Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/38bc1d74-81e1-3524-b3c8-8d395773d081.roa
File:                     38bc1d74-81e1-3524-b3c8-8d395773d081.roa (raw, json)
Hash identifier:          AMFENeURF1et8TZCJgAq1fSg6459ng2IS7X/o9iebJM=
Subject key identifier:   BD:B8:04:82:72:91:60:93:CF:34:86:FB:CE:48:CB:A0:E4:C2:78:94
Certificate issuer:       /CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
Certificate serial:       010D0C9F4328584B80B75EDB0D354CDC29956080
Authority key identifier: DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/38bc1d74-81e1-3524-b3c8-8d395773d081.roa
Signing time:             Mon 13 Oct 2025 01:00:29 +0000
ROA not before:           Mon 13 Oct 2025 01:00:29 +0000
ROA not after:            Sun 11 Jan 2026 02:00:29 +0000
asID:                     1403
IP address blocks:        107.167.248.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:80:b7:5e:db:0d:35:4c:dc:29:95:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
        Validity
            Not Before: Oct 13 01:00:29 2025 GMT
            Not After : Jan 11 02:00:29 2026 GMT
        Subject: CN=14722065-f14c-4f6b-961b-813fc97427e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7b:08:79:b6:41:db:48:e0:f6:d8:38:12:28:
                    1d:ac:ea:be:78:4f:3f:a8:0d:57:8a:bc:81:01:8a:
                    23:25:ce:d2:c9:9f:b1:76:7c:89:64:76:4f:88:51:
                    db:97:51:16:d4:6f:23:4b:9e:19:d4:5f:25:88:5e:
                    e9:82:31:ec:49:ad:19:6d:ae:82:cc:0e:c3:eb:56:
                    6c:95:26:1a:c9:24:71:0b:c0:d5:64:ac:51:5e:55:
                    8a:24:42:b2:48:21:b3:51:ff:c9:92:44:60:dc:b7:
                    ba:37:47:d5:1e:5d:3d:77:a8:ce:6b:1c:99:bd:20:
                    84:54:cc:23:f1:75:88:17:4f:6d:30:23:23:15:17:
                    f3:ab:52:e3:ec:10:48:5f:24:23:09:39:13:61:fd:
                    07:71:63:83:e3:dd:70:77:d4:f8:27:fd:83:10:84:
                    ea:20:59:6b:fd:ee:2b:21:38:86:6f:46:59:81:16:
                    61:77:b2:f1:fc:a2:57:c6:b3:b1:f4:1c:0c:40:41:
                    eb:14:23:6c:b4:35:3e:2b:a2:a8:6d:c0:58:cd:a4:
                    b1:70:26:70:a7:6f:ec:f5:16:5c:b8:0b:61:94:c8:
                    90:48:74:57:8f:4d:be:19:da:16:97:d0:1e:55:2e:
                    16:64:e9:5f:c8:6e:50:69:8a:a3:4d:09:85:28:29:
                    78:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:B8:04:82:72:91:60:93:CF:34:86:FB:CE:48:CB:A0:E4:C2:78:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/38bc1d74-81e1-3524-b3c8-8d395773d081.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl

            X509v3 Authority Key Identifier:
                keyid:DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.167.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:ad:88:4c:a6:4e:22:86:ec:19:bc:c9:a5:98:2d:f7:c7:8d:
         c4:b7:5a:60:ba:20:b7:79:83:f9:21:6e:d3:fb:ca:02:86:8c:
         ba:fd:0b:81:b1:7d:09:d9:47:b9:26:89:cc:91:30:14:04:9d:
         35:df:21:bf:3c:7c:36:34:26:96:1c:17:2a:e1:20:7d:af:63:
         32:e1:a1:fd:14:48:5f:08:d3:74:8f:a8:31:3c:20:1b:f1:c8:
         3a:c0:a9:84:ad:bd:a5:25:2b:6c:cd:54:08:7a:97:51:af:3f:
         3a:db:8c:26:dd:1d:67:21:96:8f:17:af:19:3e:7c:d8:69:10:
         80:2c:d7:77:a4:93:58:9f:c2:c1:95:84:aa:04:a8:b4:cb:cf:
         6e:8f:ce:27:c1:10:ed:b7:21:71:74:c0:6d:ed:65:41:d4:93:
         68:83:88:87:2d:ee:d4:dc:24:99:78:e1:30:14:c2:9f:bd:89:
         3b:16:54:89:49:03:4c:6c:b4:95:31:59:79:be:c8:d2:d7:d3:
         95:90:5d:41:19:6c:3f:bd:2e:69:1a:b4:51:3b:4a:c2:2e:75:
         ac:13:d9:e7:f3:60:b1:9a:3d:46:38:de:b6:9f:5c:13:c1:bd:
         f5:23:c7:11:d3:b2:b5:ec:34:76:91:73:c1:83:1e:21:25:5b:
         e7:6b:49:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:31:10 2025 by rpki-client