Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2b3d568a-37d1-3dc9-8848-b06220f406d6.roa
File:                     2b3d568a-37d1-3dc9-8848-b06220f406d6.roa (raw, json)
Hash identifier:          IRqGjtKgptCHzezHHUTxGwnkD8bwOtcnx8CzBJ5fP9o=
Subject key identifier:   BF:C3:DF:82:FC:5A:7E:DC:E7:6E:5C:35:54:65:FC:48:0D:2E:CD:94
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D021780A80C04524537F0A080
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2b3d568a-37d1-3dc9-8848-b06220f406d6.roa
Signing time:             Sat 28 Feb 2026 02:00:32 +0000
ROA not before:           Sat 28 Feb 2026 02:00:32 +0000
ROA not after:            Fri 29 May 2026 01:00:32 +0000
asID:                     273154
IP address blocks:        38.134.172.0/24 maxlen: 24
                          154.43.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:02:17:80:a8:0c:04:52:45:37:f0:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Feb 28 02:00:32 2026 GMT
            Not After : May 29 01:00:32 2026 GMT
        Subject: CN=21385c5d-055a-4df7-9fd4-00e6c44e79cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ba:f3:6a:8e:72:0e:a3:f1:0f:b8:29:f7:4f:
                    35:01:73:ff:73:c3:85:d1:12:bd:30:c7:dc:c5:f1:
                    6a:0e:8a:f4:55:f9:65:52:56:cc:d6:e8:49:0c:34:
                    d7:14:a9:65:22:53:e9:45:32:2b:4a:39:9e:5b:b4:
                    75:c5:eb:17:0f:c1:71:72:bb:2e:18:9b:16:c1:2f:
                    df:ed:9f:bd:0a:45:ab:59:2c:6c:91:c2:cf:a8:b0:
                    bf:bc:9f:50:c5:1f:d8:de:7b:49:c1:12:ab:a0:33:
                    90:32:f2:09:08:a7:63:57:e4:0e:e0:37:18:a2:64:
                    c8:9e:79:5b:65:a1:0b:8b:a1:0c:77:db:7f:6b:36:
                    92:3d:ea:ad:1f:40:ee:bb:f8:4d:1c:88:39:46:50:
                    cf:0a:d5:63:c4:46:fb:36:40:7f:59:22:15:90:31:
                    26:fb:6e:df:ee:41:7a:54:9d:73:76:d0:e3:85:7e:
                    ae:0d:38:54:92:13:a0:ce:1d:6b:5f:8f:21:c3:48:
                    c3:37:ad:35:bf:9a:d5:9f:c7:49:e6:a8:6e:58:65:
                    3c:8a:ac:aa:d4:5a:be:8f:9a:8f:f7:cc:62:a9:cd:
                    7d:4a:29:4b:58:47:7a:f9:68:0f:0c:11:62:c9:1f:
                    f5:08:ee:70:28:42:61:fb:ce:2f:57:6f:c0:e7:45:
                    a6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:C3:DF:82:FC:5A:7E:DC:E7:6E:5C:35:54:65:FC:48:0D:2E:CD:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2b3d568a-37d1-3dc9-8848-b06220f406d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.134.172.0/24
                  154.43.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:7a:68:39:6a:ef:0c:9e:93:43:cb:43:78:d5:6d:98:c8:85:
         69:49:19:ab:c4:44:2a:10:a1:66:fe:9d:b0:9f:47:a0:ab:29:
         a3:95:07:0c:6f:28:90:95:05:fe:05:22:dc:12:f0:71:aa:ae:
         a8:56:80:ce:36:35:e6:3f:f0:d0:07:16:d8:8a:11:96:e5:d3:
         21:9e:ce:74:70:14:09:c2:89:70:8e:f3:e7:d9:09:67:f5:72:
         a0:ae:21:1e:47:a2:9f:99:d4:00:5e:1f:86:07:04:45:1d:a0:
         49:7e:26:2f:e7:2c:8a:88:59:fc:11:26:3d:5f:25:98:3f:90:
         be:46:7a:40:f3:9a:e8:5d:f0:f0:92:4f:61:e6:00:2a:61:08:
         b2:e2:84:f5:4a:c1:cd:dd:20:00:dd:da:6d:28:01:0c:15:40:
         19:d0:4a:ee:28:03:02:ea:f3:1f:1c:0e:f7:2c:e2:d9:3b:3c:
         38:0b:2d:8d:b3:02:be:99:c3:3d:c2:f1:57:7a:db:8a:80:c6:
         42:0c:a2:3a:85:09:70:f8:96:1e:84:4a:1c:13:3c:6f:2b:06:
         79:0d:42:dc:73:9b:fd:6b:51:83:1c:7a:9d:78:1c:14:93:41:
         25:a5:dd:3a:f1:01:0b:25:ae:2e:0d:5d:22:a3:af:03:bf:de:
         8a:3e:12:d3
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE0CF4CoDARSRTfwoIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk
MjEzODVjNWQtMDU1YS00ZGY3LTlmZDQtMDBlNmM0NGU3OWNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7rzao5yDqPxD7gp9081AXP/c8OF0RK9MMfc
xfFqDor0VfllUlbM1uhJDDTXFKllIlPpRTIrSjmeW7R1xesXD8FxcrsuGJsWwS/f
7Z+9CkWrWSxskcLPqLC/vJ9QxR/Y3ntJwRKroDOQMvIJCKdjV+QO4DcYomTInnlb
ZaELi6EMd9t/azaSPeqtH0Duu/hNHIg5RlDPCtVjxEb7NkB/WSIVkDEm+27f7kF6
VJ1zdtDjhX6uDThUkhOgzh1rX48hw0jDN601v5rVn8dJ5qhuWGU8iqyq1Fq+j5qP
98xiqc19SilLWEd6+WgPDBFiyR/1CO5wKEJh+84vV2/A50WmUQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFL/D34L8Wn7c525cNVRl/EgNLs2UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMmIzZDU2OGEtMzdkMS0z
ZGM5LTg4NDgtYjA2MjIwZjQwNmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJoasAwQC
misoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBALV6aDlq7wyek0PLQ3jVbZjIhWlJGavERCoQoWb+nbCfR6Cr
KaOVBwxvKJCVBf4FItwS8HGqrqhWgM42NeY/8NAHFtiKEZbl0yGeznRwFAnCiXCO
8+fZCWf1cqCuIR5Hop+Z1ABeH4YHBEUdoEl+Ji/nLIqIWfwRJj1fJZg/kL5GekDz
muhd8PCST2HmACphCLLihPVKwc3dIADd2m0oAQwVQBnQSu4oAwLq8x8cDvcs4tk7
PDgLLY2zAr6Zwz3C8Vd624qAxkIMojqFCXD4lh6EShwTPG8rBnkNQtxzm/1rUYMc
ep14HBSTQSWl3TrxAQslri4NXSKjrwO/3oo+EtM=
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:49:35 2026 by rpki-client