Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/41c06b0f-4fd2-35c2-b748-0b2c3475e611.roa
File:                     41c06b0f-4fd2-35c2-b748-0b2c3475e611.roa (raw, json)
Hash identifier:          NQW2uvIOil1RqYAwx7gvXB1OJsHPXOMmQ5ipjlfYG2A=
Subject key identifier:   42:9A:29:9D:8B:13:80:FC:BA:D2:2A:84:EB:B3:8D:B2:8D:AF:9B:80
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E15E49EED36727DF1A657A980
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/41c06b0f-4fd2-35c2-b748-0b2c3475e611.roa
Signing time:             Sat 06 Jun 2026 21:00:13 +0000
ROA not before:           Sat 06 Jun 2026 21:00:13 +0000
ROA not after:            Fri 04 Sep 2026 21:00:13 +0000
asID:                     140224
IP address blocks:        38.47.192.0/18 maxlen: 24
                          38.181.0.0/18 maxlen: 24
                          154.19.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:15:e4:9e:ed:36:72:7d:f1:a6:57:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jun  6 21:00:13 2026 GMT
            Not After : Sep  4 21:00:13 2026 GMT
        Subject: CN=1bfd22e5-e0ad-4707-926a-b115ccf5558c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f7:2f:7f:81:44:0c:11:67:6d:0e:03:22:64:
                    2b:01:2d:3c:11:2c:39:13:45:76:0d:6b:17:d2:05:
                    3f:cb:71:bf:ed:a3:f2:60:44:3c:68:60:4c:e3:85:
                    f3:7c:e6:d7:1e:38:91:dc:65:b1:b0:ae:1b:c7:95:
                    62:76:75:6c:d1:c5:66:cf:68:8f:78:94:83:06:87:
                    1f:90:3e:cd:2a:b5:7a:74:5b:b5:5b:ae:25:03:36:
                    70:a2:67:15:6f:41:54:12:19:de:34:46:cc:10:b5:
                    f7:c2:29:d7:c7:bb:7c:bc:a1:a1:e2:4d:75:8a:47:
                    c6:3c:07:53:eb:a3:fc:87:ae:c4:d1:36:0f:e3:ef:
                    69:76:12:b5:3d:d1:5f:91:1a:00:73:da:20:45:85:
                    5c:8a:e3:76:6f:97:40:af:08:04:aa:ba:d8:3d:23:
                    27:f5:0d:ff:f3:d5:c5:b0:b1:27:30:a1:13:48:1b:
                    22:3c:df:3b:f0:64:4d:14:70:c9:36:e5:9f:c2:03:
                    9e:47:0f:d3:ef:18:c0:a9:ba:90:e3:c4:d3:62:13:
                    d7:fd:0b:8c:5f:8c:92:89:a9:d3:02:5f:9b:93:e5:
                    2b:3f:05:0e:46:81:bd:91:9e:cc:85:b8:4d:eb:54:
                    5a:f3:9f:75:0c:6a:06:38:b7:c0:c7:e0:03:e0:c4:
                    85:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:9A:29:9D:8B:13:80:FC:BA:D2:2A:84:EB:B3:8D:B2:8D:AF:9B:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/41c06b0f-4fd2-35c2-b748-0b2c3475e611.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.47.192.0/18
                  38.181.0.0/18
                  154.19.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:80:14:83:83:bf:da:9c:71:e1:c5:a2:65:d0:07:95:2e:e3:
         da:bd:4d:01:3a:75:fe:14:6f:e2:ec:75:c4:c6:7f:91:87:f8:
         13:65:bf:66:37:cf:27:23:b5:02:cd:c5:13:57:be:da:02:a1:
         41:ff:fe:85:37:84:a5:8a:72:e0:a3:25:de:07:6a:12:1f:a9:
         f5:1f:7a:06:65:20:00:df:9c:3b:a4:31:7b:92:3c:b8:ec:09:
         70:57:dc:26:f8:b6:04:64:16:61:46:e8:cf:01:bb:8c:64:f5:
         2c:67:e9:f3:89:b6:22:e1:28:05:5a:5b:d3:fd:1f:2d:42:99:
         03:75:79:92:2e:b9:5e:c2:c1:e8:6b:25:94:e7:d7:d0:ad:0a:
         81:c1:45:d9:59:fa:d6:3d:16:20:cd:a6:60:80:9e:a5:7e:37:
         f7:6f:fd:ef:9a:59:1e:19:e8:94:1b:3e:33:43:e2:b2:3e:e7:
         06:20:73:6e:71:4e:dd:7a:c7:79:db:f1:58:11:cb:85:36:1a:
         09:7f:26:44:95:c8:13:6c:44:8d:b4:26:40:e3:13:27:b7:31:
         dc:da:9c:36:8a:d0:40:77:2c:67:5b:4d:3c:56:6a:f6:13:ea:
         58:a6:06:4c:e4:72:19:d8:8d:6b:ed:5b:73:a4:5a:72:fd:79:
         2c:b3:72:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:02:16 2026 by rpki-client