Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/38d9a0e9-90b7-3886-ae3b-1824b0d93c0b.roa
File:                     38d9a0e9-90b7-3886-ae3b-1824b0d93c0b.roa (raw, json)
Hash identifier:          s3wTLkLKS7HasZZGTNhQIFdXKf0TQJ1BA9Yg47Jf+F0=
Subject key identifier:   A4:4B:CA:FC:33:B0:C4:2F:FC:12:84:02:C0:7A:EF:7C:3A:8F:59:6C
Certificate issuer:       /CN=d3bf28f7-eba5-4254-a572-761a872427b5
Certificate serial:       010D0C9F4328584AF7EBD307EF26975049D763E0
Authority key identifier: 05:83:BF:45:04:55:C8:8C:9C:6C:F8:A0:5B:76:31:FE:F7:6A:8C:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/38d9a0e9-90b7-3886-ae3b-1824b0d93c0b.roa
Signing time:             Mon 25 Aug 2025 01:00:33 +0000
ROA not before:           Mon 25 Aug 2025 01:00:33 +0000
ROA not after:            Sun 23 Nov 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        192.103.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/d3bf28f7-eba5-4254-a572-761a872427b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/d3bf28f7-eba5-4254-a572-761a872427b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f7:eb:d3:07:ef:26:97:50:49:d7:63:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3bf28f7-eba5-4254-a572-761a872427b5
        Validity
            Not Before: Aug 25 01:00:33 2025 GMT
            Not After : Nov 23 02:00:33 2025 GMT
        Subject: CN=4bdaabb7-8398-49d3-8721-ef243e6be285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:de:6e:81:61:dc:85:44:ff:11:4a:70:e2:52:
                    82:72:9c:ba:71:14:c4:64:50:74:6f:12:e0:68:03:
                    c5:ca:08:10:f6:96:24:3a:f4:42:4d:49:85:11:89:
                    9b:da:ca:7a:80:5f:8f:16:e5:9c:ab:39:13:35:40:
                    77:5e:e2:ce:5c:df:62:18:58:54:74:51:ed:a7:42:
                    bb:d0:6a:6a:a9:3a:43:ce:a9:e2:ac:3f:c4:38:cd:
                    a6:bf:3d:fe:60:77:ae:91:0a:51:71:8b:dd:b2:33:
                    39:72:85:95:ef:46:bc:12:b0:01:0a:6b:bd:f4:4b:
                    51:a8:1c:53:44:ce:04:28:c2:5c:b6:1d:19:77:30:
                    35:b3:a1:61:8f:ad:0d:e6:b8:a6:2c:80:dd:82:5e:
                    4a:d7:00:50:53:b0:6d:15:db:e2:e8:af:96:a6:21:
                    35:ea:7a:c5:7e:88:19:97:d8:25:7e:77:2a:14:66:
                    fa:65:61:a1:76:83:db:03:72:66:f2:26:e2:c7:2e:
                    09:b1:c2:0f:ab:31:24:d1:49:f9:62:b1:3a:07:20:
                    09:a4:f0:06:37:64:6e:6f:df:fa:41:80:ea:dd:64:
                    52:77:77:63:d1:d2:be:e8:65:9c:cc:d1:ba:7c:5d:
                    26:43:ea:2a:9f:a4:bd:45:4e:7f:8c:d6:79:14:06:
                    af:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:4B:CA:FC:33:B0:C4:2F:FC:12:84:02:C0:7A:EF:7C:3A:8F:59:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/38d9a0e9-90b7-3886-ae3b-1824b0d93c0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/d3bf28f7-eba5-4254-a572-761a872427b5.crl

            X509v3 Authority Key Identifier:
                keyid:05:83:BF:45:04:55:C8:8C:9C:6C:F8:A0:5B:76:31:FE:F7:6A:8C:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.103.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:c6:4f:a7:f7:ce:71:fa:db:74:91:ff:c9:62:11:53:80:13:
         49:26:41:af:eb:9b:61:31:c1:89:fd:d7:18:58:d4:43:0a:31:
         70:3f:fa:4a:f6:2e:f5:a7:1c:9b:a8:8f:b8:0a:32:21:22:84:
         39:97:83:49:13:b3:51:32:b0:31:64:d1:cb:87:26:36:e5:8b:
         7c:b7:a0:b9:d8:8a:48:b6:2c:5f:e9:4f:c2:e0:78:93:e7:83:
         41:5a:e8:8c:ca:b4:f6:80:a2:9c:a8:dd:3b:e6:94:ae:fe:95:
         a5:05:15:19:96:9c:72:1e:30:1f:b7:b2:a1:45:71:a3:f3:6b:
         a7:5f:66:b0:13:db:a8:9a:a3:24:93:26:cc:ef:f0:92:58:e9:
         fb:3a:8a:f9:be:78:79:26:0c:c2:cc:05:a5:67:4e:47:e4:f1:
         b4:77:5c:78:02:98:72:cb:f9:d1:e6:3d:57:31:81:c0:c0:e8:
         49:d6:61:90:56:40:9e:b9:29:ad:d4:57:a6:de:01:05:d4:38:
         91:5d:62:5a:dc:75:e9:30:c2:ce:68:bb:f7:b0:59:2a:e0:3c:
         0b:0e:e9:b8:d4:28:a2:f2:fd:fe:e2:a4:fb:d6:95:e0:e0:d9:
         54:ee:08:11:0e:ec:54:35:94:b5:9e:39:57:41:76:13:3f:13:
         f5:e1:f1:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 19:38:28 2025 by rpki-client