Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/fa9071b7-2809-328f-982c-da5361281bd6.roa
File:                     fa9071b7-2809-328f-982c-da5361281bd6.roa (raw, json)
Hash identifier:          lWGJSLAg/ijgAtZcTo1fmyxBFlpuI127vEcIKzn7IQA=
Subject key identifier:   7E:24:18:C3:1D:FA:56:FD:03:04:EE:19:4A:3E:3D:DE:2B:DC:4B:D0
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584B611B207514F49EC8C81E9540
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/fa9071b7-2809-328f-982c-da5361281bd6.roa
Signing time:             Wed 01 Oct 2025 17:15:46 +0000
ROA not before:           Wed 01 Oct 2025 17:15:46 +0000
ROA not after:            Tue 30 Dec 2025 18:15:46 +0000
asID:                     274072
IP address blocks:        38.150.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:61:1b:20:75:14:f4:9e:c8:c8:1e:95:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct  1 17:15:46 2025 GMT
            Not After : Dec 30 18:15:46 2025 GMT
        Subject: CN=6e0f40e7-22f2-475d-95c2-e799a15134c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:07:ee:19:91:76:38:37:f6:1e:ef:50:b2:cd:
                    43:89:1b:69:cf:da:f7:15:ca:b8:09:9c:f3:ae:13:
                    a2:c2:13:69:74:38:11:0e:12:c8:27:2e:89:e7:7a:
                    f6:e2:2f:f8:c3:cb:8e:5e:12:41:c2:37:ed:c8:87:
                    a7:57:e1:bc:3f:4d:1e:5b:07:c5:15:0b:62:96:68:
                    06:8d:7b:d8:f6:be:f0:11:5b:4a:8c:1b:7f:8b:70:
                    ac:5b:45:1f:61:13:f6:3c:9b:e3:e9:ce:9a:b7:57:
                    1e:1b:3c:94:c2:ac:a3:9a:96:c5:04:6c:a7:f2:41:
                    60:3c:e1:fc:ff:91:cb:07:89:36:1f:61:cf:1a:de:
                    8a:29:6f:53:c4:36:8c:87:c1:79:94:10:a3:d8:88:
                    e5:cf:7b:5d:60:cc:f5:20:f4:25:73:12:99:e8:8b:
                    89:7d:73:9f:a7:99:b2:b3:1e:f7:95:53:d2:ca:02:
                    93:e8:a9:fd:4a:ce:5a:ed:8e:4a:ad:03:43:48:67:
                    22:2c:6b:42:94:52:ca:34:c1:cc:b2:14:50:dd:d8:
                    80:7a:28:d9:e8:f6:22:b7:7e:d4:ec:6b:47:27:2d:
                    b5:29:da:c5:38:c2:5a:a1:01:e9:33:7a:bb:c7:f4:
                    f4:34:6e:1a:63:15:6a:2e:d0:7b:2e:73:5f:06:70:
                    90:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:24:18:C3:1D:FA:56:FD:03:04:EE:19:4A:3E:3D:DE:2B:DC:4B:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/fa9071b7-2809-328f-982c-da5361281bd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.150.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:29:72:0b:e6:06:1a:94:54:3c:ae:c4:a6:d8:9f:6d:3f:18:
         7b:20:ec:c7:fc:e6:f5:55:2f:d9:51:68:b3:73:a6:b5:75:82:
         9a:4a:54:24:b4:cf:28:2b:2b:66:60:6d:90:cb:76:bd:b2:4f:
         58:47:42:2f:86:ae:76:f2:46:bb:cf:09:31:9b:45:f8:47:34:
         71:82:60:2d:15:94:3a:88:da:05:f5:76:71:1b:12:ed:93:f5:
         94:a7:81:75:29:7e:5f:63:8f:20:e2:3a:29:87:2a:71:ce:2e:
         3a:ad:3a:a6:aa:fb:de:fc:57:99:ea:84:35:fe:90:f6:16:5d:
         6a:94:ba:ba:2b:3b:ef:b3:71:70:42:ac:81:45:37:38:81:a3:
         b0:ab:e0:ae:e1:6c:a6:ac:7a:ad:e7:37:e7:75:bd:d8:ad:95:
         e5:d7:ee:a2:d4:37:20:00:e6:80:47:18:63:07:bb:45:03:27:
         4f:31:f1:96:0f:f1:74:cd:6a:bb:9e:dc:4a:65:68:9c:ec:87:
         98:29:80:3e:05:46:42:8d:21:33:7c:19:23:09:cb:40:5f:a7:
         5b:63:c7:6b:5f:da:f6:c9:ef:e3:7d:1e:27:8d:99:b6:87:e8:
         d2:a0:d9:10:02:9f:97:80:35:c1:53:0b:1b:e2:40:f7:1f:62:
         91:46:2f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 12:08:46 2025 by rpki-client