Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/ef657a18-ba6e-3ea6-b00f-e5602e92529c.roa
File:                     ef657a18-ba6e-3ea6-b00f-e5602e92529c.roa (raw, json)
Hash identifier:          NxgulusLOIjF/IX7T1CoZFt32PXy5PEuVXwNMmtEiHc=
Subject key identifier:   EF:1D:2E:C7:C6:26:70:88:CB:7E:81:D1:D5:94:EC:D7:C6:CF:8E:CB
Certificate issuer:       /CN=b38f5b7a-6c56-4279-aa50-3499b1fb606b
Certificate serial:       010D0C9F4328584F4973E5F0B23326C315299B80
Authority key identifier: 04:13:C3:E2:D5:03:AC:7D:22:1A:21:48:5A:DC:22:8B:A4:87:B2:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/ef657a18-ba6e-3ea6-b00f-e5602e92529c.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     40628
IP address blocks:        204.144.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:e5:f0:b2:33:26:c3:15:29:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b38f5b7a-6c56-4279-aa50-3499b1fb606b
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=1085fe1a-7719-4af3-909f-877e34e99745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b1:07:8e:92:da:3f:b5:46:f6:34:5b:f9:84:
                    93:c2:d5:a9:dc:d1:8b:a0:b3:ca:99:ce:4d:1d:e7:
                    a9:f1:4c:38:ea:c3:ad:62:dc:c5:69:e3:0a:e9:88:
                    7f:67:94:e9:2b:c0:dc:40:ff:18:af:bd:64:18:7e:
                    d8:f1:68:2a:56:dd:5d:2a:7c:88:0f:54:d3:2d:ae:
                    cb:35:15:40:48:d5:86:1e:ce:26:e8:14:52:73:c9:
                    61:85:af:ce:69:9f:84:ee:7d:6b:5e:65:60:15:6f:
                    fd:24:95:6d:ae:0b:0f:d3:52:80:17:65:09:a2:15:
                    fb:f6:8f:40:4f:60:8f:70:60:71:a9:33:00:9a:a2:
                    f4:60:3b:b1:51:6d:09:e5:7f:13:09:bd:d8:9d:f5:
                    27:92:23:a4:f4:3b:69:08:03:13:c3:39:ad:49:46:
                    54:bf:10:83:79:ab:c2:88:7e:f0:d8:d5:75:58:f0:
                    4a:0c:10:13:90:b0:4e:98:74:2b:99:e8:c8:9d:21:
                    52:6f:64:79:69:2e:13:9e:ff:34:3f:66:10:51:c1:
                    4c:0b:88:96:24:89:0b:4e:03:23:1e:56:34:60:f9:
                    3e:36:a9:73:10:e7:cb:25:0d:e4:64:b4:47:9f:17:
                    b9:d1:06:39:65:99:06:a8:ca:af:b7:17:66:ef:18:
                    e2:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:1D:2E:C7:C6:26:70:88:CB:7E:81:D1:D5:94:EC:D7:C6:CF:8E:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/ef657a18-ba6e-3ea6-b00f-e5602e92529c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.crl

            X509v3 Authority Key Identifier:
                keyid:04:13:C3:E2:D5:03:AC:7D:22:1A:21:48:5A:DC:22:8B:A4:87:B2:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.144.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:6e:7a:13:62:f6:d8:d0:b3:0d:47:69:d7:f0:86:37:f7:1c:
