Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/171fc2fb-dd8e-3f07-a0dd-960d921e6d3d.roa
File:                     171fc2fb-dd8e-3f07-a0dd-960d921e6d3d.roa (raw, json)
Hash identifier:          ozTFZo7HTukcpcL2FN7Mm6S0tYqz3KGDvKr+nRN1UUo=
Subject key identifier:   0D:03:A3:FB:49:97:EF:06:3B:7F:60:CE:5B:B7:DC:66:92:0F:00:97
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584B6F75F5DD6E81BBEE1D5CE500
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/171fc2fb-dd8e-3f07-a0dd-960d921e6d3d.roa
Signing time:             Mon 06 Oct 2025 20:40:06 +0000
ROA not before:           Mon 06 Oct 2025 20:40:06 +0000
ROA not after:            Sun 04 Jan 2026 21:40:06 +0000
asID:                     0
IP address blocks:        38.9.54.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6f:75:f5:dd:6e:81:bb:ee:1d:5c:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct  6 20:40:06 2025 GMT
            Not After : Jan  4 21:40:06 2026 GMT
        Subject: CN=56440a8a-2d2c-4cc3-bca4-79618d574a45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ac:97:62:4f:2b:0d:34:91:46:7f:26:57:75:
                    29:cc:73:17:cc:d0:b5:9e:d0:f5:cb:59:bc:9b:08:
                    6a:7e:91:ac:e4:fd:a0:0c:81:f9:58:fb:1d:6d:99:
                    c5:89:90:ea:f9:e6:00:00:93:7f:98:be:0d:b0:1a:
                    a8:ed:d7:fd:a8:45:94:f1:c2:69:73:84:76:22:6e:
                    5a:2d:6e:46:fa:00:9e:f0:f6:bc:02:cc:43:7f:28:
                    60:cf:32:9d:90:22:74:52:7d:89:0c:f3:11:90:03:
                    6e:9b:a9:26:68:8b:c3:39:df:fe:5c:7f:45:bd:54:
                    0d:32:19:5b:6b:83:91:b3:dd:78:86:8b:24:4b:2c:
                    3d:dc:cf:7f:c0:d7:6a:e6:06:23:ae:da:0e:52:55:
                    25:d3:b1:c4:ac:20:ff:27:27:c7:df:08:67:f9:c1:
                    61:43:fa:3f:82:4b:86:8e:53:ff:16:a6:5e:98:9b:
                    19:b6:2f:25:7f:bb:9d:c9:50:03:fa:7c:05:c1:bd:
                    79:9e:cb:9d:7d:6a:6d:14:ff:30:e1:8e:91:1a:8b:
                    86:f1:dc:e6:85:d2:91:ab:30:48:0b:eb:cd:1c:f7:
                    65:d4:8c:42:88:38:71:f5:08:0f:2f:0a:2b:60:ac:
                    7c:e1:68:11:8e:00:2b:29:4b:d3:3d:c0:45:e6:d1:
                    45:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:03:A3:FB:49:97:EF:06:3B:7F:60:CE:5B:B7:DC:66:92:0F:00:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/171fc2fb-dd8e-3f07-a0dd-960d921e6d3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.9.54.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:09:89:0d:0f:42:06:7c:5e:63:e3:02:1c:47:e9:ee:66:a7:
         9f:88:6c:a2:84:dd:f2:7d:6e:d1:f9:9c:14:13:d5:54:06:7b:
         b2:ca:67:41:e5:7f:90:4a:d0:d5:d6:b8:92:13:8b:b3:dc:fd:
         64:6f:5e:7a:8d:20:6f:9d:21:e3:d6:82:3d:b2:ea:62:3b:46:
         86:94:fc:4a:eb:45:1a:e4:51:e5:c4:46:d1:0a:07:34:3f:71:
         48:e5:5a:35:4f:d2:62:b8:28:42:17:ec:36:1a:62:57:e3:e7:
         9c:5f:71:8f:a8:58:0e:d5:3d:1e:aa:c2:1c:e7:66:2b:70:9c:
         b9:64:83:e7:fc:50:43:ca:9f:a1:be:e1:0b:a8:3b:19:d9:27:
         5a:ad:5f:4f:52:f4:cf:b0:03:42:cd:98:3a:08:0f:0b:e1:8c:
         d5:01:5b:a6:61:99:35:32:78:4f:32:03:38:0a:04:6f:ee:33:
         6c:e6:7d:65:bf:d4:e7:f0:e7:c8:94:4f:27:19:17:8a:2f:67:
         a3:30:41:82:40:fd:04:6f:c1:56:4c:12:d2:39:5d:8a:11:35:
         88:b3:61:31:28:7a:fb:8b:40:e0:e6:d4:57:bd:d4:91:6a:e1:
         95:ab:84:d1:36:26:6d:22:bc:f0:00:ca:70:b2:67:03:d8:4e:
         f3:95:0f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 13:57:47 2025 by rpki-client