Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c5858c59-1f80-32b4-b8fb-b3b11b92ca45.roa
File:                     c5858c59-1f80-32b4-b8fb-b3b11b92ca45.roa (raw, json)
Hash identifier:          w7lmvzeum4yYGy0H5JwIHJHrPjwospw7s0iEZC/4wQc=
Subject key identifier:   12:26:F1:2A:50:08:77:ED:91:73:4A:31:F5:44:F6:74:D3:96:C4:40
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D5234FAE98040987F65D79080
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c5858c59-1f80-32b4-b8fb-b3b11b92ca45.roa
Signing time:             Sat 28 Mar 2026 18:44:36 +0000
ROA not before:           Sat 28 Mar 2026 18:44:36 +0000
ROA not after:            Tue 26 May 2026 21:29:47 +0000
asID:                     0
IP address blocks:        38.89.156.0/22 maxlen: 22
                          38.98.88.0/22 maxlen: 22
                          38.125.204.0/22 maxlen: 22
                          38.125.228.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:34:fa:e9:80:40:98:7f:65:d7:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Mar 28 18:44:36 2026 GMT
            Not After : May 26 21:29:47 2026 GMT
        Subject: CN=2cffa3e3-a0ac-44d4-a9ba-5ed3c9258189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:40:fc:83:c2:b8:f2:f4:dd:11:59:6c:c5:ba:
                    20:17:0e:59:d7:4c:d7:42:d3:0c:9f:e2:03:5f:fe:
                    ca:4d:7a:c6:5b:94:cf:e2:6a:e2:d0:02:d5:e7:7e:
                    14:02:58:14:cd:23:a0:9f:08:ab:12:bd:da:05:54:
                    c0:13:22:cb:ea:f6:e7:d4:e1:85:04:84:bd:b7:53:
                    4c:fc:34:15:32:45:72:1e:54:c1:08:07:73:7e:b7:
                    8c:5d:c0:a0:d0:43:29:5e:97:0a:9d:d6:ab:47:64:
                    2f:02:0e:26:5a:5e:c1:93:64:0e:c6:e3:7e:f9:71:
                    8f:c6:c0:3f:92:bc:a6:1f:64:0d:c6:18:a1:4c:a2:
                    e7:0e:75:95:d2:f4:34:53:92:16:4c:5d:ef:3b:4f:
                    66:f8:6b:e1:d9:01:0e:61:13:1d:32:ea:22:78:b3:
                    c7:4b:44:43:96:d6:2b:ba:0c:a7:38:45:51:ea:25:
                    6d:11:dd:1b:4d:d3:46:24:17:8f:b6:07:35:f9:0d:
                    ef:e8:38:71:9b:83:24:b0:ee:8b:02:93:b7:b7:3a:
                    22:40:89:89:dd:ce:c7:f3:a9:88:3a:80:59:f1:88:
                    0a:8f:7f:2c:80:b6:41:29:7c:70:b4:fd:50:a3:63:
                    07:68:73:e7:31:69:a5:88:09:fa:37:cd:c5:0b:b2:
                    2d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:26:F1:2A:50:08:77:ED:91:73:4A:31:F5:44:F6:74:D3:96:C4:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c5858c59-1f80-32b4-b8fb-b3b11b92ca45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.89.156.0/22
                  38.98.88.0/22
                  38.125.204.0/22
                  38.125.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:de:40:26:dc:e1:6f:1f:f6:a2:97:d8:97:8b:ee:93:ca:74:
         0b:b4:cb:ab:08:6e:37:19:8d:df:6e:05:08:f8:89:4c:18:7b:
         27:30:bc:f0:88:35:64:ae:07:e6:a1:f2:6c:e7:e7:f3:c4:11:
         b5:4f:46:4f:03:0f:63:dd:b0:23:89:0d:32:60:cb:0c:40:bd:
         f3:50:bd:cd:61:f3:84:24:02:df:d2:93:41:8b:25:40:07:67:
         f9:84:8e:bc:cb:b7:49:27:a4:a8:f5:db:78:8f:3c:2f:4e:ae:
         22:f2:0a:b5:9e:4a:e0:1b:46:55:e3:12:a5:3f:50:20:9e:f4:
         a3:aa:13:81:42:87:bd:aa:54:ae:2a:48:17:24:2a:52:70:1d:
         ca:e7:8e:98:82:29:74:f8:56:f4:ee:b0:a2:dd:3f:f3:22:d4:
         9b:14:ce:c0:74:a8:03:09:62:b8:86:ad:da:6c:51:85:ff:54:
         7f:4c:82:c2:9a:b5:b6:8c:c4:1a:1d:80:b0:30:01:0a:91:2f:
         ad:0d:14:8c:b3:da:40:1c:b3:c0:fa:0e:e1:e8:54:ae:22:64:
         b4:36:87:57:22:20:0f:b8:f4:4a:0a:6d:04:11:d9:8c:4a:0c:
         81:68:12:e5:77:11:12:d5:4b:f4:27:38:31:9e:d6:cb:05:a5:
         37:3f:0d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 22:39:10 2026 by rpki-client