         a6:44:14:a0:31:70:0f:37:34:b0:21:37:48:72:2f:f3:a5:30:
         8e:c4:c3:57:65:be:c6:2e:5c:7a:fa:f7:7c:0f:23:69:c1:ee:
         c9:70:5f:d7:29:10:99:2a:7a:db:89:ed:60:d9:0c:0b:91:ec:
         5b:c0:66:49:1c:1a:7e:6f:1d:97:60:eb:50:f5:04:20:a9:fb:
         7a:aa:88:cd:32:99:77:65:5a:8f:b2:5b:b5:8d:d7:57:fa:fa:
         10:ec:07:2f:4f:7a:a3:5c:4b:1e:79:0f:8a:a0:f2:57:4e:82:
         5e:56:12:80:42:c3:ad:f4:d5:21:6e:25:0f:f0:79:a6:78:80:
         d2:83:28:4e:ac:54:47:f9:34:5e:07:26:88:bc:ab:04:8c:33:
         e7:45:a0:98:47:12:6f:07:db:4b:d3:5e:4d:f8:0c:72:6a:b1:
         26:2f:e7:0e:79:40:92:75:63:9e:5f:8a:61:74:f0:e7:26:05:
         72:0d:c0:2a:2b:be:e9:5a:94:9e:a6:60:0e:05:21:25:7e:1c:
         3e:b1:c5:7e:99:87:6a:bc:89:98:7f:c9:d7:2e:35:96:2b:48:
         74:5c:b3:3f:1f:29:19:bf:f4:5c:54:90:8a:41:8f:e4:fd:5b:
         cd:f4:eb:a7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc+XwsjMmwxUpm4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjM4ZjViN2EtNmM1Ni00Mjc5LWFhNTAtMzQ5OWIxZmI2
MDZiMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MTA4NWZlMWEtNzcxOS00YWYzLTkwOWYtODc3ZTM0ZTk5NzQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybEHjpLaP7VG9jRb+YSTwtWp3NGLoLPKmc5N
Heep8Uw46sOtYtzFaeMK6Yh/Z5TpK8DcQP8Yr71kGH7Y8WgqVt1dKnyID1TTLa7L
NRVASNWGHs4m6BRSc8lhha/OaZ+E7n1rXmVgFW/9JJVtrgsP01KAF2UJohX79o9A
T2CPcGBxqTMAmqL0YDuxUW0J5X8TCb3YnfUnkiOk9DtpCAMTwzmtSUZUvxCDeavC
iH7w2NV1WPBKDBATkLBOmHQrmejInSFSb2R5aS4Tnv80P2YQUcFMC4iWJIkLTgMj
HlY0YPk+NqlzEOfLJQ3kZLRHnxe50QY5ZZkGqMqvtxdm7xjirwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO8dLsfGJnCIy36B0dWU7NfGz47LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iMzhm
NWI3YS02YzU2LTQyNzktYWE1MC0zNDk5YjFmYjYwNmIvZWY2NTdhMTgtYmE2ZS0z
ZWE2LWIwMGYtZTU2MDJlOTI1MjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjM4ZjViN2EtNmM1Ni00Mjc5LWFh
NTAtMzQ5OWIxZmI2MDZiL2IzOGY1YjdhLTZjNTYtNDI3OS1hYTUwLTM0OTliMWZi
NjA2Yi5jcmwwHwYDVR0jBBgwFoAUBBPD4tUDrH0iGiFIWtwii6SHstUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9iMzhmNWI3YS02YzU2LTQyNzktYWE1MC0zNDk5
YjFmYjYwNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzJBRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB1uehNi9tjQsw1Hadfwhjf3HKZEFKAxcA83NLAhN0hyL/OlMI7Ew1dl
vsYuXHr693wPI2nB7slwX9cpEJkqetuJ7WDZDAuR7FvAZkkcGn5vHZdg61D1BCCp
+3qqiM0ymXdlWo+yW7WN11f6+hDsBy9PeqNcSx55D4qg8ldOgl5WEoBCw6301SFu
JQ/weaZ4gNKDKE6sVEf5NF4HJoi8qwSMM+dFoJhHEm8H20vTXk34DHJqsSYv5w55
QJJ1Y55fimF08OcmBXINwCorvulalJ6mYA4FISV+HD6xxX6Zh2q8iZh/ydcuNZYr
SHRcsz8fKRm/9FxUkIpBj+T9W83066c=
-----END CERTIFICATE-----
Generated at Sun Oct 4 07:49:30 2026 by rpki-client