Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/ecbd3945-3869-3ef8-93b1-b9800f888493.roa
File:                     ecbd3945-3869-3ef8-93b1-b9800f888493.roa (raw, json)
Hash identifier:          1CYaUuhSSMCwfajGp3ZhiJlno1UVaobnjOrPwgSii3I=
Subject key identifier:   BD:85:36:AD:12:C1:C3:1C:2E:18:22:22:3C:CB:1C:DE:1F:E9:57:D1
Certificate issuer:       /CN=4eb5326f-ee03-4174-b355-9916b3e826aa
Certificate serial:       010D0C9F4328584B5DD1E01344A8E0EDAD64CE80
Authority key identifier: 4D:4E:2E:24:94:A1:C2:CB:38:23:6D:6E:68:47:24:1D:D2:41:DC:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/ecbd3945-3869-3ef8-93b1-b9800f888493.roa
Signing time:             Tue 30 Sep 2025 13:00:40 +0000
ROA not before:           Tue 30 Sep 2025 13:00:40 +0000
ROA not after:            Mon 29 Dec 2025 14:00:40 +0000
asID:                     400380
IP address blocks:        81.199.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/4eb5326f-ee03-4174-b355-9916b3e826aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/4eb5326f-ee03-4174-b355-9916b3e826aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5d:d1:e0:13:44:a8:e0:ed:ad:64:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eb5326f-ee03-4174-b355-9916b3e826aa
        Validity
            Not Before: Sep 30 13:00:40 2025 GMT
            Not After : Dec 29 14:00:40 2025 GMT
        Subject: CN=4cce2e85-7385-4d4d-aafa-4444243164b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f0:97:cd:2b:c4:4a:56:35:73:84:97:e7:c0:
                    ba:21:1d:ca:c1:5b:94:4d:b7:5d:87:96:d2:e6:d4:
                    67:c2:02:78:b5:f9:97:3e:07:1b:e4:e2:e6:8d:7c:
                    d0:f0:60:31:df:f0:c0:fd:d4:bf:f1:90:a2:f4:71:
                    0a:0d:5a:24:a2:0e:9e:2b:53:56:a2:dd:f6:cb:10:
                    7e:89:a8:88:c1:9d:5e:95:8e:ba:e8:d4:35:e3:67:
                    62:76:32:78:df:23:9d:7b:8a:e0:6d:2f:2d:b1:02:
                    99:65:de:64:c0:f7:6b:1e:58:05:1d:df:da:d3:6e:
                    10:cd:d2:bb:ca:96:31:9a:39:82:87:b6:d9:b2:d0:
                    00:61:b6:d1:fb:4a:1b:8d:3f:e0:f6:c6:da:ea:da:
                    99:9a:3a:b5:f2:65:1e:a8:0d:ff:7e:51:40:3c:47:
                    68:98:e6:13:14:2e:ef:06:04:67:25:11:fb:14:9d:
                    73:90:19:52:48:30:c7:ae:0c:4a:17:1a:50:d3:45:
                    37:f7:13:7e:2e:46:ab:27:d2:15:bf:86:ee:ec:05:
                    34:1c:b9:3f:28:ec:66:0d:af:ec:81:ba:b8:15:a2:
                    07:d2:fd:65:70:ad:73:63:7c:88:f4:23:75:a8:df:
                    04:2a:d1:ab:e1:15:18:00:3d:3d:34:a9:17:85:9d:
                    a4:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:85:36:AD:12:C1:C3:1C:2E:18:22:22:3C:CB:1C:DE:1F:E9:57:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/ecbd3945-3869-3ef8-93b1-b9800f888493.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/4eb5326f-ee03-4174-b355-9916b3e826aa.crl

            X509v3 Authority Key Identifier:
                keyid:4D:4E:2E:24:94:A1:C2:CB:38:23:6D:6E:68:47:24:1D:D2:41:DC:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.199.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:13:10:e1:56:cb:42:e9:14:63:df:ce:5a:de:be:3d:13:74:
         69:83:d6:ca:a1:f6:55:93:e4:e7:1d:cf:98:8d:84:2c:05:1d:
         db:8e:3a:c8:fd:06:8c:de:1b:53:0c:93:4c:d9:ca:f3:a9:fa:
         8c:0a:36:b8:e1:3c:0c:8d:b2:1f:d4:fe:3f:b7:8c:0e:d5:87:
         c6:87:f0:d6:13:24:5d:20:4e:b8:1b:75:14:14:65:1f:41:ac:
         a8:1c:64:69:10:6c:16:a8:27:60:b1:5e:5b:73:ff:8b:5f:7f:
         38:60:a2:e5:bf:2d:8e:96:76:e8:c8:05:e4:c3:93:a4:9f:0f:
         2e:89:9e:0b:8c:fb:e7:66:93:ec:07:61:90:c1:17:dc:07:69:
         67:a1:7e:00:c2:e6:d2:62:eb:51:18:ec:12:38:1f:63:5e:1c:
         c7:47:df:32:eb:b3:51:ff:ee:4a:10:47:1a:3a:87:e3:b3:ca:
         ef:1b:46:a8:71:6d:f2:09:38:ce:83:0c:a4:11:3a:08:2e:80:
         33:24:54:23:7e:21:d2:b1:f5:43:7d:ae:e1:5d:a0:7f:06:8f:
         9f:63:f3:1a:18:b7:00:bc:d2:70:be:7f:fa:74:88:72:ce:59:
         a9:be:94:02:38:06:84:76:98:86:56:63:b6:18:62:e3:fc:cc:
         ea:35:ab:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 08:44:04 2025 by rpki-client