Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/ebab3613-1b63-32c0-b4b9-92539a7ae900.roa
File:                     ebab3613-1b63-32c0-b4b9-92539a7ae900.roa (raw, json)
Hash identifier:          Etoo4ath0BpXKZaMpP9QjHcMrCihTI6ZI6wrKIbL6jE=
Subject key identifier:   8C:80:A4:4B:37:C2:1F:EF:8B:A8:32:B1:CF:A7:2E:FE:A4:A3:E7:26
Certificate issuer:       /CN=8fe40320-74dc-4444-a6ef-bd88d604a876
Certificate serial:       010D0C9F4328584AB0BB7C4B4E3AD1671DF96C80
Authority key identifier: 06:9B:29:99:88:7C:74:39:49:CB:2D:63:1C:4B:51:C1:4B:D7:32:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/ebab3613-1b63-32c0-b4b9-92539a7ae900.roa
Signing time:             Wed 30 Jul 2025 13:00:40 +0000
ROA not before:           Wed 30 Jul 2025 13:00:40 +0000
ROA not after:            Tue 28 Oct 2025 13:00:40 +0000
asID:                     26411
IP address blocks:        103.207.40.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/8fe40320-74dc-4444-a6ef-bd88d604a876.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/8fe40320-74dc-4444-a6ef-bd88d604a876.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b0:bb:7c:4b:4e:3a:d1:67:1d:f9:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fe40320-74dc-4444-a6ef-bd88d604a876
        Validity
            Not Before: Jul 30 13:00:40 2025 GMT
            Not After : Oct 28 13:00:40 2025 GMT
        Subject: CN=c7946f51-4e79-44fc-ae7d-6abad452570b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d7:0e:00:31:b2:4b:d1:45:56:ed:0f:07:93:
                    78:b0:17:4c:0a:69:a7:de:5b:ad:54:4e:78:3f:ce:
                    f3:8b:22:9c:a5:8a:3e:65:82:d4:46:ce:be:11:f2:
                    ac:28:93:1f:bc:d6:cd:db:ac:c1:26:25:42:ec:fb:
                    cd:7a:a0:3b:ea:f7:9a:4b:a7:f4:14:9a:09:96:db:
                    6c:df:f3:2a:5a:02:b8:c5:10:b5:83:76:36:40:2f:
                    60:1b:35:62:7f:c3:21:f9:b4:e5:50:91:9c:b2:17:
                    d3:20:53:4a:92:51:c8:61:dd:8d:de:bc:7f:a8:77:
                    5b:86:c8:32:70:05:e6:e1:a5:ab:2b:90:56:50:04:
                    d9:e1:a1:2d:80:6e:41:41:2a:7b:9e:00:fc:d6:1d:
                    61:f4:88:ba:14:3c:5a:36:d0:dd:c1:94:49:81:ec:
                    65:5d:bf:32:e7:ca:20:4d:e8:c8:81:28:61:57:ac:
                    c3:00:e5:72:67:e5:83:ca:04:f5:f2:a3:fe:38:c0:
                    c8:ff:1e:bb:77:46:3f:53:8d:21:99:be:73:bd:92:
                    f0:c0:03:f9:0f:42:01:6f:56:32:29:9d:56:d4:ed:
                    aa:08:94:91:42:74:9a:42:e4:11:da:33:ad:4e:84:
                    2e:c0:11:eb:00:2a:11:d5:86:0e:97:e0:3d:11:fd:
                    11:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:80:A4:4B:37:C2:1F:EF:8B:A8:32:B1:CF:A7:2E:FE:A4:A3:E7:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/ebab3613-1b63-32c0-b4b9-92539a7ae900.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/8fe40320-74dc-4444-a6ef-bd88d604a876.crl

            X509v3 Authority Key Identifier:
                keyid:06:9B:29:99:88:7C:74:39:49:CB:2D:63:1C:4B:51:C1:4B:D7:32:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.207.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:02:43:15:66:1c:04:41:a3:d4:4d:2e:92:d6:71:8e:99:64:
         00:39:dd:ac:95:6d:0c:77:b9:ce:04:0b:45:c1:ad:28:cc:cf:
         3a:af:23:e7:ed:9e:ef:b5:db:a4:46:32:fd:6d:27:4b:5b:3f:
         b9:b8:88:c2:6a:a9:29:61:08:2d:30:6b:bc:07:97:1a:51:84:
         a6:74:d6:90:41:cf:94:69:4d:40:ca:4d:3d:8f:a3:12:17:ea:
         b8:6a:de:23:8f:c4:65:fb:f0:4f:59:a5:6f:d2:73:d3:ba:ee:
         e9:bb:8a:ab:2d:47:0a:a9:fc:f6:a9:53:75:e0:4f:7e:ad:ff:
         19:db:32:a3:f5:7e:a9:b3:e0:1e:7f:7a:77:59:24:9b:52:56:
         be:3c:e1:aa:6f:98:ce:c4:02:0d:2c:23:1e:0a:ba:c3:18:84:
         4e:81:69:ec:02:81:df:db:f2:eb:fd:ca:c7:ba:93:f4:26:fb:
         41:13:78:04:d2:d4:77:95:84:06:3f:68:61:6c:03:59:43:f4:
         92:eb:8b:9b:bc:9a:58:15:9c:0b:4f:2d:aa:c7:83:f7:d0:8f:
         20:1e:4c:d9:b1:49:ea:10:04:8d:fb:da:db:96:c9:d3:45:fd:
         80:b0:b0:ed:17:dc:5c:c3:5c:0d:55:05:a2:0d:52:d8:4f:6d:
         8c:00:ce:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:14:09 2025 by rpki-client