Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/38df099c-8af4-3051-bc60-a442365d6224.roa
File:                     38df099c-8af4-3051-bc60-a442365d6224.roa (raw, json)
Hash identifier:          IUiXbe1wN2s2NHsJ7CGpDGeMYK8+tekHPmw10OI+V9c=
Subject key identifier:   28:7E:DB:32:62:97:22:64:23:8C:63:C3:F2:AE:28:2E:A4:10:40:E6
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584D44FA4A90B1C1BF5246125980
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/38df099c-8af4-3051-bc60-a442365d6224.roa
Signing time:             Tue 24 Mar 2026 01:00:31 +0000
ROA not before:           Tue 24 Mar 2026 01:00:31 +0000
ROA not after:            Mon 22 Jun 2026 01:00:31 +0000
asID:                     32024
IP address blocks:        104.129.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:fa:4a:90:b1:c1:bf:52:46:12:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar 24 01:00:31 2026 GMT
            Not After : Jun 22 01:00:31 2026 GMT
        Subject: CN=9e1acd8b-e4f2-4db5-a23a-62e0254bdfc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b4:11:06:a7:99:e0:3c:89:f1:49:e5:f6:b3:
                    b3:ed:68:cb:4a:bb:45:88:f6:e6:4b:b1:55:45:ca:
                    56:eb:7d:77:56:74:d9:5a:8c:8c:20:ec:f4:54:2c:
                    2b:ce:75:44:98:db:7d:fd:98:39:0b:43:47:60:0e:
                    ef:51:87:7f:2d:78:75:c5:07:55:c8:91:1c:8f:d8:
                    e1:79:e3:35:6a:35:5b:30:a1:5c:41:3a:02:95:f5:
                    b9:e7:e6:d7:67:66:2a:64:76:51:f6:bb:d0:5a:67:
                    53:44:c5:70:52:dc:bb:ba:5c:cd:8c:c8:6e:a8:ce:
                    97:4a:41:f4:d6:f2:94:8c:3d:61:66:d2:48:06:8f:
                    9a:19:4e:c2:2f:ed:5f:2f:20:5b:17:8b:e6:7b:f0:
                    df:4a:bb:15:2a:12:0d:e9:79:c3:f7:60:2a:1a:a4:
                    3e:e7:39:ae:73:5e:ac:70:81:eb:6e:e9:9f:e4:e0:
                    6d:87:49:fb:11:7e:3c:91:79:f7:fa:0d:00:9c:2d:
                    1c:75:d2:1c:1a:4b:a4:0f:34:e5:4e:22:ac:7e:1e:
                    9d:71:d2:f9:2e:9a:65:1f:c8:99:a5:49:72:8c:b3:
                    8c:7b:1c:8a:81:27:ba:17:5b:8c:b0:bc:4d:41:81:
                    7a:a1:8e:26:1d:15:7e:b0:c0:54:23:02:41:c3:3a:
                    81:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:7E:DB:32:62:97:22:64:23:8C:63:C3:F2:AE:28:2E:A4:10:40:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/38df099c-8af4-3051-bc60-a442365d6224.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.129.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:1c:6a:36:69:c4:2f:d0:d8:4c:9b:b8:a7:82:e1:98:09:94:
         08:79:f6:3f:72:0b:b5:7f:94:e7:87:89:31:ba:3a:e5:c6:75:
         52:b6:d4:9d:c1:19:88:0e:a9:3d:29:dd:37:55:9b:45:a4:57:
         5d:ce:61:57:d9:ef:79:54:20:50:8b:9d:2b:0e:bd:01:ec:61:
         e7:e2:a7:c7:25:97:ae:94:57:7b:f5:20:97:60:f6:e6:58:95:
         2e:66:11:a1:45:89:1c:b2:d2:a5:05:86:1a:f4:04:91:96:ef:
         4a:e0:d2:0b:f3:08:64:33:6e:54:d5:bb:a1:fb:2d:d2:fa:3d:
         16:0a:c8:d2:54:33:20:3d:13:0c:46:37:ce:09:45:63:65:8b:
         a7:1c:20:cd:46:75:63:6c:6d:3f:13:fc:ce:e3:40:f9:0b:da:
         80:18:c0:dd:cc:65:64:65:56:f9:5a:53:7b:64:c3:65:ee:1e:
         c4:f7:81:bd:34:e6:02:03:81:0b:24:e9:56:7e:1f:02:f3:cc:
         9f:22:ac:9a:4c:71:a1:91:b4:40:73:cf:fa:19:8e:81:f9:a4:
         4b:f7:6d:b1:0b:0e:0a:3f:ca:9d:34:c0:23:bb:fb:e3:5e:68:
         bc:aa:75:b2:89:25:21:ee:83:79:3d:be:92:06:92:f4:58:64:
         4d:1f:bf:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:14:20 2026 by rpki-client