Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e10c57eb-8b16-377d-9ca2-0e78632bbb91.roa
File:                     e10c57eb-8b16-377d-9ca2-0e78632bbb91.roa (raw, json)
Hash identifier:          ih1IyYGHLl9GA4rfS0w5c0canR+7/oGT3rGqIegoeKU=
Subject key identifier:   B7:06:4F:87:3B:3F:F7:47:CF:54:95:66:74:6B:14:94:38:7E:C1:E2
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584A74B5D8ACB47CCD85B661BA00
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e10c57eb-8b16-377d-9ca2-0e78632bbb91.roa
Signing time:             Wed 09 Jul 2025 01:00:49 +0000
ROA not before:           Wed 09 Jul 2025 01:00:49 +0000
ROA not after:            Tue 07 Oct 2025 01:00:49 +0000
asID:                     852
IP address blocks:        208.38.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:74:b5:d8:ac:b4:7c:cd:85:b6:61:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul  9 01:00:49 2025 GMT
            Not After : Oct  7 01:00:49 2025 GMT
        Subject: CN=d8eb155b-88de-4bcb-aa85-245fe214e976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7f:e5:39:86:c6:f0:d2:40:94:bf:33:27:1e:
                    f4:50:f7:39:82:c3:75:d9:d1:e8:21:e9:1b:79:a0:
                    fc:1b:61:19:0a:6d:ae:82:ac:1c:35:c1:e6:0a:b6:
                    63:15:e8:ff:78:d3:93:63:8c:47:88:90:f3:e9:a8:
                    1a:3a:1c:6e:04:a5:49:3d:d9:cc:c2:0e:d1:70:5a:
                    37:36:63:a2:c2:af:ef:80:94:9a:13:5b:4e:20:91:
                    90:01:6c:b2:58:58:88:97:14:3c:01:f5:f6:58:e7:
                    4d:f1:3e:a4:db:3c:9e:08:00:a0:40:21:1a:51:28:
                    24:bd:5e:10:be:33:c7:c4:55:1b:6a:d5:1b:99:3b:
                    ae:4f:ee:cb:62:6a:85:0b:7d:06:b7:5d:c6:be:45:
                    ab:8a:f2:88:31:34:ae:da:62:5a:38:bf:c8:5b:c8:
                    0a:bc:a4:a3:65:f5:da:65:eb:e0:c4:ff:7b:80:89:
                    06:09:0e:70:93:bb:9d:d1:a0:34:bb:7e:34:85:c3:
                    c7:b8:9a:38:75:0d:1d:c7:11:a5:03:95:e0:83:f5:
                    95:85:37:85:08:31:54:bd:41:be:90:67:5c:5c:74:
                    6f:dd:b7:75:73:d7:de:6c:bb:e7:46:1d:d4:b4:45:
                    b0:1e:4e:fb:12:f7:b3:dc:5e:cd:fa:22:42:8d:10:
                    7f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:06:4F:87:3B:3F:F7:47:CF:54:95:66:74:6B:14:94:38:7E:C1:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e10c57eb-8b16-377d-9ca2-0e78632bbb91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.38.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:d8:9b:1f:8d:7a:45:e2:bf:c7:b1:45:b4:13:21:42:80:15:
         9f:e9:2e:7b:b5:37:bf:81:b0:7c:8d:8c:f1:50:32:86:0b:15:
         12:3a:6f:38:3c:af:53:70:36:8e:bf:2d:99:8d:50:97:91:93:
         34:6d:23:6b:fd:e3:fc:15:04:9e:b4:ac:de:b1:43:33:3a:bb:
         5f:5c:a5:55:24:5e:cc:16:01:9d:04:9b:9c:40:20:67:16:71:
         a4:60:45:36:5e:b9:00:44:f8:60:0d:d4:46:dd:8f:55:9b:3e:
         c4:0d:64:62:9e:76:0b:26:02:e5:38:d6:34:f7:32:c7:68:81:
         ef:5a:78:46:43:fb:de:69:f7:a0:ac:29:4a:dc:2e:b6:4a:5d:
         f7:f2:cb:d2:0e:b5:60:9f:bc:7b:af:f2:5c:9f:84:e3:84:55:
         86:e5:70:2b:32:b1:85:70:aa:d6:1d:77:38:fc:ba:a7:fa:f4:
         e9:22:c0:44:41:30:e3:2d:53:d8:dd:80:42:b1:29:17:fe:09:
         1d:26:fb:a9:fc:18:78:d8:6c:ab:85:11:dc:f3:d1:99:29:18:
         8a:42:f1:40:b8:03:3f:2e:e3:fd:5d:34:57:f6:be:f9:e1:7f:
         a4:1a:3b:7a:f1:b5:a9:f9:58:64:d3:47:90:53:ba:98:0b:e2:
         4a:3d:91:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 19:26:09 2025 by rpki-client