Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b8f74b7d-4198-317f-a91c-316aaf61dbac.roa
File:                     b8f74b7d-4198-317f-a91c-316aaf61dbac.roa (raw, json)
Hash identifier:          xygzADa3l1bdqjm0YmGlWe+pVtKv+xlnDaUK2PXkzbo=
Subject key identifier:   40:AB:14:66:FE:66:F6:88:1C:C9:FA:4D:4C:ED:55:5C:CA:85:8C:A7
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584B88883E2608F03BF548D43080
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b8f74b7d-4198-317f-a91c-316aaf61dbac.roa
Signing time:             Wed 15 Oct 2025 20:12:09 +0000
ROA not before:           Wed 15 Oct 2025 20:12:09 +0000
ROA not after:            Tue 13 Jan 2026 21:12:09 +0000
asID:                     27884
IP address blocks:        38.255.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:88:88:3e:26:08:f0:3b:f5:48:d4:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct 15 20:12:09 2025 GMT
            Not After : Jan 13 21:12:09 2026 GMT
        Subject: CN=bc516c65-b6bb-4720-acad-b4821c98bbdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:af:23:fd:05:dc:7a:bf:b8:2b:13:54:52:0a:
                    8a:67:71:83:cc:01:b4:b9:3d:c7:eb:5e:16:3d:86:
                    18:f4:89:6c:49:97:c1:7e:29:1b:53:a4:73:5a:78:
                    f2:2e:f8:38:a9:7b:01:d7:1e:90:d6:a1:13:99:82:
                    65:24:85:ba:94:49:87:ef:5b:32:8f:4e:a3:97:c3:
                    11:66:69:8a:d8:53:de:9f:7c:42:a3:d2:24:5e:f8:
                    19:ef:7f:18:f1:cd:69:a3:4f:9c:f9:36:f6:73:d0:
                    51:ef:be:78:d2:ac:09:a5:2e:76:73:1d:e0:9c:46:
                    a8:70:7b:92:8f:2e:f6:0f:dc:88:ba:88:a3:bf:fc:
                    23:56:87:b7:26:fe:98:d3:df:63:4e:6d:d3:1a:1b:
                    fb:a9:32:4f:fc:f6:2e:d0:b3:5d:df:2a:31:36:5d:
                    07:c0:d4:74:a3:35:02:9f:2a:e0:dd:2d:08:58:7c:
                    3c:1e:0d:cc:2f:d3:d0:0f:de:d8:16:dd:5e:06:be:
                    7d:00:37:27:42:d5:d0:17:fe:86:1d:29:5f:5d:a0:
                    d5:5f:3f:de:a7:9f:52:a8:bf:82:a1:88:7c:d9:c2:
                    08:0a:44:ac:dd:29:3c:f7:12:8c:17:9b:b3:33:a5:
                    14:ad:aa:2f:30:0b:03:3f:8f:30:3f:64:13:b9:0c:
                    59:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:AB:14:66:FE:66:F6:88:1C:C9:FA:4D:4C:ED:55:5C:CA:85:8C:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b8f74b7d-4198-317f-a91c-316aaf61dbac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.255.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:bd:e8:22:1c:e8:5b:ce:31:0b:fd:d2:f6:bd:d1:ab:f6:ea:
         e0:9b:eb:61:13:31:b1:24:05:38:e7:85:85:cc:8e:58:6f:1b:
         c0:8f:82:42:27:72:77:d7:fa:2f:28:13:f1:25:5d:cf:98:08:
         3e:2c:b8:55:56:0b:26:2f:67:31:d5:f8:f0:1e:7d:73:97:09:
         1a:75:63:8a:16:dc:67:5b:c5:60:8a:61:85:e2:2e:c4:62:48:
         65:84:6f:38:a7:4c:2b:9a:64:cf:35:ca:96:99:c2:ef:b5:61:
         05:48:e6:3f:68:f6:88:82:72:15:1a:58:39:3e:36:9f:54:a6:
         08:9e:76:ed:33:e3:04:4b:b1:09:20:96:7b:13:9e:3a:03:2c:
         9e:8b:7e:f1:1a:a3:8a:e0:cd:01:6c:7b:80:72:d5:de:2a:aa:
         1f:1f:5f:6e:d8:d3:2e:bc:a6:4b:7f:c0:59:e3:18:05:a9:6b:
         34:51:ff:6f:c5:c7:f1:1d:50:8a:bf:62:3a:bf:a6:fe:00:14:
         80:76:12:18:3f:dd:e4:89:03:e6:d9:47:7c:76:07:1a:c7:cf:
         d0:9d:78:23:3d:0f:0b:f8:7f:55:6c:2a:a5:c3:8d:88:da:ad:
         18:3d:0b:7d:ae:ae:d3:70:24:c5:92:f7:53:ee:0e:e7:e5:af:
         8a:cd:0a:eb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuIiD4mCPA79UjUMIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI1MTAxNTIwMTIwOVoXDTI2MDExMzIxMTIwOVowLzEtMCsGA1UEAxMk
YmM1MTZjNjUtYjZiYi00NzIwLWFjYWQtYjQ4MjFjOThiYmRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvq8j/QXcer+4KxNUUgqKZ3GDzAG0uT3H614W
PYYY9IlsSZfBfikbU6RzWnjyLvg4qXsB1x6Q1qETmYJlJIW6lEmH71syj06jl8MR
ZmmK2FPen3xCo9IkXvgZ738Y8c1po0+c+Tb2c9BR77540qwJpS52cx3gnEaocHuS
jy72D9yIuoijv/wjVoe3Jv6Y099jTm3TGhv7qTJP/PYu0LNd3yoxNl0HwNR0ozUC
nyrg3S0IWHw8Hg3ML9PQD97YFt1eBr59ADcnQtXQF/6GHSlfXaDVXz/ep59SqL+C
oYh82cIICkSs3Sk89xKMF5uzM6UUraovMAsDP48wP2QTuQxZKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFECrFGb+ZvaIHMn6TUztVVzKhYynMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYjhmNzRiN2QtNDE5OC0z
MTdmLWE5MWMtMzE2YWFmNjFkYmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJv9wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJO96CIc6FvOMQv90va90av26uCb62ETMbEkBTjnhYXMjlhvG8CPgkIn
cnfX+i8oE/ElXc+YCD4suFVWCyYvZzHV+PAefXOXCRp1Y4oW3GdbxWCKYYXiLsRi
SGWEbzinTCuaZM81ypaZwu+1YQVI5j9o9oiCchUaWDk+Np9Upgiedu0z4wRLsQkg
lnsTnjoDLJ6LfvEao4rgzQFse4By1d4qqh8fX27Y0y68pkt/wFnjGAWpazRR/2/F
x/EdUIq/Yjq/pv4AFIB2Ehg/3eSJA+bZR3x2BxrHz9CdeCM9Dwv4f1VsKqXDjYja
rRg9C32urtNwJMWS91PuDuflr4rNCus=
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:51:55 2025 by rpki-client