Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/436dda0d-2194-3923-a73c-9c7ca72ec026.roa
File:                     436dda0d-2194-3923-a73c-9c7ca72ec026.roa (raw, json)
Hash identifier:          RuD+5KMN3N41U7OZLjqimlUP7Fr0rvhap4vt9Cs0Qf0=
Subject key identifier:   AB:A4:EE:A4:60:A0:41:E8:B2:1F:EA:56:F1:B6:24:95:0E:5F:C5:03
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584B832B001DBA22F9DE20E3CC00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/436dda0d-2194-3923-a73c-9c7ca72ec026.roa
Signing time:             Mon 13 Oct 2025 22:05:14 +0000
ROA not before:           Mon 13 Oct 2025 22:05:14 +0000
ROA not after:            Sun 11 Jan 2026 23:05:14 +0000
asID:                     61461
IP address blocks:        38.222.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:83:2b:00:1d:ba:22:f9:de:20:e3:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct 13 22:05:14 2025 GMT
            Not After : Jan 11 23:05:14 2026 GMT
        Subject: CN=c4496c4c-2d38-43a3-8e7a-0035bbb0a145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:78:95:c7:d6:86:91:1a:a0:b0:1f:2b:b1:4c:
                    7d:2f:0d:7b:36:a6:78:dd:91:da:3d:6d:1f:13:86:
                    64:ba:63:9d:a9:fe:45:6f:74:5e:84:63:5f:95:a5:
                    30:12:86:67:89:7a:59:c3:d3:83:9d:f6:f7:2f:64:
                    a9:51:e4:bf:0e:48:70:96:70:93:8f:a9:7a:7b:3f:
                    3a:ae:5c:00:13:da:10:d2:95:14:6c:8c:dc:cb:1b:
                    d6:f8:5e:4b:f8:b3:27:74:8a:5e:cb:9e:5d:08:48:
                    7a:31:70:22:c9:40:67:cd:ec:9e:ec:67:4a:ff:0e:
                    3e:b0:af:80:fe:ee:28:13:2c:4f:f3:21:4d:14:12:
                    74:b1:2d:be:09:94:de:2f:66:be:c6:fd:20:49:9c:
                    b2:ee:ba:e9:6e:c0:d9:8c:32:d2:43:e4:c7:7e:ea:
                    4d:0b:7e:0d:95:d6:88:06:ff:b7:03:17:bc:50:f0:
                    88:45:ad:6e:74:fa:96:97:97:2d:e5:5c:55:a1:a7:
                    6f:fe:e5:cd:7e:de:23:97:89:eb:22:a8:67:81:b7:
                    57:44:99:2f:b7:de:a2:63:71:5b:fd:90:3e:99:5b:
                    06:aa:8f:b9:42:65:d0:b0:59:80:97:e9:d3:2b:62:
                    74:e3:07:20:17:c2:f6:c4:4e:d0:9f:87:4e:a8:15:
                    52:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:A4:EE:A4:60:A0:41:E8:B2:1F:EA:56:F1:B6:24:95:0E:5F:C5:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/436dda0d-2194-3923-a73c-9c7ca72ec026.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.222.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:ce:2a:7f:af:3e:09:92:f3:c7:2a:47:9c:2d:ad:f2:dc:89:
         ba:6f:a0:ca:1c:11:26:7a:58:5f:dd:87:e8:95:b3:9b:3f:b2:
         cf:9a:70:ac:dd:c9:ac:77:61:12:f2:2f:aa:69:a1:b7:ab:4b:
         40:ed:d0:bf:d5:82:f4:7c:7f:e3:2c:fe:87:ec:63:07:2f:bf:
         a1:d5:75:7c:e7:ca:1b:8b:36:b9:a4:83:50:fc:7b:b6:25:96:
         02:63:ff:1b:d1:11:32:a8:00:04:c0:1f:54:dc:57:5f:dd:06:
         8b:0e:f8:9a:97:c8:9e:d6:cc:8e:c1:32:ae:35:34:0f:71:05:
         a1:d4:b8:00:55:46:5c:cf:1d:8d:cb:46:6e:b3:2f:5f:bd:86:
         67:20:ac:62:31:83:b4:1d:c8:76:1f:16:cf:e0:19:9b:d2:01:
         0c:b1:1c:f3:8a:79:fa:c4:a4:ef:87:d7:0b:50:66:78:1f:ab:
         be:be:35:48:b4:7f:aa:a5:11:62:e5:52:bf:e0:46:38:b9:d3:
         d8:0f:93:10:35:ae:f7:fa:b8:f3:96:c5:df:f9:9f:a7:45:c7:
         f3:73:e4:7f:07:da:01:ef:e5:a5:0f:ac:66:4c:bd:37:92:af:
         fd:57:f1:ac:9c:a6:b3:37:51:e8:5a:10:b7:49:91:e3:64:08:
         19:ed:e1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:51:41 2025 by rpki-client