Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/a413b97d-cf52-32ca-b767-c41340750b7a.roa
File:                     a413b97d-cf52-32ca-b767-c41340750b7a.roa (raw, json)
Hash identifier:          hPlwk4HDmI6zWIF1wBTFgQWBNZ1ir6soR5RUQ+KlGCs=
Subject key identifier:   7F:0D:E6:32:22:58:31:64:B3:E9:E1:1C:F5:CC:B2:E4:1A:50:2C:30
Certificate issuer:       /CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae
Certificate serial:       010D0C9F4328584AB7B6306B49E34B91893E2300
Authority key identifier: 8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/a413b97d-cf52-32ca-b767-c41340750b7a.roa
Signing time:             Sat 02 Aug 2025 01:00:32 +0000
ROA not before:           Sat 02 Aug 2025 01:00:32 +0000
ROA not after:            Fri 31 Oct 2025 01:00:32 +0000
asID:                     201106
IP address blocks:        107.191.112.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b7:b6:30:6b:49:e3:4b:91:89:3e:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae
        Validity
            Not Before: Aug  2 01:00:32 2025 GMT
            Not After : Oct 31 01:00:32 2025 GMT
        Subject: CN=469d393a-ef80-496e-99d3-96ea798aa1c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:31:b8:f6:d6:dd:5e:64:65:1e:b0:d9:3d:a0:
                    da:8f:19:b9:75:9f:aa:fb:83:28:07:f9:83:3f:0a:
                    1f:5b:96:10:35:76:e1:53:15:4a:29:e8:22:a8:a5:
                    9a:7c:fd:dd:50:ec:db:29:04:f1:10:d3:01:57:80:
                    d0:33:da:c1:fa:e0:2e:e7:6c:a6:53:a9:f6:6c:1e:
                    16:c1:c4:a1:75:79:34:61:91:8f:9a:83:4f:f1:a7:
                    fa:cd:32:9a:36:b2:cb:72:c5:d3:90:aa:a8:e7:02:
                    49:f5:12:bb:4f:b4:7c:9a:25:e6:05:60:3b:55:bd:
                    21:9a:17:21:92:39:68:c4:b3:85:72:d4:be:dd:fb:
                    02:a9:2e:8f:3c:51:ac:ca:be:1c:20:e3:ad:e6:d7:
                    d1:82:ec:c9:76:23:c1:76:60:cd:84:88:23:a6:d7:
                    ed:ad:1a:4f:3b:9b:05:0c:99:cb:92:f9:56:a8:7e:
                    6a:ae:cf:e5:76:b9:f7:f2:64:ca:6c:1a:3c:a9:a4:
                    eb:70:55:11:b6:e0:8b:80:9c:14:bc:22:23:0d:1e:
                    d8:b0:3c:b8:3f:c7:7f:dd:1c:8d:a7:6a:cd:22:45:
                    67:d0:a4:44:81:7f:d1:96:fd:1a:27:9e:72:c2:96:
                    98:7d:a4:af:da:70:f7:09:93:46:be:93:88:fd:fc:
                    38:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:0D:E6:32:22:58:31:64:B3:E9:E1:1C:F5:CC:B2:E4:1A:50:2C:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/a413b97d-cf52-32ca-b767-c41340750b7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl

            X509v3 Authority Key Identifier:
                keyid:8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.191.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:66:5b:eb:b8:8d:90:c6:cd:4c:0c:26:ce:3e:b0:ff:4e:75:
         58:56:b7:e4:25:f2:00:b2:bd:df:f1:d7:2d:bd:a9:f4:dd:d8:
         dd:21:86:e5:8d:44:a7:9e:e5:e0:8a:72:a0:3f:6e:8c:16:6d:
         fa:64:0c:e8:32:d6:b8:06:9e:1d:f5:eb:b0:e3:72:d1:b9:95:
         8a:21:7c:3f:84:92:c8:7c:e3:5a:ce:a2:d6:35:36:da:10:25:
         81:15:99:f4:15:6f:72:b8:fb:e9:dd:e9:1e:f2:5b:a7:0f:a7:
         db:72:bb:ca:37:b0:9f:6d:da:2d:6b:64:a2:4f:67:20:12:f5:
         68:e5:b0:9c:1d:91:ba:53:9c:02:f3:c1:87:54:46:e3:06:54:
         c4:01:50:a3:78:9d:6b:37:75:ea:a1:39:b7:d9:62:2f:e8:a9:
         81:91:3f:68:8c:78:3b:f1:5a:fb:52:c1:88:02:31:db:86:c6:
         42:22:49:ed:b8:79:69:7e:d0:24:7e:d8:a7:d2:8a:10:d5:c9:
         fa:b1:3b:99:24:76:2d:b6:f7:7a:ed:94:0d:7b:af:fe:8b:59:
         19:dd:0e:1e:52:b6:42:91:e8:07:9c:98:53:1e:0e:94:d7:2f:
         43:41:69:f4:06:0f:cb:df:a1:27:28:b5:c9:85:93:4d:c2:bc:
         6d:0a:ae:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:55:54 2025 by rpki-client