Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8358c290-aee6-3f93-81d1-a0c85d50b978.roa
File:                     8358c290-aee6-3f93-81d1-a0c85d50b978.roa (raw, json)
Hash identifier:          PTSTCKh/vn4prQMYuwb76ZM5OkjuwQ1GOIHOWHyXSDU=
Subject key identifier:   98:65:7A:6D:0C:50:06:AE:C1:5F:FE:73:CD:FB:01:FE:F8:57:80:16
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F30528C1E4482BDA902CC7640
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8358c290-aee6-3f93-81d1-a0c85d50b978.roa
Signing time:             Wed 16 Sep 2026 01:00:12 +0000
ROA not before:           Wed 16 Sep 2026 01:00:12 +0000
ROA not after:            Tue 15 Dec 2026 02:00:12 +0000
asID:                     64130
IP address blocks:        38.56.111.0/24 maxlen: 24
                          38.56.113.0/24 maxlen: 24
                          38.137.195.0/24 maxlen: 24
                          38.137.196.0/24 maxlen: 24
                          38.137.197.0/24 maxlen: 24
                          38.137.211.0/24 maxlen: 24
                          38.199.72.0/24 maxlen: 24
                          38.199.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:30:52:8c:1e:44:82:bd:a9:02:cc:76:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep 16 01:00:12 2026 GMT
            Not After : Dec 15 02:00:12 2026 GMT
        Subject: CN=295b1348-88cd-4319-8cfe-80a829383956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:40:ea:5d:31:b9:e1:f2:ff:64:7e:80:33:33:
                    77:b4:ad:29:d0:15:ad:e5:8c:55:02:c3:33:83:87:
                    3e:7f:1f:44:ef:0b:e5:f5:b4:79:42:37:a4:98:59:
                    62:3e:9a:a0:be:0c:5a:1d:e2:ce:bf:23:26:d0:d5:
                    b3:5d:14:ee:90:4d:b9:8f:7e:80:9d:a6:f5:71:4e:
                    02:e3:da:1f:7f:9b:60:46:bb:91:99:b3:48:93:64:
                    ab:c1:bd:c1:4e:35:bd:1c:72:a1:82:7e:65:31:6c:
                    ff:6e:85:9c:a1:db:3a:57:59:94:ea:27:9d:17:f2:
                    15:ba:5f:56:1b:35:cd:67:3f:d4:3a:2f:de:5a:e8:
                    64:54:07:f3:83:d9:a4:cc:ff:05:18:9d:71:d2:15:
                    0a:12:00:ee:68:5e:34:d3:a7:11:14:f9:19:5b:3b:
                    e0:c6:91:03:16:3e:a1:f8:7c:24:0b:33:ec:d3:4e:
                    d4:82:8c:17:7a:39:f3:d6:5f:65:7f:bd:40:5a:9e:
                    0c:25:b3:3c:9b:d1:88:19:c4:4d:ba:e9:80:f2:e4:
                    29:ea:9d:a4:86:9b:29:70:1c:5f:2a:f5:1d:4e:0b:
                    39:47:f8:61:2c:2f:8b:32:99:95:45:0f:b1:56:30:
                    b1:d6:df:86:6c:e7:ac:f5:43:d4:ba:6b:74:9e:4e:
                    97:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:65:7A:6D:0C:50:06:AE:C1:5F:FE:73:CD:FB:01:FE:F8:57:80:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8358c290-aee6-3f93-81d1-a0c85d50b978.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.56.111.0/24
                  38.56.113.0/24
                  38.137.195.0-38.137.197.255
                  38.137.211.0/24
                  38.199.72.0/24
                  38.199.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:b4:10:28:14:c1:58:b2:2f:7d:48:4d:af:5c:47:b9:47:8b:
         aa:d6:f9:d8:87:a0:f2:27:8d:e1:43:74:e6:4a:2d:29:02:2c:
         dc:be:93:1e:d0:e6:58:6b:37:71:2b:48:f3:59:2e:43:3c:0c:
         99:d7:04:c1:4f:68:2f:b7:07:33:e9:7b:bc:6b:a3:51:6f:31:
         7c:ca:83:a3:d4:7e:0b:62:67:41:be:b5:f2:33:df:2e:f8:ce:
         11:4d:a8:16:6c:3d:ca:9d:d4:a4:a5:60:a4:05:09:8b:47:98:
         30:d7:b0:98:71:5f:8b:b4:9e:32:9e:03:58:ce:65:23:97:2f:
         90:48:ee:94:e2:af:c3:92:a5:44:f2:31:39:c4:e0:45:80:94:
         ae:bd:c7:51:22:11:ac:66:15:97:2c:42:89:c7:bc:2a:d5:b9:
         27:fb:4c:d8:12:bf:ed:a4:b1:90:17:a3:6c:ec:9f:f6:9d:0d:
         14:9d:5c:05:6f:f8:fa:b7:d0:b2:bc:c3:84:de:90:cf:7f:df:
         05:a4:e7:52:ac:4b:4e:bb:63:11:8a:3f:23:9d:8a:e8:0d:5c:
         6f:b8:12:fb:3e:6c:32:3e:26:dd:e1:9b:5b:61:38:91:5b:6e:
         41:4e:f4:6c:2b:df:92:49:a4:72:a3:d4:f4:1e:04:f6:e3:83:
         5f:88:a5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:59:57 2026 by rpki-client