Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ff1d4931-75bb-34fb-b5e6-467675bc2b84.roa
File:                     ff1d4931-75bb-34fb-b5e6-467675bc2b84.roa (raw, json)
Hash identifier:          h2yBBv4bE+VIGpCRiNZ9ibx4tNtzYKIlZWAT7MkFZsA=
Subject key identifier:   D8:53:94:22:56:4D:35:AF:57:4A:1C:6C:90:4D:3E:BB:34:A6:CB:7D
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D44FA6FB1E294E181E927F880
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ff1d4931-75bb-34fb-b5e6-467675bc2b84.roa
Signing time:             Tue 24 Mar 2026 01:00:31 +0000
ROA not before:           Tue 24 Mar 2026 01:00:31 +0000
ROA not after:            Mon 22 Jun 2026 01:00:31 +0000
asID:                     264758
IP address blocks:        38.156.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:fa:6f:b1:e2:94:e1:81:e9:27:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Mar 24 01:00:31 2026 GMT
            Not After : Jun 22 01:00:31 2026 GMT
        Subject: CN=fdb88fcd-0001-4d1b-ad8b-ae3e2bd12480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9d:9c:c2:ae:c0:55:4e:db:54:75:fe:ca:30:
                    c0:19:81:03:58:75:44:45:91:ad:f2:2d:34:2c:95:
                    5a:2a:81:cd:d2:ed:14:a4:01:4a:d8:3d:c2:12:cd:
                    76:62:83:c3:23:c2:4e:25:9a:e5:66:d9:81:2e:29:
                    90:1f:05:84:bf:20:52:ce:f3:4c:8e:b1:12:75:89:
                    49:5b:b3:b1:92:a3:a9:eb:80:fb:d9:3c:c7:ef:2d:
                    d4:ab:33:d6:b2:c3:15:53:20:f3:c9:83:e8:c2:f9:
                    ff:f1:7c:40:1c:ed:91:2d:b8:8f:63:67:1d:34:0f:
                    06:ec:6f:39:78:81:85:a5:32:16:c3:89:8c:55:8f:
                    b3:a1:c7:a7:d8:64:69:2d:59:5f:db:57:6e:aa:31:
                    2c:d6:77:da:fe:dc:b6:b0:a2:57:7d:8e:ac:7a:59:
                    a6:a9:ce:03:2d:76:b1:12:b1:3b:16:33:fa:ee:20:
                    56:23:18:58:60:d7:34:ee:39:dc:33:9b:7d:c1:c6:
                    54:7f:f7:1b:e4:ca:7e:1c:97:d4:e5:36:9e:d5:f9:
                    19:a1:8d:f6:f3:8c:37:e7:18:9f:d7:dd:95:98:2e:
                    3b:a6:eb:55:59:04:32:14:75:53:f2:a2:1a:20:ae:
                    05:b7:e7:3f:eb:36:78:6c:cf:ab:f2:3c:12:11:66:
                    ae:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:53:94:22:56:4D:35:AF:57:4A:1C:6C:90:4D:3E:BB:34:A6:CB:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ff1d4931-75bb-34fb-b5e6-467675bc2b84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.156.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:a9:1f:3c:2d:2a:6d:99:72:0e:f4:94:79:c3:fc:a8:26:30:
         25:17:5b:69:4c:55:ba:84:d6:07:01:93:cf:cf:36:d7:39:d1:
         06:fd:0d:8a:84:0c:a9:fb:e5:91:11:e5:64:4e:09:80:74:39:
         2a:94:de:c1:1d:1a:a7:91:c3:9a:26:4a:2d:9f:30:f3:1c:57:
         c8:71:2e:8d:fe:c9:38:48:c9:c6:1b:d2:5c:d7:6e:33:f0:6a:
         ac:db:89:74:0b:bc:26:e1:e8:c5:04:2b:68:8d:12:35:c8:0b:
         01:83:44:19:8c:da:af:46:48:5e:ec:67:df:0c:f6:0f:95:c5:
         45:27:88:1e:18:23:01:ef:dd:b1:c5:90:49:0f:ed:3c:72:dd:
         ba:5c:04:97:08:ad:dc:0b:ef:43:98:e7:18:45:39:0b:fe:6b:
         8e:86:2a:af:d5:02:23:c4:10:ee:d0:e8:85:48:d9:04:84:b4:
         f2:65:78:85:b3:f1:a7:6a:2a:d6:d9:56:f6:c6:5d:93:9a:db:
         f8:cf:40:95:d0:47:8d:ed:da:01:be:fa:75:c7:37:c4:61:2a:
         6a:5e:f2:f0:08:4a:c2:c9:e4:17:8b:07:95:37:b2:eb:19:5b:
         38:d0:12:bb:4a:2c:a7:89:89:68:58:8c:76:3a:3a:1a:d5:82:
         f2:a7:ce:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:29 2026 by rpki-client