Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/381ea8cc-c849-3fb7-a740-560af84ee6ee.roa
File:                     381ea8cc-c849-3fb7-a740-560af84ee6ee.roa (raw, json)
Hash identifier:          aJa7yHHZjpDHaBSqHc6SRHXb1//398HS4LSQ06HMrYY=
Subject key identifier:   0E:FF:31:72:6B:66:04:AD:B9:AB:8A:CC:79:A8:A3:3B:48:09:95:BD
Certificate issuer:       /CN=ab98592a-7218-439c-b165-34810fd16d71
Certificate serial:       010D0C9F4328584F10379EB116316879E74F1B30
Authority key identifier: 07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/381ea8cc-c849-3fb7-a740-560af84ee6ee.roa
Signing time:             Fri 04 Sep 2026 13:00:12 +0000
ROA not before:           Fri 04 Sep 2026 13:00:12 +0000
ROA not after:            Thu 03 Dec 2026 14:00:12 +0000
asID:                     3300
IP address blocks:        63.250.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:10:37:9e:b1:16:31:68:79:e7:4f:1b:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab98592a-7218-439c-b165-34810fd16d71
        Validity
            Not Before: Sep  4 13:00:12 2026 GMT
            Not After : Dec  3 14:00:12 2026 GMT
        Subject: CN=30a09879-8451-4c2f-9708-0df2103bfee5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b3:0c:1b:9b:01:ae:43:7c:f8:45:e2:96:f8:
                    e8:3c:bd:4a:ba:36:c2:b6:77:6a:e7:82:20:52:75:
                    87:7b:04:6b:4f:b0:21:a5:3e:a3:d3:69:03:f1:f6:
                    f4:ee:44:06:1f:d5:a1:96:d7:6a:0d:55:a4:1e:03:
                    e0:6d:d1:3d:3d:ae:41:f7:2e:8c:ff:4a:05:8d:08:
                    73:ff:2e:27:a8:b4:a9:fa:cc:bc:26:46:2c:a2:0b:
                    ed:6f:08:37:07:67:b6:e5:db:dd:51:30:bd:fb:2e:
                    53:c0:28:11:da:5a:34:33:8c:4e:8e:1b:ff:6a:af:
                    39:4a:07:ac:66:c4:31:40:f4:6a:4d:fc:4c:d9:ae:
                    de:fa:6a:06:f2:53:3a:28:12:74:84:05:be:ca:d0:
                    fa:9e:0c:88:98:ea:0c:43:c6:0e:c7:5b:19:64:64:
                    00:65:20:ce:ac:c6:2e:37:79:96:03:c4:96:52:0e:
                    4c:d4:85:f3:8a:b9:2c:94:e1:9f:36:65:ba:71:18:
                    10:45:ad:71:1a:7e:1b:ad:a0:03:51:f6:6e:57:bc:
                    f9:62:11:32:ad:9c:75:2f:2e:33:bf:2c:fe:7b:30:
                    f0:ba:cd:44:bb:ab:8f:69:e5:26:44:1e:32:2b:be:
                    f7:d0:96:83:21:b7:17:e9:97:8e:11:5f:48:71:74:
                    63:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:FF:31:72:6B:66:04:AD:B9:AB:8A:CC:79:A8:A3:3B:48:09:95:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/381ea8cc-c849-3fb7-a740-560af84ee6ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl

            X509v3 Authority Key Identifier:
                keyid:07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.250.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:34:42:2d:7b:64:fa:0c:91:b7:ae:2f:fc:26:4f:c4:2c:3b:
         d0:a8:da:3c:4f:c0:ce:75:48:9f:e1:a3:d9:dc:c5:5b:68:55:
         17:e4:9c:24:e0:99:6f:ce:be:30:2f:f3:75:83:d8:43:c0:87:
         26:53:3c:4b:d7:fa:96:7d:a3:42:d6:ec:fd:75:ce:19:3e:b6:
         7a:57:be:5f:2d:b0:58:f5:8a:9c:6f:18:2a:3d:ab:ce:25:69:
         2e:b9:0d:c9:9e:60:85:c9:ec:7b:d8:73:3f:72:1e:b0:ce:04:
         63:52:3e:4e:95:52:81:c3:ec:e7:c7:f4:7b:73:19:4b:d8:78:
         47:17:85:33:e8:d4:50:42:6a:6b:08:c4:c4:e4:0d:f3:ce:f4:
         18:90:5f:96:59:56:45:1f:e7:f7:77:cf:f7:84:8d:5d:66:14:
         1f:32:8e:7a:73:9c:a0:28:be:ea:47:25:2a:43:fc:c8:e8:0b:
         72:31:da:9f:1f:55:52:06:4c:e7:00:0d:7a:a7:22:7a:1b:70:
         a6:a9:e4:88:62:19:42:ff:36:8b:d8:92:a6:42:7f:bb:cb:4f:
         4f:2e:8b:ee:c2:8d:8f:de:9e:79:68:e3:89:43:0e:09:6d:df:
         6b:91:e8:49:ba:41:c8:62:64:bf:09:18:fa:6e:5e:af:e7:c1:
         ef:94:dd:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:05:45 2026 by rpki-client