Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c6db1d34-76fc-36e7-9276-34dfecc365f0.roa
File:                     c6db1d34-76fc-36e7-9276-34dfecc365f0.roa (raw, json)
Hash identifier:          sRrYSojXh6O1bY0SYlGKAiU4AhcBQabKe3PybpyBvIo=
Subject key identifier:   95:69:0D:6E:7B:23:40:9A:0A:E9:57:BF:F7:41:B8:A2:D0:BA:64:7D
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584B5E7CA71114CAF772622A82C0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c6db1d34-76fc-36e7-9276-34dfecc365f0.roa
Signing time:             Tue 30 Sep 2025 18:44:51 +0000
ROA not before:           Tue 30 Sep 2025 18:44:51 +0000
ROA not after:            Mon 29 Dec 2025 19:44:51 +0000
asID:                     0
IP address blocks:        38.69.176.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5e:7c:a7:11:14:ca:f7:72:62:2a:82:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep 30 18:44:51 2025 GMT
            Not After : Dec 29 19:44:51 2025 GMT
        Subject: CN=52afd58c-5fbc-4a0b-b9e1-6dd0e03887b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d5:e7:0a:12:64:17:57:59:b8:19:fb:81:f5:
                    95:61:bb:4c:b8:12:c7:13:7b:c2:ca:ce:ed:ab:a3:
                    49:dd:8f:f3:34:b6:59:8d:1b:ab:1b:18:ce:a4:bc:
                    76:5b:a6:50:9d:e9:50:4a:25:3f:76:0b:f1:70:81:
                    91:04:88:d7:be:98:f4:f4:32:7d:4e:0a:3b:d9:f1:
                    65:a5:bd:85:43:92:13:2f:27:60:60:1e:93:82:1c:
                    ba:cd:27:ae:3b:f8:17:00:10:30:9b:8b:ff:cb:09:
                    5d:24:57:c8:b4:9b:95:b6:75:68:87:94:cf:ae:37:
                    d5:05:24:38:37:2d:e8:99:6a:83:fe:7d:ba:11:0a:
                    9d:58:01:87:b8:22:31:dd:50:ee:14:dc:a3:13:d7:
                    a5:1e:cd:a0:6d:56:e7:d0:b4:be:c3:80:6c:dc:1d:
                    6e:1d:6f:33:d8:9d:9d:4b:9c:43:3e:97:33:89:c6:
                    6a:9b:6e:79:85:63:49:ca:96:c0:6e:53:69:6d:52:
                    cc:bc:fc:4d:17:0c:f5:67:21:75:7f:00:b5:7f:8f:
                    a4:64:a5:5c:60:10:73:07:1f:13:0e:ab:c5:ef:21:
                    30:0d:3d:9b:6e:a4:9c:15:97:79:90:35:17:0c:3c:
                    df:fc:d6:be:4b:3d:4e:ae:4d:7e:66:ce:15:ac:fb:
                    48:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:69:0D:6E:7B:23:40:9A:0A:E9:57:BF:F7:41:B8:A2:D0:BA:64:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c6db1d34-76fc-36e7-9276-34dfecc365f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.69.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:50:82:7b:59:ec:a3:9d:3e:db:1c:f3:a2:69:c6:0f:7b:ae:
         ba:ef:24:e1:4a:88:a6:15:73:d6:51:8d:3a:fe:7c:36:2a:b9:
         01:ed:ca:bd:6a:43:2c:1b:8c:46:e0:3d:2a:4f:3d:48:5c:3d:
         d8:11:2b:66:81:e5:14:2a:4d:60:f4:70:62:1c:8c:46:e3:39:
         23:8e:98:cf:12:85:61:37:af:40:42:00:f3:41:4d:01:de:7c:
         f3:f1:b6:65:07:93:b7:7e:1e:e6:2b:93:2b:66:9e:f1:b1:c7:
         2e:35:c3:13:70:6e:8a:67:33:d3:4f:f1:d4:f2:db:b1:56:5d:
         41:8f:6b:a0:b3:f3:f9:7b:98:a6:2a:6b:21:95:e6:df:04:f0:
         f7:0b:92:bb:d1:55:53:43:97:dd:a2:df:d4:2c:ec:26:17:16:
         63:57:d0:29:f9:40:7c:2a:d9:96:4b:9c:03:fe:1e:86:f7:f9:
         81:e7:ec:f0:c9:51:d1:f3:ca:ac:e7:1f:0b:73:98:4e:62:cf:
         4d:96:56:bc:ef:0a:70:0f:1e:04:57:e8:65:98:c4:3a:2c:f3:
         fc:7d:e0:4e:49:8e:74:1a:88:75:eb:2f:93:8e:40:64:ec:d2:
         93:b3:9b:6c:b7:82:6f:f6:06:08:83:34:8a:02:04:60:54:8e:
         30:e1:ca:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 13:57:45 2025 by rpki-client