Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/17f967e2-483e-360d-b576-18d7416b8529.roa
File:                     17f967e2-483e-360d-b576-18d7416b8529.roa (raw, json)
Hash identifier:          l+BSYLmGV6/b4Hy+i6GRuluqnGntAyWFHvB2fVcSm0k=
Subject key identifier:   E1:EB:4A:10:A5:47:9B:29:32:9F:0B:05:E6:22:BA:45:B2:2E:08:8E
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584B610EFE304000D34E5D040080
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/17f967e2-483e-360d-b576-18d7416b8529.roa
Signing time:             Wed 01 Oct 2025 16:51:19 +0000
ROA not before:           Wed 01 Oct 2025 16:51:19 +0000
ROA not after:            Tue 30 Dec 2025 17:51:19 +0000
asID:                     60404
IP address blocks:        38.150.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:61:0e:fe:30:40:00:d3:4e:5d:04:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct  1 16:51:19 2025 GMT
            Not After : Dec 30 17:51:19 2025 GMT
        Subject: CN=96628986-2ac9-4173-8584-113870073f18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:31:36:7a:f3:02:fc:99:1d:dd:7b:8c:48:39:
                    c7:8f:d2:d7:6b:c7:af:19:ec:cf:72:94:0d:c8:ed:
                    30:4a:04:3e:12:f8:1f:56:5c:7b:c8:b3:8c:34:92:
                    c9:bb:26:f3:ad:dc:c6:fb:81:dc:60:ac:91:e4:4d:
                    57:ce:1c:ed:ad:48:3d:30:5c:17:e2:93:98:dd:21:
                    64:38:bf:38:37:df:64:03:5d:06:73:1b:16:83:ae:
                    91:5a:f3:01:e4:b0:6f:b8:07:7b:e4:b6:fc:36:a8:
                    95:74:68:65:7e:7c:61:b6:d9:18:d5:10:a3:70:ee:
                    82:86:d8:db:b5:c4:9d:23:d0:1c:58:f9:aa:5f:b2:
                    68:e1:8e:e2:89:86:c4:1c:34:89:2a:f0:b0:fe:27:
                    df:30:57:cf:2b:92:cf:b8:b0:24:01:2b:e8:6d:dc:
                    18:d0:c4:d8:de:f4:c4:fd:66:34:27:7e:03:ef:ca:
                    20:f8:da:7d:80:0a:ec:3a:26:93:4d:b4:ae:9e:bc:
                    7f:43:5b:9f:06:90:43:cf:0c:bc:e4:f5:be:2b:9a:
                    e4:ef:84:85:1a:71:39:11:b3:e2:5b:2c:aa:bf:51:
                    ff:d2:33:57:ad:e3:65:02:fd:d9:72:23:0c:1c:1a:
                    8f:ab:1a:4a:36:05:ce:80:1a:73:b9:93:59:c5:6b:
                    82:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:EB:4A:10:A5:47:9B:29:32:9F:0B:05:E6:22:BA:45:B2:2E:08:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/17f967e2-483e-360d-b576-18d7416b8529.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.150.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:cd:73:f5:43:35:58:f1:ba:f6:d1:5c:d3:f9:40:c0:ff:b8:
         48:56:ec:9c:1f:89:e8:b3:3b:1a:ad:8c:db:54:17:72:bc:b6:
         87:64:5e:7b:51:74:6c:be:a5:42:eb:f7:cd:9e:35:f0:32:38:
         bc:4b:20:e4:07:fb:a0:0b:e3:72:29:75:10:59:55:54:f7:d9:
         cd:13:09:c8:c4:97:45:5b:25:f9:18:4a:e0:36:99:8e:1e:b2:
         74:d7:39:d5:77:78:9a:59:e4:0a:99:d9:8e:48:ed:e6:aa:b8:
         8c:e7:ce:a3:cb:75:55:b6:c6:07:9f:d7:d9:cc:b8:ce:9b:04:
         04:c7:4a:43:af:af:41:bf:e4:93:07:c6:b0:a2:31:05:9c:bc:
         d6:e0:f8:44:95:6d:ba:fc:10:b9:1c:56:98:0c:57:62:51:75:
         a2:f9:d3:f5:55:25:d8:d7:61:41:91:ff:c0:6d:c4:0d:a2:fb:
         dd:1e:5e:dc:13:23:68:81:1f:29:2f:19:4b:89:89:ba:48:84:
         34:36:e6:88:b7:49:c6:d2:1e:a3:c4:5f:81:82:56:ee:bb:62:
         37:da:a3:24:a3:a8:77:09:0b:0d:dd:eb:52:4d:cd:b0:4a:95:
         1d:65:3c:04:95:31:7c:f6:87:65:f1:83:45:c1:7c:f6:89:fa:
         5a:a5:23:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 12:06:03 2025 by rpki-client