Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3ddca278-2c24-3270-93b7-b07b87a39e71.roa
File:                     3ddca278-2c24-3270-93b7-b07b87a39e71.roa (raw, json)
Hash identifier:          eKyWTadObPj5X+BRTA7Mak/bw/QEo2C+RxoYoNZzkuw=
Subject key identifier:   C9:E9:31:A1:3D:A8:54:6F:F3:BD:7F:97:A3:31:5F:7A:FF:87:CA:23
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584B77C296B16B2FBF21BD32F480
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3ddca278-2c24-3270-93b7-b07b87a39e71.roa
Signing time:             Thu 09 Oct 2025 20:00:58 +0000
ROA not before:           Thu 09 Oct 2025 20:00:58 +0000
ROA not after:            Wed 07 Jan 2026 21:00:58 +0000
asID:                     150447
IP address blocks:        38.77.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:77:c2:96:b1:6b:2f:bf:21:bd:32:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct  9 20:00:58 2025 GMT
            Not After : Jan  7 21:00:58 2026 GMT
        Subject: CN=d05b2b76-3bbe-4eb1-887a-c3386b06ae57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c6:74:18:29:19:00:7c:fd:4c:5e:bd:9b:c9:
                    0d:10:81:d1:82:44:97:c8:01:9f:c3:23:58:67:a0:
                    6b:56:19:6f:49:30:68:03:d1:4e:dc:75:93:9a:8e:
                    a5:5d:a6:63:0a:3d:9e:83:6f:04:55:c7:26:a3:93:
                    e4:9a:b7:e2:4d:b8:e4:a2:45:84:0b:6f:51:78:d7:
                    db:20:c4:10:c8:1a:5a:b8:04:c3:2b:26:be:2b:72:
                    de:94:fb:8f:a1:01:14:19:5e:36:b4:a1:e0:79:88:
                    ed:b3:5e:40:04:72:65:7c:d4:e9:f9:4e:48:8d:aa:
                    e3:3f:18:4c:5f:78:5c:88:1a:d5:f6:71:d2:a8:3c:
                    62:f8:e8:4a:da:b4:5b:be:df:2a:7c:6c:5a:f6:cf:
                    72:39:c6:54:2f:3f:ef:f4:99:46:90:7e:78:ac:7a:
                    94:bb:29:0d:2d:69:46:80:9c:5c:26:b6:16:23:66:
                    d1:5b:93:72:d8:68:d9:29:6d:a1:01:6f:4e:fc:92:
                    11:b0:a7:a2:b9:fb:c5:b4:b8:b8:0c:51:8f:bc:21:
                    4b:27:2a:a1:fd:e7:d6:c0:12:d9:19:a1:bc:00:17:
                    c5:47:b7:9f:16:e5:f3:18:9b:59:d8:6d:ce:3f:99:
                    b0:d4:db:bc:fd:76:eb:54:b8:0b:17:21:5b:ca:da:
                    9e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E9:31:A1:3D:A8:54:6F:F3:BD:7F:97:A3:31:5F:7A:FF:87:CA:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3ddca278-2c24-3270-93b7-b07b87a39e71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.77.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:52:9c:6b:a4:3b:97:4b:4f:c9:26:72:78:e5:32:98:23:bb:
         ea:6e:d0:21:87:af:57:fc:d2:9a:17:c0:13:19:99:0e:30:61:
         7f:60:c5:40:7f:49:f8:4e:05:c9:08:d8:89:d4:01:fb:31:0e:
         f4:c7:14:9a:e9:a0:d7:dd:e2:ca:7f:b1:67:8e:2d:9c:8b:7a:
         b4:fd:d2:11:f3:44:0a:aa:0b:1e:16:d4:20:c3:cb:e9:b4:3a:
         44:df:45:89:d1:9e:89:a9:e2:9e:43:3b:46:e7:a5:43:54:67:
         82:8b:2c:28:b7:5b:f6:12:fd:90:5c:e1:14:6b:b4:3a:ee:30:
         68:53:e3:92:be:49:f6:0a:07:1e:8f:c0:ad:25:70:e9:38:d0:
         65:41:df:84:2e:28:5d:49:6b:02:7a:61:07:25:ed:6b:8a:09:
         df:41:9d:3e:8a:db:95:90:d0:1d:a4:e4:04:f5:10:6f:4a:94:
         f3:3c:79:8b:26:fa:77:0c:ec:3e:c2:c8:fd:fb:22:a4:fb:f9:
         43:04:45:4f:ff:74:7e:11:d9:5b:49:86:1f:0c:36:87:fa:3b:
         25:cb:bf:9a:d6:25:98:16:32:cc:52:ad:54:02:3e:e8:ec:7d:
         f8:77:b4:ba:a9:4b:05:54:cb:7e:60:97:bf:26:14:7d:52:1e:
         b6:05:d3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 12:08:16 2025 by rpki-client