Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/97cfa1a4-9b53-3389-a4e4-0dcbf07583b3.roa
File:                     97cfa1a4-9b53-3389-a4e4-0dcbf07583b3.roa (raw, json)
Hash identifier:          lIvnPu3JJrZhOwIfSaGS4q5nkhDXfM2zyHNYClol76s=
Subject key identifier:   36:A1:63:F6:7A:88:EF:23:B7:73:30:D6:1B:D1:F1:58:79:E6:64:1F
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E131994C440869DAE4F48BCC0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/97cfa1a4-9b53-3389-a4e4-0dcbf07583b3.roa
Signing time:             Fri 05 Jun 2026 21:00:12 +0000
ROA not before:           Fri 05 Jun 2026 21:00:12 +0000
ROA not after:            Thu 03 Sep 2026 21:00:12 +0000
asID:                     263759
IP address blocks:        38.250.10.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:13:19:94:c4:40:86:9d:ae:4f:48:bc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jun  5 21:00:12 2026 GMT
            Not After : Sep  3 21:00:12 2026 GMT
        Subject: CN=cf623e4f-b739-4c05-b172-02b87cc20f79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:04:7c:86:6c:98:53:25:79:e1:a9:06:33:05:
                    58:83:34:ef:a5:30:f8:5e:04:e5:ad:20:0a:4d:fe:
                    0d:e4:0a:d3:88:50:d1:ac:4b:31:5f:21:2c:d0:a2:
                    ff:a0:c9:24:fc:00:10:f5:55:c8:12:4f:11:41:e0:
                    f5:06:ce:ec:9b:ed:56:4f:3c:5d:ec:d2:35:66:30:
                    0a:ec:11:2f:b8:4a:f1:5e:c7:b4:b8:82:7e:0a:ae:
                    fd:f8:fe:dc:83:85:25:f8:86:55:cc:88:5a:ad:26:
                    65:b0:37:26:2e:da:54:18:85:07:ff:50:0a:d2:12:
                    20:36:d6:fb:a2:28:7b:46:66:fb:7b:b9:1f:a5:45:
                    12:12:8d:85:85:85:71:56:8f:d2:bf:d5:b0:f6:0b:
                    9d:3d:0a:ec:17:53:fb:16:2a:d9:38:ab:82:55:a1:
                    64:16:a4:67:5a:ee:d3:4c:ae:50:40:8f:91:71:95:
                    62:b8:e8:66:48:95:be:10:61:b0:88:28:0d:37:18:
                    2d:74:e7:5a:4e:d7:96:ac:45:24:c5:1b:d8:22:8e:
                    69:61:68:93:f1:35:c0:2f:21:7d:b5:be:46:9b:91:
                    da:00:e0:6f:6b:30:93:05:66:51:0c:4e:6f:94:af:
                    1e:b2:3a:9b:b2:ba:2e:5e:08:b7:ea:65:01:f6:72:
                    39:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:A1:63:F6:7A:88:EF:23:B7:73:30:D6:1B:D1:F1:58:79:E6:64:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/97cfa1a4-9b53-3389-a4e4-0dcbf07583b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.250.10.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:a4:74:b5:a1:79:07:71:b3:84:2f:81:a6:5a:53:c9:93:c6:
         86:7f:2b:b7:8c:05:c2:d9:fb:3a:80:66:6c:26:df:10:49:7f:
         7f:b1:13:ec:73:29:68:5d:51:b6:1f:2e:25:8f:e3:f2:78:85:
         2b:39:b1:66:1b:0e:b8:a0:a7:dc:e0:9a:91:3e:08:76:ba:9a:
         e7:a3:04:ba:63:98:1b:38:f6:76:f8:57:63:bd:9b:aa:dd:b2:
         08:d0:5e:10:18:de:37:7d:5d:0c:5b:fd:92:e3:16:21:f6:79:
         36:e8:d7:b9:50:9f:ec:9f:80:ec:e7:79:ae:2e:0f:ce:47:74:
         e1:51:e7:d1:d0:0a:3a:da:df:e1:4b:b7:4c:6f:7e:33:b0:43:
         75:74:1f:03:14:d5:e4:bc:5e:2e:92:6b:c9:a2:5e:61:6c:d4:
         9e:25:84:32:bf:40:66:27:a6:23:af:9d:db:77:76:52:1a:5d:
         4b:e9:6f:12:ee:28:bf:c4:a3:88:68:23:09:ee:87:89:9c:1f:
         9d:e3:cf:d5:06:7c:75:83:13:1d:c5:90:e0:06:df:98:b9:0b:
         33:27:aa:53:ed:de:0e:e7:88:58:2e:e4:8e:ab:97:a3:14:bd:
         60:3b:d8:c3:56:2b:0b:21:b2:2c:23:16:07:1d:5b:6f:32:66:
         d4:25:0e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:04:47 2026 by rpki-client