Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/49e781f7-7bc7-374d-a16c-bccef5b756bd.roa
File:                     49e781f7-7bc7-374d-a16c-bccef5b756bd.roa (raw, json)
Hash identifier:          iq8WTP5Q3VMqUp7a+ac7PaJ7OOcTErhFTbWHOgysq2Q=
Subject key identifier:   C9:EB:72:8E:04:F8:F9:BF:A2:23:2C:81:E7:40:5C:52:AE:A0:EF:8C
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584BB47F7DDA0DF1BBA832BD9580
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/49e781f7-7bc7-374d-a16c-bccef5b756bd.roa
Signing time:             Fri 31 Oct 2025 14:10:05 +0000
ROA not before:           Fri 31 Oct 2025 14:10:05 +0000
ROA not after:            Thu 29 Jan 2026 15:10:05 +0000
asID:                     212628
IP address blocks:        38.95.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b4:7f:7d:da:0d:f1:bb:a8:32:bd:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct 31 14:10:05 2025 GMT
            Not After : Jan 29 15:10:05 2026 GMT
        Subject: CN=60130bf3-ecb4-46f2-854e-975026f309c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:91:61:2c:69:10:26:9d:a7:cb:73:d7:bb:46:
                    3c:25:6e:d4:3f:67:c8:bf:1d:33:14:9e:f1:fe:fe:
                    66:c5:29:fa:1c:86:d9:da:8f:07:56:84:4a:31:33:
                    93:2f:ce:36:32:6c:92:67:31:4f:a8:85:a2:fa:ce:
                    0c:d0:cf:b0:18:68:8b:84:39:62:28:e7:5d:86:e1:
                    6b:ab:af:78:2c:ce:56:3a:8b:cd:3f:68:9d:02:ae:
                    74:53:88:d2:62:32:50:cf:34:a4:98:53:f6:22:6e:
                    00:f6:e4:2b:31:04:e4:ad:3d:5b:14:fa:c5:cf:ee:
                    21:41:43:2f:0b:57:c3:43:59:08:b3:e8:a5:98:41:
                    de:9f:95:d4:a8:d8:ad:00:7c:11:71:f6:03:9f:b1:
                    9f:3e:65:77:5f:0b:a7:8b:68:a5:20:52:b2:78:82:
                    6e:ff:db:fe:78:ca:d9:df:f4:da:2c:6f:88:13:e0:
                    0f:73:7f:bc:ca:34:72:36:7c:03:c0:78:9b:aa:75:
                    fd:66:79:63:eb:76:0d:33:37:bb:8e:40:67:2f:26:
                    6a:3d:22:15:c7:8a:92:ce:87:b5:46:ed:fb:f3:a7:
                    1f:a8:94:a3:bc:61:58:3b:60:93:36:9a:ba:f4:32:
                    1a:e2:3d:37:75:2f:f0:db:a1:10:58:af:d7:c4:c6:
                    0c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:EB:72:8E:04:F8:F9:BF:A2:23:2C:81:E7:40:5C:52:AE:A0:EF:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/49e781f7-7bc7-374d-a16c-bccef5b756bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.95.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:80:40:8a:79:20:53:8e:fe:48:e9:a9:cf:21:42:1d:a5:0f:
         0d:c4:fe:49:84:5b:09:cd:9c:dd:dd:f1:04:0f:52:94:45:10:
         ba:63:58:19:88:73:d2:b5:a5:fe:07:fe:2d:db:95:53:ae:bd:
         e1:0b:05:b2:6f:06:11:1a:d9:c5:f2:2c:c9:7f:ff:c6:d0:bb:
         44:92:bc:68:d4:4c:12:84:80:ee:72:65:08:61:4f:1a:22:0f:
         5f:6b:0a:7c:6a:c8:ef:7a:69:3e:cf:b5:77:ee:aa:e5:27:96:
         d7:94:b2:b9:64:70:db:79:f0:09:15:8e:6e:0b:81:37:fe:27:
         38:ef:98:5c:88:b6:19:a6:a5:fd:b3:b7:0c:45:d5:2f:76:ed:
         8a:87:c8:4d:51:0d:d1:f0:0d:14:1f:3d:f6:37:7b:4d:f4:fc:
         c6:a8:75:16:9f:3b:1a:67:60:b0:ab:9f:6f:da:97:c0:88:83:
         b1:3a:aa:18:26:88:53:82:f2:5f:21:3f:25:95:81:ff:82:8c:
         3d:a8:cf:fe:38:5f:e8:7d:bf:ad:ed:48:d2:22:f2:26:d5:cb:
         80:8f:9f:ba:f6:e9:12:cd:6b:c0:cf:88:57:f2:2c:a3:95:02:
         84:6f:bc:98:18:3e:b2:72:f5:a9:b3:96:c3:79:4d:b4:4d:8b:
         a1:a9:5c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:07:42 2025 by rpki-client