Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/efbf1b4a-1b31-39fd-bfd0-286df57229b2.roa
File:                     efbf1b4a-1b31-39fd-bfd0-286df57229b2.roa (raw, json)
Hash identifier:          5C8jahE4reh5bSeKhXQYbXNKXbbo/U42brpLq4aP38M=
Subject key identifier:   F4:83:22:49:47:BE:4D:A4:A9:69:64:6B:77:F8:C8:2C:C3:C4:DE:B2
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584B5DD1E7010626CC7C83E7DCC0
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/efbf1b4a-1b31-39fd-bfd0-286df57229b2.roa
Signing time:             Tue 30 Sep 2025 13:00:40 +0000
ROA not before:           Tue 30 Sep 2025 13:00:40 +0000
ROA not after:            Mon 29 Dec 2025 14:00:40 +0000
asID:                     200017
IP address blocks:        138.84.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5d:d1:e7:01:06:26:cc:7c:83:e7:dc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Sep 30 13:00:40 2025 GMT
            Not After : Dec 29 14:00:40 2025 GMT
        Subject: CN=b375c4e7-f14f-41cb-823b-db2de6d3b4e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5e:4b:1b:7b:4a:18:b4:da:7b:4b:4e:8f:61:
                    b9:27:5e:c4:03:24:fa:18:42:37:24:1e:e8:82:14:
                    d8:c1:9f:de:82:09:ab:19:29:fa:98:d3:62:22:15:
                    1c:6a:42:00:ef:2c:ac:e0:37:0c:0d:89:04:58:31:
                    1b:fa:02:9e:e7:3f:73:c1:b6:4a:11:ef:46:87:14:
                    d8:6e:de:2b:08:27:9f:6d:1a:bf:46:77:97:a0:23:
                    37:2d:45:8d:76:3a:97:f0:c5:ae:0b:cf:a4:e3:a3:
                    4b:b5:89:40:cf:ca:6a:13:69:b2:8a:b6:93:70:72:
                    61:32:52:61:1c:62:97:ae:7d:83:4d:ed:94:cb:fa:
                    09:19:aa:20:55:f7:62:d7:df:db:2a:03:b6:c5:ea:
                    58:de:ca:c8:62:53:97:81:32:2d:18:b9:48:5c:e9:
                    0d:54:5f:64:73:e9:69:de:78:ab:0d:6d:bc:ac:9a:
                    2c:52:1a:89:7e:bd:77:66:65:fa:65:8a:03:c9:1b:
                    cb:41:40:32:2a:24:1f:6e:8a:e4:7e:e9:4a:f4:dd:
                    d1:62:af:c4:f4:a8:50:c6:6c:35:bb:00:91:8a:11:
                    f8:af:52:36:fd:44:7e:0f:8f:ea:d5:8d:7b:11:ae:
                    d5:a7:cf:7c:38:92:19:ee:a1:2a:be:29:84:2e:a0:
                    8c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:83:22:49:47:BE:4D:A4:A9:69:64:6B:77:F8:C8:2C:C3:C4:DE:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/efbf1b4a-1b31-39fd-bfd0-286df57229b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.84.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:74:8d:2c:46:98:80:06:34:da:aa:01:d1:55:3e:e0:2e:5a:
         a8:68:2a:29:a8:d8:c4:d7:b8:73:a5:2f:22:ab:54:42:18:4a:
         41:d8:93:8c:ba:4f:70:7b:c8:28:b5:28:82:4e:97:80:70:98:
         f1:99:fb:29:7c:01:ab:7f:d4:df:eb:5c:25:53:e2:cc:d1:81:
         f8:7a:89:ed:cd:3d:bc:8b:66:8c:a4:33:5b:3a:69:1e:fa:9f:
         b0:4a:c3:e1:ad:9c:20:7f:fc:23:ad:8b:10:2b:10:23:2f:cd:
         24:ac:04:e6:29:3e:ca:bd:02:ff:09:a4:05:f6:d3:58:14:bc:
         10:6b:6f:c0:bc:d5:9e:02:22:23:fc:35:1d:11:b5:a6:85:40:
         b9:7f:f7:dc:ab:09:fa:89:fc:17:90:d2:98:bc:c2:bc:50:3c:
         c8:3d:91:5c:15:ec:44:07:32:a6:8c:73:ad:6b:bb:7a:7e:43:
         42:b0:40:e4:ff:b2:db:93:ba:49:0b:c8:46:d3:04:3e:71:0d:
         fe:4f:c5:7d:2c:09:5e:07:ec:88:57:8f:12:2c:85:63:07:bd:
         ef:4f:7d:c0:dd:99:ec:93:17:7a:e6:95:08:98:02:5e:f5:25:
         20:50:42:cf:38:48:a0:f5:14:f6:56:42:cb:08:9c:39:4c:64:
         21:37:f6:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:18:44 2025 by rpki-client