Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/023bfb4e-64ac-3c7d-a8aa-e338cab87491.roa
File:                     023bfb4e-64ac-3c7d-a8aa-e338cab87491.roa (raw, json)
Hash identifier:          g62W2OjAXdqDVVg/M2leMtCc2NSzW8fug9/Xoaq1mMk=
Subject key identifier:   5B:F5:F7:ED:2F:E8:AF:55:47:A7:33:74:4F:8A:AB:BB:D6:59:EB:9A
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D7A055181F6EA78532DB3F360
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/023bfb4e-64ac-3c7d-a8aa-e338cab87491.roa
Signing time:             Sun 12 Apr 2026 01:00:24 +0000
ROA not before:           Sun 12 Apr 2026 01:00:24 +0000
ROA not after:            Sat 11 Jul 2026 01:00:24 +0000
asID:                     22598
IP address blocks:        38.147.144.0/22 maxlen: 24
                          154.7.132.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7a:05:51:81:f6:ea:78:53:2d:b3:f3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Apr 12 01:00:24 2026 GMT
            Not After : Jul 11 01:00:24 2026 GMT
        Subject: CN=5995195a-909c-4842-8e87-d52f05d15780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:69:fd:59:2e:6f:0d:95:eb:ad:df:e3:e0:7a:
                    94:58:75:db:b0:1d:eb:dd:af:4f:84:cf:f2:20:83:
                    6c:6d:c2:5d:5f:89:52:64:f7:3e:00:80:9d:6a:bd:
                    b6:48:4e:26:bf:f9:f3:66:df:0a:06:95:09:76:bc:
                    a1:b2:5e:41:3f:44:0e:f0:ac:f4:69:71:6d:70:af:
                    2c:31:d9:c2:e8:68:1d:eb:84:42:bb:b5:1d:86:cf:
                    88:5e:84:04:60:38:53:9f:0d:7c:25:b0:23:49:89:
                    f8:40:16:fa:9e:14:97:2e:1c:78:19:f8:83:8e:33:
                    12:d4:cd:1a:6b:03:5a:be:ac:75:1b:0b:c8:3b:13:
                    51:86:7a:6e:b3:a8:a9:27:1d:d3:ce:a3:44:80:35:
                    a3:e8:7b:9a:83:36:0a:a7:51:ba:58:bd:6f:dc:9b:
                    21:ac:bf:c6:e5:46:1a:d5:e7:6d:5d:02:55:12:fb:
                    97:56:05:79:cd:62:ae:f2:cd:a4:f6:25:aa:d1:e7:
                    88:69:36:df:46:a6:87:85:3c:75:81:b6:a3:e5:b5:
                    aa:ca:c8:c3:ca:ab:87:76:51:06:88:8e:aa:00:d5:
                    36:00:87:f9:03:3d:57:2e:46:fa:66:00:5c:82:cf:
                    1e:9a:72:82:aa:5b:58:03:d8:7c:a6:35:3c:36:b1:
                    5c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F5:F7:ED:2F:E8:AF:55:47:A7:33:74:4F:8A:AB:BB:D6:59:EB:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/023bfb4e-64ac-3c7d-a8aa-e338cab87491.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.147.144.0/22
                  154.7.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:0a:ab:3c:5d:5a:34:ca:cd:34:c9:ea:fd:a4:19:58:e1:3b:
         4c:46:00:bd:58:77:e0:66:4c:7b:2f:bf:47:7e:2d:13:9e:d9:
         0f:f6:9a:62:e6:83:df:af:a3:ba:94:95:90:d3:bc:13:51:45:
         d9:71:18:0e:c3:72:5b:1a:15:55:c9:3c:cf:02:63:4f:61:3e:
         52:4f:c3:22:81:2f:bb:5b:12:ba:58:68:32:2d:5d:22:b0:51:
         2b:2b:60:98:86:87:91:a6:e1:7f:50:a4:7e:09:6b:3b:aa:44:
         c0:b6:1f:19:26:46:53:19:e4:4f:2c:62:82:f3:2a:22:e3:4a:
         52:a0:8f:80:12:28:3f:d0:66:8e:59:bb:51:23:5f:67:ef:13:
         8e:99:d5:90:6a:6b:b4:da:92:95:37:f5:57:36:a4:c9:3c:6a:
         58:85:10:69:24:1a:43:62:11:c4:66:2c:67:f6:f2:4a:bf:3c:
         7f:c8:f7:c8:38:57:84:f3:78:f2:ca:95:1c:cb:f7:60:f1:42:
         94:6f:11:4e:0f:8d:b0:af:ad:5a:da:94:f8:55:d8:78:8d:3e:
         ba:c7:4d:18:32:a8:80:be:67:ad:ad:3d:0a:22:63:dd:6c:e8:
         8d:7a:f7:f6:de:fc:a2:ee:b5:82:6a:b8:1f:fa:d7:38:6a:5e:
         73:f4:6a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:34:17 2026 by rpki-client