Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e8ab5cb4-16e3-30fd-9b4f-3ebf8e7d5763.roa
File:                     e8ab5cb4-16e3-30fd-9b4f-3ebf8e7d5763.roa (raw, json)
Hash identifier:          yRS0AXwmSs/gpEZS1BQxUnCZu7UoP93ZLvMxVyFHPno=
Subject key identifier:   6B:A2:7E:02:97:DF:16:EC:B7:0E:CF:20:9C:7E:77:0E:89:4B:66:3B
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584EA639B6A218BF8B79DCBD9B00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e8ab5cb4-16e3-30fd-9b4f-3ebf8e7d5763.roa
Signing time:             Tue 28 Jul 2026 13:48:59 +0000
ROA not before:           Tue 28 Jul 2026 13:48:59 +0000
ROA not after:            Mon 26 Oct 2026 13:48:59 +0000
asID:                     272906
IP address blocks:        38.21.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a6:39:b6:a2:18:bf:8b:79:dc:bd:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jul 28 13:48:59 2026 GMT
            Not After : Oct 26 13:48:59 2026 GMT
        Subject: CN=5b1e1b47-8130-4024-8d7d-700a8963598d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8b:bb:61:ce:b5:5e:50:0f:71:30:fa:c6:5a:
                    f1:9e:e4:81:e3:46:c8:db:ca:16:01:7b:43:d9:0f:
                    58:23:9a:f7:1f:5b:18:c9:4a:e5:13:9b:a4:89:dc:
                    85:e7:ae:c2:6e:6a:4f:67:82:7d:1c:13:20:77:ac:
                    b4:c8:c2:24:e9:05:2a:56:9f:58:2b:c2:97:98:5c:
                    c3:41:71:2f:c4:d1:5e:90:f6:7b:ff:90:53:5c:b6:
                    fa:24:24:c1:69:f2:b3:03:58:9c:ea:59:ad:bb:30:
                    4e:5f:93:cc:53:a1:97:b4:c8:b2:c9:2d:d1:a7:dd:
                    4a:ba:89:5a:74:f6:63:a2:28:c9:40:41:6b:ce:3f:
                    d7:44:6b:ad:f0:9a:aa:70:82:1f:52:55:52:c6:e8:
                    6c:86:cd:79:42:af:8d:77:6e:94:84:09:a9:3e:bc:
                    df:98:23:46:54:d6:75:3a:6a:2d:2d:1b:0a:1f:6f:
                    1a:0c:e6:15:af:40:4d:72:11:94:79:b5:d7:c8:8d:
                    1d:11:b2:31:53:1f:d8:ea:69:01:52:3a:02:71:a2:
                    16:e6:a8:b8:d2:8c:93:3d:11:73:cf:05:d0:c1:78:
                    6e:23:17:1e:20:28:3a:0c:e6:45:bb:ca:ea:0c:cc:
                    09:4c:ef:30:6a:ee:3d:3b:e7:c6:84:11:64:04:42:
                    c6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A2:7E:02:97:DF:16:EC:B7:0E:CF:20:9C:7E:77:0E:89:4B:66:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/e8ab5cb4-16e3-30fd-9b4f-3ebf8e7d5763.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.21.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:09:6d:a2:ec:84:6f:e6:ea:78:fe:8b:fe:70:7c:73:db:e4:
         3c:8a:16:67:e5:da:bb:67:8c:17:b3:8a:61:49:b5:a1:df:a2:
         7c:fe:47:6e:84:64:f5:af:b2:51:54:e1:d9:c6:01:61:29:af:
         a4:e3:95:6a:76:f3:f2:74:47:2e:28:0a:99:2c:04:7f:d8:18:
         5b:bd:15:f5:6f:ee:cb:6b:36:4b:c4:86:16:ac:1e:35:a3:af:
         9a:35:ef:b1:94:4b:80:cf:76:10:1a:cb:6a:0e:49:a9:6f:0d:
         f8:d9:3c:fe:b1:16:0b:b1:4d:12:ad:12:1a:d6:9a:c3:7e:9d:
         e6:fc:1e:90:e5:f7:3d:ce:78:ec:48:1c:23:ea:79:1b:7b:14:
         68:6e:b9:96:8d:5b:6d:9e:78:00:87:84:99:64:f5:56:92:89:
         81:ee:63:71:17:15:63:14:db:1e:48:5b:67:2e:ad:da:8b:a2:
         c9:10:9b:92:3b:64:e4:75:db:88:a2:04:25:74:c7:b9:ee:54:
         f1:82:f3:64:b9:cc:d1:e7:4a:39:8c:d3:3f:2e:69:be:b2:e6:
         95:18:01:68:25:b0:93:d1:c2:a3:8b:7e:3b:9f:ed:d4:34:c7:
         fd:06:84:be:70:53:97:b4:d9:02:1c:e5:99:a9:f6:a9:e3:87:
         cc:65:77:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:23:09 2026 by rpki-client