Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/35a20e0c-cbba-34ef-adfb-eb28b481f29c.roa
File:                     35a20e0c-cbba-34ef-adfb-eb28b481f29c.roa (raw, json)
Hash identifier:          Gl7dyTNw1RW/9T6kNHLf6n4oQeHlwyC1Ru/UyrMCw2M=
Subject key identifier:   C0:31:C9:54:9B:1B:48:B8:96:3B:F9:1B:7D:56:F6:D5:E2:BC:05:F2
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F37AC1FA24AB8CAA8B7D90500
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/35a20e0c-cbba-34ef-adfb-eb28b481f29c.roa
Signing time:             Fri 18 Sep 2026 16:11:43 +0000
ROA not before:           Fri 18 Sep 2026 16:11:43 +0000
ROA not after:            Thu 17 Dec 2026 17:11:43 +0000
asID:                     396860
IP address blocks:        38.240.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:37:ac:1f:a2:4a:b8:ca:a8:b7:d9:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep 18 16:11:43 2026 GMT
            Not After : Dec 17 17:11:43 2026 GMT
        Subject: CN=3a1022e1-5499-427d-9c86-994d1388095f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:99:ad:e3:81:fb:1b:71:05:22:0c:93:1a:3e:
                    12:d7:d3:7b:a3:74:99:0a:af:2f:58:cf:ef:ec:39:
                    c1:c4:2f:e9:ea:b3:13:55:95:7c:6e:f6:1a:d6:b4:
                    e3:dc:ea:a1:eb:f0:ba:60:92:98:7c:27:e4:b7:70:
                    2a:13:50:bc:6d:d1:e0:76:0c:44:c7:50:95:ca:74:
                    fc:86:59:d0:12:d6:17:25:a4:90:b1:0f:2c:57:63:
                    15:3b:64:e3:97:61:b0:5e:c9:c5:0c:ae:fc:ec:9e:
                    3f:b4:70:bf:fd:c8:c2:01:04:58:23:a9:03:5b:fe:
                    4a:da:c7:9e:29:4e:ba:28:2d:8f:bb:3f:c9:07:d0:
                    d6:88:ba:68:c0:95:9f:d4:30:85:c6:65:9b:a1:05:
                    20:98:11:eb:45:bf:8c:09:c6:fa:05:b5:44:e5:62:
                    70:58:a5:dc:17:a4:a1:3c:0e:99:9a:61:9c:f1:62:
                    fc:d6:2a:58:eb:52:76:16:d6:75:62:db:86:c1:4f:
                    1e:bb:79:ad:25:47:24:36:7f:66:20:ac:1f:96:78:
                    4b:f0:6d:71:0c:03:15:00:f2:0e:c1:d7:48:f7:35:
                    c3:e1:8f:f2:4f:36:3b:99:a9:ce:f2:33:37:27:a1:
                    8f:b6:ad:76:a0:10:0c:f7:4a:7a:f2:af:ef:fe:2f:
                    cf:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:31:C9:54:9B:1B:48:B8:96:3B:F9:1B:7D:56:F6:D5:E2:BC:05:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/35a20e0c-cbba-34ef-adfb-eb28b481f29c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.240.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:ed:64:89:66:cf:83:bf:af:e2:33:f5:48:54:8f:67:f8:fd:
         5b:49:86:81:af:6b:db:af:57:b6:48:14:44:1a:c9:31:0d:7e:
         64:1b:4e:d8:25:51:e5:ef:9a:da:c7:0d:39:d3:fd:88:94:b8:
         10:99:53:9f:59:b6:09:fd:33:c2:02:52:e7:f9:77:a8:85:f3:
         5d:47:0c:73:6d:69:e4:92:ef:4b:75:8a:7f:02:cc:10:af:f0:
         cf:ab:2e:ab:b5:5f:3f:09:2f:ca:f5:45:44:81:18:9d:15:92:
         e7:f5:a7:05:93:62:00:b6:0e:08:83:4a:4b:64:b5:7f:22:81:
         2b:a2:78:36:f7:2f:96:9a:35:51:8e:47:c4:3f:d5:49:6c:13:
         5a:99:66:4c:d3:5a:e8:98:4b:fc:a7:82:aa:29:cd:95:88:20:
         7b:2b:41:f1:09:36:f6:49:d1:1b:4b:eb:09:c9:eb:e7:48:f4:
         30:57:cb:ec:30:11:99:13:59:a8:aa:ff:f9:00:59:a3:a7:55:
         e2:4b:87:05:e0:cb:f3:ac:50:ae:2f:77:6e:12:c7:27:0c:6d:
         ab:39:35:15:55:62:b3:40:93:b4:27:52:f3:9f:04:9c:f8:04:
         1f:60:a3:8b:bf:c9:59:a4:a5:92:51:37:5e:d3:86:cb:e7:c9:
         00:f3:04:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:12:25 2026 by rpki-client