Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/2ca386fe-1d13-3ae4-b6c6-e4dd0b5d73d3.roa
File:                     2ca386fe-1d13-3ae4-b6c6-e4dd0b5d73d3.roa (raw, json)
Hash identifier:          J0UOqvYNpZn9hSDhV/A4EXmCGambhZJZPBAfVdkb1kY=
Subject key identifier:   3D:B4:70:9B:32:BD:04:42:47:41:6F:9A:DA:5C:EC:79:53:78:24:9B
Certificate issuer:       /CN=01fc1815-34ef-424d-8258-506f8b486e35
Certificate serial:       010D0C9F4328584AAB8CB4F1391FAAF1040CE280
Authority key identifier: 51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/2ca386fe-1d13-3ae4-b6c6-e4dd0b5d73d3.roa
Signing time:             Mon 28 Jul 2025 16:27:30 +0000
ROA not before:           Mon 28 Jul 2025 16:27:30 +0000
ROA not after:            Sun 26 Oct 2025 16:27:30 +0000
asID:                     17378
IP address blocks:        208.38.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:8c:b4:f1:39:1f:aa:f1:04:0c:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01fc1815-34ef-424d-8258-506f8b486e35
        Validity
            Not Before: Jul 28 16:27:30 2025 GMT
            Not After : Oct 26 16:27:30 2025 GMT
        Subject: CN=31633dc2-f51a-4e76-ae5e-0261be6fb033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:99:d9:33:6d:ec:c4:5e:ba:4f:9d:43:e4:98:
                    7f:f3:07:fa:86:cb:f3:b8:83:00:9e:0a:1c:e1:a5:
                    73:76:5d:9f:b2:3d:a9:23:e1:22:3f:5b:f3:74:22:
                    50:00:ea:58:a3:5e:8b:12:84:e1:03:af:c1:f5:62:
                    9d:a2:03:59:97:72:68:bb:fc:18:8b:18:95:22:28:
                    52:ae:18:9f:69:6c:e4:d3:43:29:a5:1f:d5:4a:76:
                    eb:5d:d8:2b:f9:15:73:76:5a:2c:02:56:99:86:fa:
                    df:fb:9d:3f:97:58:c3:92:b3:2e:c5:5e:46:cf:20:
                    7f:66:53:ce:19:f7:71:26:da:35:ed:ba:80:d6:ec:
                    50:66:09:97:fd:f3:05:9d:94:21:1e:29:b2:77:84:
                    93:4a:5d:69:b4:3f:3c:e1:9f:e8:af:fa:7b:40:1f:
                    03:60:ee:ad:45:f1:67:47:09:60:4a:9a:26:a2:e2:
                    82:51:39:da:4e:a4:93:72:26:3a:54:9a:03:1a:8d:
                    25:86:f9:97:f7:10:64:35:7c:63:ba:e8:1e:fe:fb:
                    54:e9:1a:b4:bf:8d:00:ce:b3:5b:ec:3d:0d:57:f4:
                    c7:22:a6:1d:04:5f:a8:a0:dc:c7:9b:8e:29:32:32:
                    6c:b4:3f:d6:5a:65:4c:ae:34:15:b9:d0:43:4a:dc:
                    fc:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B4:70:9B:32:BD:04:42:47:41:6F:9A:DA:5C:EC:79:53:78:24:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/2ca386fe-1d13-3ae4-b6c6-e4dd0b5d73d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl

            X509v3 Authority Key Identifier:
                keyid:51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.38.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:f3:06:aa:1e:2e:13:a3:50:66:d5:0e:5d:97:bc:e6:21:6f:
         c7:d3:b7:b3:9c:f3:ce:c0:d5:05:ab:8d:27:a8:bc:bd:3e:26:
         c8:99:a8:b4:3a:22:aa:56:07:92:8f:1e:96:ea:1f:93:72:32:
         24:c4:ea:f4:b6:6d:a3:b3:86:fe:43:85:1e:3e:22:bb:22:36:
         bc:3a:3e:8f:d3:70:ed:60:47:a7:fc:d8:ac:9a:4f:c0:0c:47:
         cf:ee:48:72:69:23:06:de:4c:04:11:49:55:a2:ea:fd:45:89:
         1a:88:a0:33:be:65:df:91:1b:4c:08:52:88:fc:36:c1:7d:7f:
         b2:46:5b:c3:dd:ba:7f:5f:79:b2:88:c9:de:2e:35:fd:7a:ab:
         5c:0e:e0:46:17:23:19:3f:47:3b:91:81:24:ae:37:c3:86:ad:
         16:1b:57:cb:84:40:04:5f:01:f8:0b:81:92:47:4c:47:2d:7b:
         a1:ad:23:8a:ee:5d:4f:2d:d9:81:c9:79:fc:83:d4:bf:43:46:
         e3:06:4c:99:93:8f:84:74:01:6d:ee:ba:1d:c3:37:ff:72:32:
         26:14:47:21:4d:0e:ad:15:66:af:b4:91:e2:a0:3c:55:99:3d:
         ae:4b:07:b7:dd:1b:f6:91:1b:b9:b4:53:52:7b:38:8e:d5:5d:
         7d:4e:ed:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 19:59:51 2025 by rpki-client