96:b0:7f:08:29:7d:cd:bc:c0:95:9f:7f:4f:
         3a:66:b5:d5:fc:84:e8:e6:c2:bf:4e:ba:a5:fa:01:b3:59:09:
         f1:17:07:f2:b5:87:0d:46:00:d3:b3:ef:fc:0d:c0:99:e6:9b:
         b0:f8:52:01:07:7d:b9:4f:45:a1:77:c4:e8:f1:ca:ba:44:06:
         cc:af:68:ad:d3:73:9b:50:0a:1d:a1:9c:8f:ae:cf:8c:f9:d1:
         d0:2b:38:dd:90:a8:d6:8f:d4:68:14:c7:eb:d3:f1:10:22:9e:
         f6:a8:a9:08:97:9e:49:a4:d8:b3:d7:85:47:8e:81:c5:c6:fd:
         df:d6:86:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:57:30 2026 by rpki-client