Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce/826ab303-5f30-342d-91ae-d20393f81fa2.roa
File:                     826ab303-5f30-342d-91ae-d20393f81fa2.roa (raw, json)
Hash identifier:          EGADR7sbXEUthr2be5zyeRnoSHNGWxaTsh7qydVBTvc=
Subject key identifier:   62:57:1C:CA:8E:B7:33:C9:2E:04:62:EC:3F:9F:37:D6:E7:44:81:D2
Certificate issuer:       /CN=4a81e924-7e18-4312-95fd-09d6d0b08bce
Certificate serial:       010D0C9F4328584A9FFBAA42628905B1C2D89380
Authority key identifier: 33:97:1D:92:B7:90:2A:45:99:91:58:D6:D6:F9:0C:FA:A5:76:46:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce/826ab303-5f30-342d-91ae-d20393f81fa2.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     33099
IP address blocks:        207.167.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce/4a81e924-7e18-4312-95fd-09d6d0b08bce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce/4a81e924-7e18-4312-95fd-09d6d0b08bce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:aa:42:62:89:05:b1:c2:d8:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a81e924-7e18-4312-95fd-09d6d0b08bce
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=e9eddfe0-48d7-4cb5-b4fb-d1b1d13ab117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:25:14:dd:3e:0d:af:a1:66:ed:be:ea:09:ff:
                    1d:3b:6e:b6:07:1b:e8:37:77:d6:73:67:ce:c6:a9:
                    f7:41:85:2a:74:58:96:66:97:35:e4:42:f9:83:5f:
                    30:63:03:b4:16:65:40:a6:cf:76:44:11:b1:1d:eb:
                    59:23:87:d4:43:e7:12:98:d3:23:24:b9:2b:2b:82:
                    27:c8:f0:f2:06:a4:75:6e:4b:f9:be:3b:d4:c2:31:
                    9c:67:ae:76:20:b1:43:91:c6:e8:ea:d6:74:7b:4a:
                    31:6f:6a:8a:92:19:4b:ea:56:3b:30:20:19:ec:25:
                    c1:6e:c1:d8:a0:a4:b0:52:be:53:aa:89:00:8d:a9:
                    de:08:ea:90:9c:97:55:7b:f4:90:a6:a9:84:84:85:
                    74:2a:5a:78:ba:be:e4:df:e7:a5:29:ee:66:37:48:
                    c8:9f:2d:1a:1c:00:e4:2d:86:e5:fd:fd:c8:c1:7a:
                    45:35:c8:bc:22:4e:90:62:1c:1e:2c:ba:d6:99:bd:
                    f8:d3:74:ab:a2:4a:b3:cc:94:a4:48:99:13:f9:58:
                    11:c7:4d:c0:78:42:a5:25:74:08:07:68:62:75:b5:
                    df:6b:25:36:9e:17:cf:dd:96:14:31:be:8e:75:a7:
                    a3:19:4c:e2:9a:5d:27:9b:d7:75:84:65:fb:18:cc:
                    34:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:57:1C:CA:8E:B7:33:C9:2E:04:62:EC:3F:9F:37:D6:E7:44:81:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce/826ab303-5f30-342d-91ae-d20393f81fa2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce/4a81e924-7e18-4312-95fd-09d6d0b08bce.crl

            X509v3 Authority Key Identifier:
                keyid:33:97:1D:92:B7:90:2A:45:99:91:58:D6:D6:F9:0C:FA:A5:76:46:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.167.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:e0:ae:bf:5f:38:b7:bc:e0:e0:bb:d3:5c:00:6e:cd:dc:8a:
         25:c1:53:1c:f2:88:be:a2:21:11:af:ad:6d:97:f5:ee:3e:e8:
         cb:17:e5:b8:37:83:1a:bd:65:2c:b9:50:85:69:61:32:dd:24:
         20:2a:5b:46:6e:83:6d:b4:79:78:ec:03:c1:1a:2a:6b:57:ea:
         32:a3:b8:e5:f5:7d:d9:2d:10:5e:85:b0:5b:39:e2:ce:00:a2:
         29:d6:6b:7f:bc:0d:1f:3e:b3:52:e6:81:5b:0f:5f:85:13:7d:
         f8:99:7a:c8:29:cc:8d:50:64:cb:3b:15:82:d0:47:76:4d:83:
         9d:b5:fc:7e:23:74:ff:a2:a1:de:91:3a:8f:bb:54:94:68:65:
         57:28:16:ad:bb:28:63:90:d0:a7:86:06:2b:01:32:1e:92:24:
         14:6d:fe:71:a3:4c:fd:fd:32:5e:bc:33:b3:6f:23:c3:a4:d0:
         b7:bf:33:14:30:5b:9a:9b:41:e0:9f:47:52:e6:37:60:bc:98:
         af:ff:e7:17:57:1e:cf:2f:61:fe:1e:2d:fa:68:ad:e2:3b:c3:
         66:4c:54:08:ae:c2:82:f7:a0:e8:d7:f7:32:1b:21:c7:73:4b:
         6f:6c:ac:62:c8:58:78:03:4e:5e:9a:66:46:e8:e9:b7:f4:c1:
         03:62:86:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:25:46 2025 by rpki-client