Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/38df099c-8af4-3051-bc60-a442365d6224.roa
File:                     38df099c-8af4-3051-bc60-a442365d6224.roa (raw, json)
Hash identifier:          hv3+vhfkLus/n/gvg3o34x3dCd3h1Tbug/aQI/+2ipI=
Subject key identifier:   EA:55:39:D7:D7:E2:66:AB:E7:4A:2B:16:7A:73:DC:86:B7:5A:5B:65
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584AA42B8D7AC3CD63C7417C5AC0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/38df099c-8af4-3051-bc60-a442365d6224.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     32024
IP address blocks:        104.129.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:8d:7a:c3:cd:63:c7:41:7c:5a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=e9dfebf1-f092-42e3-9e14-e141b67f8dca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:33:42:df:ec:92:19:4c:f6:99:09:28:d2:2c:
                    af:a5:22:b6:54:55:a0:16:a9:42:72:8d:16:76:fb:
                    6e:36:2b:7b:4c:be:ef:36:f7:20:e6:01:48:d7:ec:
                    cb:19:f7:cb:0b:7b:80:51:fd:e0:fb:d9:c5:c6:a0:
                    91:e5:a6:ad:82:3e:b2:b5:92:21:08:26:01:75:54:
                    a3:80:5b:be:bd:f6:85:da:a4:3d:06:50:8c:1d:e8:
                    63:f2:cf:4c:85:c7:6d:b6:9b:54:cc:d8:63:51:bc:
                    84:82:5e:a1:56:5e:80:34:b3:de:bd:02:8a:eb:5d:
                    18:9e:b3:14:c8:4f:78:a3:28:32:d5:ac:e2:32:fe:
                    c0:a7:d1:72:71:45:b2:63:4c:9e:8b:42:3d:7d:92:
                    63:b7:2a:88:3a:07:ef:f4:10:71:2d:f1:c5:97:8f:
                    74:22:e2:d8:37:a2:ca:7a:3c:5b:52:c6:02:f4:b8:
                    2b:a9:8b:41:7c:56:f3:7e:ca:b2:f3:c5:f7:ba:63:
                    2d:5b:a2:f3:2d:6d:2d:1f:6b:46:fb:fc:64:09:29:
                    10:41:55:e0:65:b4:6d:58:07:35:64:18:85:33:2a:
                    fc:26:b3:bc:0d:c5:cd:72:ae:32:47:10:76:e5:0d:
                    11:db:3f:71:56:33:d5:eb:96:9d:4b:d3:07:00:21:
                    c5:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:55:39:D7:D7:E2:66:AB:E7:4A:2B:16:7A:73:DC:86:B7:5A:5B:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/38df099c-8af4-3051-bc60-a442365d6224.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.129.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:2b:c4:78:f8:dc:2d:c2:8b:89:53:9e:26:00:ba:b0:e7:4a:
         f0:0e:03:6a:f6:05:0b:60:71:c4:c3:2d:5a:77:21:c0:91:d8:
         3a:93:6b:0d:13:f1:7f:89:5c:fd:e5:14:9b:bd:5d:a9:c5:15:
         9c:94:47:7f:38:44:e8:e5:09:9b:43:80:bd:43:b9:8c:1e:16:
         86:fd:94:e9:b5:f6:e4:c2:45:f8:81:86:6f:cb:1a:fd:91:56:
         3c:47:f5:cc:99:4a:50:f4:d2:89:5c:f9:d5:49:96:cf:40:16:
         12:d2:16:cb:40:97:13:93:f5:4a:43:73:f8:19:d7:71:f1:a3:
         2f:50:d2:22:e0:15:f1:52:c5:4f:85:cc:95:f0:83:d9:46:53:
         13:73:6f:71:df:9d:41:a0:49:50:2f:98:31:01:cd:8c:ca:a3:
         28:f2:16:85:99:aa:f3:76:a8:aa:1e:95:c7:cc:a0:0e:80:d6:
         b3:dd:2b:d3:06:41:c2:7d:71:db:df:2a:4b:16:3d:e4:64:64:
         15:de:a0:81:ee:3b:9d:b3:fb:79:cf:2b:3a:7a:af:39:98:e4:
         22:1f:72:8a:03:45:7d:3c:5c:ca:17:c0:35:12:25:51:ab:5a:
         08:39:e6:f1:02:64:e3:b9:0c:03:4d:22:f2:b7:ed:7a:9b:ca:
         c2:83:00:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:51:41 2025 by rpki-client