Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/98685e46-677d-352b-8798-a519e8125fed.roa
File:                     98685e46-677d-352b-8798-a519e8125fed.roa (raw, json)
Hash identifier:          7I9ZqtwQyscNYcZxWmFVYJORcpy9O+09G8IRkljQwB0=
Subject key identifier:   9C:6E:93:EF:C7:8D:C0:65:93:CB:E4:43:26:52:58:E0:75:73:0C:59
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D6944FF0171A922EF9D93CF00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/98685e46-677d-352b-8798-a519e8125fed.roa
Signing time:             Mon 06 Apr 2026 01:00:24 +0000
ROA not before:           Mon 06 Apr 2026 01:00:24 +0000
ROA not after:            Sun 05 Jul 2026 01:00:24 +0000
asID:                     138456
IP address blocks:        38.22.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:69:44:ff:01:71:a9:22:ef:9d:93:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Apr  6 01:00:24 2026 GMT
            Not After : Jul  5 01:00:24 2026 GMT
        Subject: CN=be55c516-b3c8-4d14-9c33-53cc202fb076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:61:42:62:7c:eb:9f:82:53:bd:ae:a1:27:59:
                    70:60:79:9b:1b:cc:33:7e:d3:62:f2:01:43:d1:76:
                    51:75:67:71:dd:fe:0c:8f:65:00:40:90:35:d0:d7:
                    6a:a0:99:22:c4:2e:be:e5:26:ee:60:21:cc:40:c5:
                    80:70:70:d2:c6:fd:63:e1:28:97:b5:d0:ae:75:62:
                    64:c4:d7:bc:f8:73:00:2f:75:3c:bc:72:4b:b8:c9:
                    51:e5:da:f0:22:4f:79:af:6f:ca:20:b4:86:67:a2:
                    b1:d2:9e:ac:92:dd:7e:ce:e5:f7:68:e3:2f:bb:59:
                    55:44:9f:8b:ed:0e:45:01:d8:e3:3d:ed:4c:c3:4a:
                    85:84:a0:0c:fd:4b:b8:89:74:e4:5c:77:7d:3c:05:
                    59:db:29:7f:3b:f4:90:0b:6a:d0:cf:9c:05:7b:54:
                    c5:fe:46:13:d6:53:4b:ed:3f:b5:09:ad:38:4e:07:
                    bf:bf:2d:b3:39:f9:a6:80:b5:7c:eb:3f:34:b1:4b:
                    fd:08:fa:8f:7a:f3:47:78:9c:ac:55:df:6f:29:3d:
                    8c:c7:47:a4:7c:bc:fd:08:a1:ce:aa:18:75:89:84:
                    85:90:67:71:6d:2b:28:70:0e:96:1c:75:df:af:42:
                    1c:88:da:36:2c:cb:56:81:57:97:ac:ee:72:55:8c:
                    c2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:6E:93:EF:C7:8D:C0:65:93:CB:E4:43:26:52:58:E0:75:73:0C:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/98685e46-677d-352b-8798-a519e8125fed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.22.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:49:6a:65:80:4b:8a:7d:aa:0b:3b:2b:bf:c9:a2:83:44:e0:
         7e:0f:54:4f:7c:42:b5:f6:bd:c6:45:26:a2:bf:a4:00:5a:1b:
         21:5a:8b:e7:90:c8:53:ff:d5:dd:d2:29:b9:0e:5a:52:06:e3:
         16:77:00:56:2d:2e:4a:70:d3:8b:1c:18:62:0b:d9:29:59:c9:
         bb:a0:d3:a7:ef:0f:94:a5:9d:0a:8c:34:b5:d4:d0:c3:6a:7e:
         75:8f:86:10:e1:18:f9:a1:f5:29:8e:cc:4c:08:1b:65:40:fd:
         b6:ba:86:a1:45:38:20:30:a5:3a:cb:f8:43:0a:b9:1c:b9:85:
         e1:4b:47:06:e7:2c:ac:2e:d2:1b:0b:3b:2f:be:23:d2:fe:8d:
         c8:01:7b:81:37:80:46:de:7b:54:4a:dc:73:56:f0:50:21:31:
         bb:03:08:96:37:62:63:10:27:db:98:e0:c1:f2:71:e9:f2:07:
         0d:c7:b9:fd:47:95:69:11:74:d5:95:b1:98:dc:11:42:9b:c4:
         00:25:52:5c:a8:42:25:3a:16:0b:c7:6e:dd:09:f9:64:cb:08:
         44:5e:69:91:2e:01:6c:fa:a3:92:fc:64:20:ae:7f:87:3c:08:
         cb:f6:95:8b:40:12:49:8d:4b:7b:dd:65:a7:33:78:47:f7:27:
         25:c7:5c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:57:39 2026 by rpki-client