Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bb48864d-47b2-37de-8d6a-f6f93dd5a7ce.roa
File:                     bb48864d-47b2-37de-8d6a-f6f93dd5a7ce.roa (raw, json)
Hash identifier:          j468HDqGlR1WkfCTFXLsjjqIeg/y1R4jd3AkPHMzYEo=
Subject key identifier:   D9:51:CE:32:04:A3:41:E4:16:24:68:A8:98:7A:82:BE:FE:14:9A:31
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584CD837417B63BB5FF48E939F00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bb48864d-47b2-37de-8d6a-f6f93dd5a7ce.roa
Signing time:             Fri 13 Feb 2026 02:00:31 +0000
ROA not before:           Fri 13 Feb 2026 02:00:31 +0000
ROA not after:            Thu 14 May 2026 01:00:31 +0000
asID:                     212337
IP address blocks:        38.224.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d8:37:41:7b:63:bb:5f:f4:8e:93:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Feb 13 02:00:31 2026 GMT
            Not After : May 14 01:00:31 2026 GMT
        Subject: CN=c76fd57e-39f7-4a5e-a96d-53d06918718c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:62:dd:a0:3a:23:ba:d4:4e:57:83:71:f5:16:
                    37:66:df:86:69:3d:7d:25:67:c5:79:61:18:38:79:
                    c0:22:3d:06:ad:54:12:b2:f7:6e:e9:e9:26:5c:e0:
                    76:1e:c0:42:1d:6d:b6:ba:00:f7:a2:0e:68:13:c5:
                    9f:db:b6:b2:de:d1:9e:4d:2b:eb:09:2f:93:fa:22:
                    ef:ad:00:83:7e:b9:67:68:e5:52:df:b7:4c:60:b0:
                    37:b0:83:1b:29:f3:58:44:55:dc:da:b9:8b:66:62:
                    84:f9:79:aa:8a:37:c3:be:7a:2c:aa:23:66:d4:f4:
                    80:5c:a2:99:91:e4:9a:40:50:62:52:9c:34:bf:ac:
                    75:95:22:4b:b7:93:55:3d:39:fc:0a:7d:d0:50:da:
                    4e:51:40:3b:5d:c4:c8:b2:a6:8c:cb:07:52:fa:df:
                    d2:9f:49:46:3a:20:78:9f:4c:9c:54:44:3d:94:d2:
                    fb:70:43:d3:10:41:74:32:a6:a0:ca:b9:c1:da:79:
                    ff:4c:67:e2:08:2b:69:59:98:4e:5b:47:80:37:5a:
                    c4:59:1d:a9:b0:71:ee:1b:9c:47:86:d9:cc:33:05:
                    57:bf:d1:a2:39:0d:98:0c:29:fd:03:7a:45:ef:20:
                    87:46:d6:66:6e:24:31:c6:0d:52:57:06:dd:85:2b:
                    b9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:51:CE:32:04:A3:41:E4:16:24:68:A8:98:7A:82:BE:FE:14:9A:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bb48864d-47b2-37de-8d6a-f6f93dd5a7ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.224.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:cb:60:b1:6d:47:d7:ae:1f:b9:17:a3:e6:5b:46:71:6b:c0:
         41:fa:18:53:b9:e7:fa:55:36:58:e7:b2:4a:db:dc:e5:b6:fb:
         f7:2f:b8:04:b8:26:01:31:f2:84:a9:aa:00:65:ea:c0:5d:c1:
         6d:c0:18:9d:11:87:70:66:1e:95:91:53:a8:19:47:c0:af:fd:
         07:6e:26:81:ee:40:c8:68:ac:ea:86:f8:11:8d:64:f0:47:35:
         c2:73:ed:d6:32:5f:f4:da:ce:84:bb:53:c4:e2:b9:09:05:32:
         33:7d:c0:f0:59:40:1f:80:9b:e1:55:78:a5:09:a2:89:82:71:
         3e:a3:4f:fd:e4:ff:44:37:3d:2b:7f:ef:7a:4a:c8:7d:27:e6:
         f9:ac:ac:b9:8b:fe:e3:4e:15:60:36:40:b8:87:82:18:7b:88:
         72:d6:5a:52:43:e8:8f:f9:14:d8:b2:06:12:e7:58:ba:d7:69:
         87:66:90:3e:1e:4f:38:a1:cb:13:23:0c:24:61:53:b3:f3:d8:
         f3:e1:02:fa:c1:1e:1e:23:5c:5a:62:35:c3:f5:26:2e:f8:fe:
         09:c6:3e:74:b4:c2:79:0a:09:3c:42:cd:4a:f6:6d:ab:54:1c:
         8b:9a:9d:16:73:56:13:1a:3e:b6:30:a5:c6:a8:b3:28:cf:a3:
         ef:77:55:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:49:51 2026 by rpki-client