Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4266161f-2cd7-4d22-a980-bfb4d861e17b/7e406fee-b60a-39c4-b28a-afd5c308ccd0.roa
File:                     7e406fee-b60a-39c4-b28a-afd5c308ccd0.roa (raw, json)
Hash identifier:          GH3YtfZ914vs9dr5ZY9CBZkvCJJ0gSbXWMFcgF657SE=
Subject key identifier:   B5:29:F1:C3:85:B7:2B:96:86:F4:06:C3:E3:87:50:19:FD:29:DA:65
Certificate issuer:       /CN=4266161f-2cd7-4d22-a980-bfb4d861e17b
Certificate serial:       010D0C9F4328584AF5212941CDDF186FBC0CA1E0
Authority key identifier: C2:5E:05:A1:A1:3E:84:68:0D:00:F5:AA:13:25:7C:00:10:0C:A2:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4266161f-2cd7-4d22-a980-bfb4d861e17b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4266161f-2cd7-4d22-a980-bfb4d861e17b/7e406fee-b60a-39c4-b28a-afd5c308ccd0.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     400421
IP address blocks:        138.84.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4266161f-2cd7-4d22-a980-bfb4d861e17b/4266161f-2cd7-4d22-a980-bfb4d861e17b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4266161f-2cd7-4d22-a980-bfb4d861e17b/4266161f-2cd7-4d22-a980-bfb4d861e17b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4266161f-2cd7-4d22-a980-bfb4d861e17b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:29:41:cd:df:18:6f:bc:0c:a1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4266161f-2cd7-4d22-a980-bfb4d861e17b
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=0e05b961-6c74-44ed-a78c-1ba433960697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:45:f8:4c:67:ce:4d:3e:a8:6c:de:a8:e1:f6:
                    ca:bf:9e:5c:06:04:93:5a:b6:6a:c4:1f:bd:bd:38:
                    0b:65:cd:78:92:d5:c5:db:db:16:e2:99:c4:42:69:
                    45:2b:2a:a8:3e:c2:68:df:26:ac:87:cd:20:85:75:
                    d4:1f:d0:c6:60:f7:f4:f0:19:25:64:b5:ae:50:fd:
                    32:c4:7d:79:81:55:d9:68:22:9c:18:e6:76:e5:c9:
                    b4:16:fe:58:be:ec:0f:e0:19:81:db:a5:bc:ef:4e:
                    3d:92:67:76:f8:52:10:4a:36:bf:92:ac:ff:32:41:
                    ca:71:37:11:fd:a1:7c:dc:db:57:66:73:a2:82:91:
                    5b:19:ae:c0:79:9c:1b:6a:cd:bb:bc:a9:2d:ab:99:
                    96:df:e9:8b:e2:9c:e2:5e:17:44:66:4c:88:c6:35:
                    d7:e4:8d:3e:76:42:ac:df:d8:1f:70:e0:5f:43:90:
                    4b:51:8d:9e:4e:92:61:7d:f5:d6:c8:dd:c1:1f:ed:
                    2b:bf:f6:e7:7e:e1:93:ec:c2:11:6a:68:a7:39:4f:
                    33:89:cc:6b:7f:53:af:9b:6a:8c:95:25:d7:86:67:
                    e6:d9:03:b3:8e:8e:b7:f7:35:f8:42:a0:85:aa:c1:
                    31:d6:4c:ea:87:b5:a5:c3:02:19:a7:9f:af:d1:ad:
                    87:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:29:F1:C3:85:B7:2B:96:86:F4:06:C3:E3:87:50:19:FD:29:DA:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4266161f-2cd7-4d22-a980-bfb4d861e17b/7e406fee-b60a-39c4-b28a-afd5c308ccd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4266161f-2cd7-4d22-a980-bfb4d861e17b/4266161f-2cd7-4d22-a980-bfb4d861e17b.crl

            X509v3 Authority Key Identifier:
                keyid:C2:5E:05:A1:A1:3E:84:68:0D:00:F5:AA:13:25:7C:00:10:0C:A2:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4266161f-2cd7-4d22-a980-bfb4d861e17b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.84.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:0d:31:19:d7:39:1f:3a:65:d0:7c:ae:0c:11:84:ad:25:59:
         a0:33:61:7c:4a:85:7c:0e:24:50:d6:d1:64:26:2d:c3:a4:be:
         67:15:52:28:cc:de:d3:6d:6f:49:d0:c2:27:d4:b5:e4:02:71:
         6d:43:83:48:74:a3:47:1b:c2:a9:98:08:2e:e4:d9:a9:d3:d7:
         9a:d7:7c:a2:aa:f0:55:f2:1f:1d:29:b3:ef:57:aa:0d:05:fa:
         21:0e:87:78:57:aa:70:dd:45:f1:32:b1:81:13:e4:68:bd:0c:
         59:df:21:d1:e3:f1:17:02:c2:fc:c9:59:5e:3a:a9:0c:4a:4c:
         af:ee:8a:5b:64:bf:65:20:4b:32:33:6e:2c:99:3f:c1:78:d0:
         13:55:f6:b3:59:f7:b8:d9:37:14:0c:7b:81:82:73:3c:a8:ec:
         21:38:40:ec:fc:ba:52:4b:5c:c8:d3:9f:7c:35:9b:6a:b5:99:
         fb:b5:8f:fe:0e:2c:ff:78:3a:31:d3:d9:a4:a0:70:97:6b:95:
         99:d5:01:e5:29:ef:ec:31:f6:71:7f:d6:f7:99:dc:e7:1d:2c:
         c8:f7:4f:40:6e:f6:85:7d:e9:a2:36:9e:7d:df:8c:01:f9:b3:
         9e:c0:66:34:6f:c5:1a:9c:86:46:fc:39:3a:d9:a8:bc:3d:e5:
         9b:63:27:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 26 10:46:14 2025 by rpki-client