Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/888a0add-6418-3871-a4a7-96c5b9718181.roa
File:                     888a0add-6418-3871-a4a7-96c5b9718181.roa (raw, json)
Hash identifier:          z4E+vJjeef9/FBxiATrkvpA65ED8JiOF/YuJTMOQzUw=
Subject key identifier:   F7:E9:39:7D:79:28:6C:5A:83:6C:43:45:51:31:1E:52:91:B7:6B:C7
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D7A0553F39406DCAED9919180
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/888a0add-6418-3871-a4a7-96c5b9718181.roa
Signing time:             Sun 12 Apr 2026 01:00:24 +0000
ROA not before:           Sun 12 Apr 2026 01:00:24 +0000
ROA not after:            Sat 11 Jul 2026 01:00:24 +0000
asID:                     0
IP address blocks:        38.212.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7a:05:53:f3:94:06:dc:ae:d9:91:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Apr 12 01:00:24 2026 GMT
            Not After : Jul 11 01:00:24 2026 GMT
        Subject: CN=0ae96991-7ec0-4e3e-bbfd-25e263cccfc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:eb:54:92:57:66:1e:3b:a1:93:bd:eb:83:08:
                    a3:f5:98:1c:a3:35:26:f4:2e:cd:b5:bf:19:a6:9a:
                    f9:02:01:6c:80:73:ac:e0:2c:78:de:16:9b:6c:ab:
                    be:22:5a:a9:ea:34:7b:45:82:4a:7d:8e:d8:e6:8f:
                    63:7a:fd:bf:8a:7b:07:18:d0:77:c7:45:78:78:3a:
                    d0:e3:d6:0d:4e:b5:ab:72:cb:af:50:05:8a:53:50:
                    a1:61:dc:49:9a:61:b4:d1:2d:6d:35:fd:66:1f:c9:
                    7a:5b:26:2c:91:c5:b8:78:0c:b0:4e:ac:bc:85:cf:
                    2e:e4:14:b3:52:43:b7:01:58:3a:b3:6b:26:84:fe:
                    42:e5:d9:f7:59:f0:26:57:bf:1b:86:b1:7c:d9:62:
                    9f:e4:ba:32:ad:de:ed:f2:b2:d4:ad:64:1b:56:f3:
                    8e:ed:d7:d1:c3:0e:ad:cb:52:8a:13:06:dc:ed:65:
                    97:8c:ef:de:03:84:39:d7:55:19:69:c6:05:0f:07:
                    99:5a:2f:0b:e3:5e:a0:a6:5b:50:b0:a3:46:c2:8b:
                    ef:27:e7:bd:1f:3b:37:55:bc:e5:89:5e:c8:9f:71:
                    12:70:b1:81:8e:8b:e5:6f:c6:95:cf:32:63:15:76:
                    9c:3a:fa:e3:00:e2:bf:a1:81:dd:16:d6:49:24:d9:
                    6c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:E9:39:7D:79:28:6C:5A:83:6C:43:45:51:31:1E:52:91:B7:6B:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/888a0add-6418-3871-a4a7-96c5b9718181.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.212.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:70:86:52:57:ff:5d:8f:fa:c9:f1:fc:92:ed:be:21:99:ca:
         9f:f8:ad:ed:e0:9a:12:e1:4d:80:d0:b5:f1:d9:b0:70:53:2f:
         4c:14:ec:60:2d:76:32:96:6e:b9:b2:d7:51:93:ce:f7:41:d7:
         2b:c1:77:39:b2:90:19:99:c1:3a:a0:32:9a:8f:0e:c0:d6:11:
         35:61:42:ea:aa:42:af:a4:ea:c7:7a:cc:65:50:cc:bf:5c:a2:
         e7:2b:2f:d4:10:e8:70:33:6b:6e:a5:00:20:95:55:b5:76:9a:
         14:00:40:ac:47:f6:14:2a:83:27:75:74:5e:f1:5f:48:cb:58:
         5e:13:66:14:bf:00:8a:31:53:80:d5:f1:57:29:75:8f:e0:8c:
         48:ce:2f:78:4e:2c:28:19:03:67:fd:7c:4a:2c:49:ed:ec:e4:
         11:0f:10:5d:85:aa:8e:1f:ad:07:91:6b:2b:26:f8:1e:44:33:
         da:8f:3f:a5:f3:f4:43:77:ea:41:d1:f9:65:a0:de:90:7e:e8:
         02:b9:f3:36:43:0a:4d:01:56:c2:7a:b9:b1:59:40:f6:8f:d0:
         92:a0:74:ee:27:ff:c6:f4:96:ed:1d:7c:a6:6a:42:7d:24:14:
         55:11:f3:25:cc:94:46:b7:98:41:15:0d:d5:1a:e3:74:af:c2:
         4f:05:8a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 22:40:33 2026 by rpki-client