Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/5a07fd41-4994-3bf0-8979-c0b9ea341bd4.roa
File:                     5a07fd41-4994-3bf0-8979-c0b9ea341bd4.roa (raw, json)
Hash identifier:          901mV+Uoo41cozshDNNWBbldR1M8eHJcXY6k1fnz+j0=
Subject key identifier:   D6:BA:DB:D5:F6:92:C7:AD:8E:27:E5:0F:83:A6:AA:F7:2B:16:77:B1
Certificate issuer:       /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial:       010D0C9F4328584B477C695DAD2D2495E8FBAA00
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/5a07fd41-4994-3bf0-8979-c0b9ea341bd4.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     396253
IP address blocks:        136.228.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:69:5d:ad:2d:24:95:e8:fb:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=04f7d2d7-f5ea-4571-84b6-d8c20a0825c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fb:b2:5b:53:52:23:38:aa:7f:16:31:f1:b9:
                    b7:6c:82:a0:46:e8:1a:d8:8e:fe:ed:00:11:67:71:
                    f5:8d:af:f3:3d:58:68:c3:4f:74:dd:85:64:af:cc:
                    7e:f9:0d:1e:8b:a6:b7:6a:e6:b5:e6:ec:d2:0a:bc:
                    16:88:90:c2:18:42:c0:74:a4:ce:40:c6:b9:49:a9:
                    f2:b9:fe:8e:dd:c5:36:85:52:7a:97:6b:e7:0f:c3:
                    f3:18:a7:b8:57:e9:f2:bc:ac:6d:17:5b:d5:1a:48:
                    77:40:80:a7:20:0e:b6:5a:6f:0b:da:8a:24:6e:be:
                    76:57:6d:8e:88:04:0c:25:77:45:ea:42:98:0a:4f:
                    8e:3d:76:68:e7:40:dd:ca:af:60:5c:33:f3:72:ac:
                    d8:e2:0b:3a:8d:18:4f:b9:6e:e8:1c:ad:1b:eb:05:
                    e2:58:31:96:17:72:98:82:5c:19:40:7e:7f:c4:47:
                    69:eb:0a:28:59:d4:88:c8:f2:2a:fb:ea:20:4f:92:
                    b3:e9:03:8b:96:05:48:82:45:97:cc:5d:e2:e5:1f:
                    66:3c:37:10:97:02:45:e3:eb:aa:fd:f6:47:4d:8a:
                    20:1b:1d:20:f2:73:a2:11:a1:76:d1:3a:21:b0:5b:
                    cf:1d:7e:f0:94:18:c0:2d:49:74:50:17:9a:e6:2b:
                    51:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:BA:DB:D5:F6:92:C7:AD:8E:27:E5:0F:83:A6:AA:F7:2B:16:77:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/5a07fd41-4994-3bf0-8979-c0b9ea341bd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl

            X509v3 Authority Key Identifier:
                keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.228.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:31:27:3b:e2:34:c7:e3:16:9e:e8:4e:e7:64:65:83:8c:01:
         8e:06:de:e7:7b:fd:0f:3f:21:cb:c6:64:10:cc:0f:ca:1a:86:
         72:73:d2:b6:0e:a0:1a:10:6b:47:57:43:5e:75:0c:21:f4:2a:
         c3:0d:44:63:cb:37:2e:b3:8f:ac:55:0b:2a:5c:a3:8c:94:20:
         bc:ae:74:5b:ba:45:f2:2d:50:c1:53:b1:ca:08:5c:24:d7:23:
         37:ac:61:a9:55:58:56:ed:cc:79:ff:50:12:2b:fe:56:de:66:
         a8:4e:ba:1e:56:78:6a:d1:ec:78:6d:3a:d5:8e:68:11:e0:bf:
         02:a8:7b:42:05:0a:de:68:c0:12:77:55:b5:ed:dd:78:8e:7b:
         5f:29:b7:f6:de:79:2e:9c:17:82:8e:1f:64:fa:14:c9:64:37:
         3f:ea:1d:77:d5:72:d1:e9:b5:74:40:d1:9f:9f:2e:6a:94:f1:
         ef:f8:ce:46:64:a0:41:1c:5d:8b:d0:a6:ea:7d:24:d2:b1:16:
         9a:60:d6:95:ab:c8:87:c3:21:7d:2d:ce:7e:6c:50:26:64:c3:
         c3:13:c5:49:9e:a3:60:77:61:e7:72:2d:15:89:16:33:2a:8f:
         7e:24:dc:45:9a:02:60:b8:ab:52:73:13:c3:73:05:22:99:bc:
         cb:84:25:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:15:09 2025 by rpki-client