Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b647ffb3-199e-3b43-8b5d-aeaca07e3fa2.roa
File:                     b647ffb3-199e-3b43-8b5d-aeaca07e3fa2.roa (raw, json)
Hash identifier:          9Ojp6Bv8m/uX9E4BVyh5fKhz2ZJ4g705OV4HVulOgko=
Subject key identifier:   00:75:3E:6C:CE:93:A5:CD:EB:1B:C3:5F:A2:45:68:7C:19:5F:B3:3B
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F1732362FE735FECF95BABF00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b647ffb3-199e-3b43-8b5d-aeaca07e3fa2.roa
Signing time:             Mon 07 Sep 2026 01:00:11 +0000
ROA not before:           Mon 07 Sep 2026 01:00:11 +0000
ROA not after:            Sun 06 Dec 2026 02:00:11 +0000
asID:                     57588
IP address blocks:        38.66.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:17:32:36:2f:e7:35:fe:cf:95:ba:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep  7 01:00:11 2026 GMT
            Not After : Dec  6 02:00:11 2026 GMT
        Subject: CN=2d9d933d-ef64-4ef3-82a2-c7c9a141e30a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:50:09:1e:1f:13:09:2a:48:2c:d6:5e:b3:91:
                    66:b1:53:7f:ff:c2:0b:1c:ae:3b:d7:79:63:83:5d:
                    9d:80:e0:67:43:87:d4:f4:fa:74:fd:43:f9:1c:a3:
                    18:8f:78:2c:c0:a8:c2:c3:c5:ab:92:11:06:d1:d8:
                    c8:85:08:e4:03:a2:66:14:7e:f6:1c:60:5d:dd:c4:
                    5a:5b:ef:75:68:a5:54:25:f1:7a:02:7e:cf:8d:00:
                    e7:ca:28:87:03:54:60:6a:28:26:27:a8:cc:28:5e:
                    94:5c:82:51:6c:f1:0e:58:27:9a:09:92:c5:54:7f:
                    58:13:c9:4b:d1:a5:a4:09:93:eb:c4:5e:87:56:4a:
                    0f:17:37:d7:15:6f:1e:8c:d3:52:cb:85:ee:44:05:
                    23:8e:5c:93:8c:07:e8:3e:0a:bb:71:0d:c7:32:66:
                    51:cd:5c:07:c1:9c:72:3f:94:33:da:7b:dc:5c:74:
                    ce:07:4b:f9:a0:0b:62:a2:f9:17:54:f0:09:62:9c:
                    72:82:3c:bd:67:f4:1e:95:b2:9f:9d:d4:d5:80:f7:
                    30:45:bf:0e:58:6d:8b:af:47:d5:91:24:4f:73:49:
                    09:90:03:fa:d8:c0:f8:e9:47:3a:7e:0d:ad:4b:cf:
                    56:d8:a5:7e:4d:a1:ba:41:4f:28:6d:d3:7c:04:31:
                    cc:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:75:3E:6C:CE:93:A5:CD:EB:1B:C3:5F:A2:45:68:7C:19:5F:B3:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b647ffb3-199e-3b43-8b5d-aeaca07e3fa2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.66.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:16:89:0c:e1:2e:6f:0a:69:b6:12:8c:a6:6a:6e:79:15:a8:
         91:c8:e6:94:cb:23:e6:45:d4:cd:42:91:4f:ba:9b:49:c2:4b:
         82:2b:b0:ce:64:7a:8a:61:f7:a8:b5:38:94:9d:f1:60:c2:4a:
         3c:85:f7:b8:ff:4f:03:81:58:a5:18:48:d1:7d:46:86:8d:50:
         8d:85:46:37:44:d9:da:4d:9e:e2:70:6b:63:5f:0e:4d:0c:62:
         46:6a:e8:0a:6e:92:c7:3c:5b:3d:53:84:0e:c2:7f:b6:e4:32:
         69:3b:b5:18:d1:6f:a1:fa:e2:8f:ca:4f:d5:cc:46:4e:a5:86:
         25:00:ce:28:ac:36:1f:b2:53:f7:ee:96:40:d3:16:75:b0:5e:
         2f:38:90:32:3d:17:12:a8:1b:fa:ce:58:3c:b3:31:1c:c6:9c:
         a8:fe:3d:00:29:0f:6f:c4:25:77:b1:84:ff:9d:c1:bd:b3:22:
         68:88:31:ee:b5:99:6b:74:c5:c6:14:ba:85:be:04:34:04:3f:
         cd:4a:87:54:d4:b9:49:c2:1e:27:53:aa:19:5d:92:8c:7e:0e:
         ab:db:51:7e:0e:d2:d5:d7:62:0b:92:02:68:46:a9:e1:d4:c4:
         45:40:b5:01:bf:d4:53:de:b3:33:21:44:9a:bb:26:97:85:0d:
         c1:95:77:a5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8XMjYv5zX+z5W6vwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk
MmQ5ZDkzM2QtZWY2NC00ZWYzLTgyYTItYzdjOWExNDFlMzBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VAJHh8TCSpILNZes5FmsVN//8ILHK4713lj
g12dgOBnQ4fU9Pp0/UP5HKMYj3gswKjCw8WrkhEG0djIhQjkA6JmFH72HGBd3cRa
W+91aKVUJfF6An7PjQDnyiiHA1RgaigmJ6jMKF6UXIJRbPEOWCeaCZLFVH9YE8lL
0aWkCZPrxF6HVkoPFzfXFW8ejNNSy4XuRAUjjlyTjAfoPgq7cQ3HMmZRzVwHwZxy
P5Qz2nvcXHTOB0v5oAtiovkXVPAJYpxygjy9Z/QelbKfndTVgPcwRb8OWG2Lr0fV
kSRPc0kJkAP62MD46Uc6fg2tS89W2KV+TaG6QU8obdN8BDHMmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAB1PmzOk6XN6xvDX6JFaHwZX7M7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYjY0N2ZmYjMtMTk5ZS0z
YjQzLThiNWQtYWVhY2EwN2UzZmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJkLCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALAWiQzhLm8KabYSjKZqbnkVqJHI5pTLI+ZF1M1CkU+6m0nCS4IrsM5k
eoph96i1OJSd8WDCSjyF97j/TwOBWKUYSNF9RoaNUI2FRjdE2dpNnuJwa2NfDk0M
YkZq6Apuksc8Wz1ThA7Cf7bkMmk7tRjRb6H64o/KT9XMRk6lhiUAziisNh+yU/fu
lkDTFnWwXi84kDI9FxKoG/rOWDyzMRzGnKj+PQApD2/EJXexhP+dwb2zImiIMe61
mWt0xcYUuoW+BDQEP81Kh1TUuUnCHidTqhldkox+DqvbUX4O0tXXYguSAmhGqeHU
xEVAtQG/1FPeszMhRJq7JpeFDcGVd6U=
-----END CERTIFICATE-----
Generated at Thu Sep 24 22:31:41 2026 by rpki-client