Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/77e70b26-82c4-3a79-8882-ef8766eccdc6.roa
File:                     77e70b26-82c4-3a79-8882-ef8766eccdc6.roa (raw, json)
Hash identifier:          8ZAnTbwfxba3VKF++TJCe9clbvJ/4EPfKHGHkeg43aI=
Subject key identifier:   8D:F0:5F:E0:F4:41:04:76:0C:1F:87:CC:2F:47:B5:49:2D:2E:8C:5B
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D5234F688F96745ECECE04200
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/77e70b26-82c4-3a79-8882-ef8766eccdc6.roa
Signing time:             Sat 28 Mar 2026 18:44:34 +0000
ROA not before:           Sat 28 Mar 2026 18:44:34 +0000
ROA not after:            Wed 20 May 2026 20:41:01 +0000
asID:                     29886
IP address blocks:        38.124.138.0/24 maxlen: 24
                          38.124.148.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:34:f6:88:f9:67:45:ec:ec:e0:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Mar 28 18:44:34 2026 GMT
            Not After : May 20 20:41:01 2026 GMT
        Subject: CN=d2b9bb9e-e8a6-4716-8a19-5ebcd3030133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8c:58:ae:6a:90:7a:90:b6:6f:df:67:25:7a:
                    cf:6e:2c:b5:11:29:0f:72:31:44:a7:fb:4a:08:6c:
                    06:2a:df:61:63:22:2d:aa:63:b9:fc:5b:b5:dc:6f:
                    09:0f:a2:36:17:89:58:a7:4a:9d:7d:62:15:1f:81:
                    db:d8:dd:ce:05:12:c6:78:77:27:ac:72:e5:18:db:
                    6f:e3:22:2c:f5:8c:54:9a:66:ae:63:84:bc:40:1f:
                    88:ce:a8:02:64:fc:cb:9e:70:1a:c0:7b:43:04:46:
                    90:3a:d1:4d:17:b1:d9:5f:1f:19:39:01:98:50:35:
                    11:4f:e7:59:b5:5f:16:d3:21:33:17:33:68:49:06:
                    3c:c1:27:ad:92:b8:b8:46:28:49:36:9f:91:5d:00:
                    0d:f7:fe:4e:5a:ec:b0:94:a4:56:15:05:f0:48:45:
                    df:88:52:5c:6e:43:84:a5:44:9e:3a:f1:7e:f1:0f:
                    5c:ac:48:33:7a:7b:91:16:b2:fd:db:63:90:90:77:
                    56:93:d1:a1:26:dc:c8:87:5b:7f:85:9b:ce:24:f2:
                    7d:94:ad:5d:bf:26:7c:43:a1:3a:05:be:98:15:2c:
                    53:cf:de:fb:fa:a3:78:8c:15:a3:e5:c8:70:6b:c4:
                    4f:46:35:80:66:50:8c:9a:46:e0:16:34:77:59:9e:
                    84:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:F0:5F:E0:F4:41:04:76:0C:1F:87:CC:2F:47:B5:49:2D:2E:8C:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/77e70b26-82c4-3a79-8882-ef8766eccdc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.124.138.0/24
                  38.124.148.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:32:e9:fe:a2:0b:bf:27:2d:67:fc:03:5c:6c:64:33:6b:9e:
         f5:9b:32:9e:cc:74:c0:51:73:f7:46:47:08:54:f2:d8:0f:89:
         4d:a4:3e:24:84:91:04:fe:c9:03:7c:63:e2:c0:f9:da:0e:f8:
         c1:84:c4:a6:ad:e9:b1:6c:52:b3:b3:b1:53:1d:15:49:7d:04:
         27:86:d3:f5:82:16:b6:d0:30:e8:50:8f:f2:38:45:3d:60:91:
         c4:5f:83:f1:bd:76:19:4e:35:7e:a4:41:e1:9b:a1:4d:33:d2:
         5e:22:d9:e7:5d:3b:3b:41:a3:08:4e:12:ba:61:8d:d2:d7:20:
         f4:6f:26:34:9f:47:49:7c:38:b8:01:11:17:31:dd:bb:36:b8:
         5b:c5:7c:88:04:fc:54:1e:a5:60:25:68:f5:d6:88:5f:cd:11:
         7a:f4:f6:55:9c:98:26:7a:97:fd:c7:06:29:47:f1:66:47:e6:
         a1:95:42:6a:55:67:1e:3d:78:a4:f7:8c:27:78:b4:08:30:ab:
         aa:c4:0c:16:04:ab:76:2d:99:c7:4c:09:0c:e9:47:06:f9:31:
         c2:88:e0:ee:eb:a6:37:07:0a:04:24:ed:60:bc:0a:14:ce:de:
         39:11:f0:40:a9:14:3f:54:33:ad:e7:15:ba:de:d3:ce:38:9d:
         77:2a:2a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:09:29 2026 by rpki-client