Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b7cc46a3-e5f8-3778-97ab-d8ea0303684f.roa
File:                     b7cc46a3-e5f8-3778-97ab-d8ea0303684f.roa (raw, json)
Hash identifier:          +U4SW7UKiGksB0zBGcKTJVNSBI8p3/8l4FwNupj78Qw=
Subject key identifier:   B1:E8:D0:86:78:EC:43:7B:1B:4B:90:E9:F7:2E:30:B8:D5:85:2E:9C
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584B71871720D1468A0AE69902C0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b7cc46a3-e5f8-3778-97ab-d8ea0303684f.roa
Signing time:             Tue 07 Oct 2025 14:26:14 +0000
ROA not before:           Tue 07 Oct 2025 14:26:14 +0000
ROA not after:            Mon 05 Jan 2026 15:26:14 +0000
asID:                     274720
IP address blocks:        38.19.54.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:87:17:20:d1:46:8a:0a:e6:99:02:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct  7 14:26:14 2025 GMT
            Not After : Jan  5 15:26:14 2026 GMT
        Subject: CN=d9ea92ea-0dc0-431b-b624-af90d3be299c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:17:5b:a1:32:4a:32:50:80:d9:07:93:82:cf:
                    10:2d:05:9a:09:2d:ed:35:fd:42:c1:d9:aa:e8:be:
                    05:e6:71:68:8b:c0:ef:fd:f6:9c:f0:2a:e6:d6:44:
                    e9:9b:ab:38:61:5c:4b:23:2f:0c:26:97:af:b6:96:
                    57:d8:41:66:55:12:a7:ba:14:fa:32:b5:97:77:53:
                    5c:ca:49:d9:fe:45:31:77:50:d6:08:7e:70:f3:ee:
                    49:cc:14:b4:1d:dd:f9:af:72:21:b2:ae:c0:63:07:
                    f1:69:4b:f3:03:b2:17:51:aa:a1:1d:de:4b:fa:64:
                    0d:5c:d3:be:ed:e3:35:ad:94:49:98:00:03:fc:d9:
                    2b:6e:2d:1f:5f:a9:8d:2d:df:b4:de:ff:1e:1f:fd:
                    fd:96:d6:d6:05:ec:e4:13:a2:4f:7f:63:f7:33:6c:
                    6d:23:9d:d6:7f:06:5a:4d:bb:d8:ec:1d:c2:dc:d7:
                    58:03:5c:87:37:0e:aa:ac:2c:d0:b9:58:c1:9b:b2:
                    11:39:51:a1:b5:42:51:48:48:af:b1:eb:75:37:d8:
                    90:a7:12:13:10:04:5f:43:24:ae:7e:c9:98:07:57:
                    15:d3:34:67:33:27:40:60:f2:00:45:94:34:60:6a:
                    14:d1:66:fe:e0:70:70:31:54:fb:b3:ce:da:06:09:
                    7b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:E8:D0:86:78:EC:43:7B:1B:4B:90:E9:F7:2E:30:B8:D5:85:2E:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b7cc46a3-e5f8-3778-97ab-d8ea0303684f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.19.54.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:6e:1c:30:88:f2:57:0a:31:88:e3:6f:7d:fa:2e:14:b4:7f:
         75:7c:41:9d:79:40:80:8e:ad:07:78:dc:90:f8:87:2f:f3:eb:
         2e:40:9b:bf:ce:85:29:d5:8e:ee:0b:f9:41:bf:15:d4:0b:d6:
         92:eb:fb:ae:ae:57:99:27:e6:40:15:ac:5e:ae:6b:4c:c9:07:
         6f:f4:cd:ab:40:87:79:e1:f5:7c:37:a8:74:ad:2f:ca:30:1b:
         40:d4:18:f7:bb:e4:a0:7a:68:99:f2:84:53:3e:65:7c:f7:8f:
         bc:32:ba:db:55:99:da:c5:dc:a2:33:e7:7c:3e:79:c5:e2:64:
         8b:c8:7d:a8:41:1b:aa:b4:46:38:1b:4a:9e:62:c7:44:4e:88:
         8d:d7:fd:ed:21:d4:e4:8b:5f:f2:52:d2:cb:cf:c8:3f:d0:81:
         90:c7:f9:d4:f6:64:94:16:7d:ac:59:7d:cb:08:02:ce:58:77:
         00:f1:f4:07:43:14:cf:6e:51:e1:93:c9:f0:6b:93:ae:52:02:
         a6:f9:9e:a9:ce:92:b8:70:63:66:b1:b0:9d:35:6b:b2:35:13:
         c2:36:84:d3:41:8b:61:2d:48:8f:55:68:60:28:5f:b4:9c:c4:
         ee:4f:bd:51:33:b5:f5:bf:6b:36:c8:ce:4a:3d:6b:09:25:ea:
         67:f7:cb:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 12:06:01 2025 by rpki-client