Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/efcc87f2-f89d-30a2-9b5b-fcfa68f7f1cc.roa
File:                     efcc87f2-f89d-30a2-9b5b-fcfa68f7f1cc.roa (raw, json)
Hash identifier:          AdFLlbJWc2F9WVnS//5GNtcJT5od3FAhcXNJCx+ACHc=
Subject key identifier:   83:BD:D1:B1:EB:C3:4B:19:7D:CE:DF:65:5C:B2:D5:7B:B8:A5:9A:96
Certificate issuer:       /CN=0c04df04-2c9d-47f7-9c5f-383c0718b395
Certificate serial:       010D0C9F4328584E11B433D8AF5040249E4DAF00
Authority key identifier: B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/efcc87f2-f89d-30a2-9b5b-fcfa68f7f1cc.roa
Signing time:             Fri 05 Jun 2026 09:00:12 +0000
ROA not before:           Fri 05 Jun 2026 09:00:12 +0000
ROA not after:            Thu 03 Sep 2026 09:00:12 +0000
asID:                     17275
IP address blocks:        161.107.108.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:11:b4:33:d8:af:50:40:24:9e:4d:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c04df04-2c9d-47f7-9c5f-383c0718b395
        Validity
            Not Before: Jun  5 09:00:12 2026 GMT
            Not After : Sep  3 09:00:12 2026 GMT
        Subject: CN=a64c81a3-7c1a-4372-acfe-fa547d2361b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:86:40:fe:e4:16:8d:79:86:49:f8:02:63:2c:
                    95:84:b6:73:95:fe:fa:ed:93:2e:9a:2e:93:80:d7:
                    04:53:75:df:ef:08:ae:4d:95:82:84:d7:8d:8f:d5:
                    bc:f4:9f:93:48:33:7a:18:81:05:b4:6c:b2:eb:a7:
                    3c:0e:48:a2:ce:10:9e:89:2b:78:9a:1d:c8:f0:51:
                    7e:f5:83:08:e6:a5:a4:e8:92:ef:f6:75:a7:79:9d:
                    ce:81:13:07:fb:50:b2:97:4a:48:7a:44:84:69:35:
                    ae:cd:dd:0e:67:19:54:56:c7:85:bc:6a:dc:25:72:
                    25:98:57:28:c3:1c:2e:83:32:50:0a:1d:46:30:1f:
                    89:da:72:48:37:45:83:f1:b8:c3:82:ca:2a:d5:0f:
                    66:b4:c8:5c:c3:66:b1:ee:68:35:e0:ea:27:3b:1d:
                    13:c5:83:af:22:8e:a6:f0:fd:d8:6f:4a:93:76:d3:
                    7b:88:8a:2a:d6:9d:d4:51:88:54:d0:d5:f3:f8:9a:
                    a7:31:c9:9c:de:48:ea:94:27:ab:4e:c8:a0:a0:58:
                    b2:af:e1:cc:a6:2f:34:4b:a3:a1:6e:3a:f1:21:78:
                    c2:99:25:65:6c:98:ad:56:c2:2b:ff:f1:8e:78:0f:
                    cb:14:95:cf:f3:f7:e8:c2:6e:66:fe:f1:77:73:c0:
                    60:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:BD:D1:B1:EB:C3:4B:19:7D:CE:DF:65:5C:B2:D5:7B:B8:A5:9A:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/efcc87f2-f89d-30a2-9b5b-fcfa68f7f1cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl

            X509v3 Authority Key Identifier:
                keyid:B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.107.108.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:1d:d9:8c:89:60:ea:98:25:b4:c4:80:c3:0b:af:f0:33:38:
         cc:de:46:0e:ef:48:e2:b7:ea:06:89:36:22:40:d6:9d:7b:e0:
         11:a9:3f:36:ad:e9:06:b0:71:1d:d9:41:7f:18:1a:0d:30:9e:
         45:10:11:ea:51:16:ce:f3:be:79:9c:d4:dc:c3:e0:d3:01:9a:
         e6:03:a8:58:bd:84:a2:68:a0:cc:fd:51:7f:81:c4:8c:7c:ba:
         1c:37:1e:63:f5:71:48:a7:cc:44:7d:90:50:cc:9d:8b:81:60:
         98:d2:b1:a0:22:48:7c:78:84:53:a8:59:62:0f:83:58:2f:30:
         f7:5f:d5:74:a6:7b:38:a8:d4:83:f6:6e:a7:a5:6f:cc:d4:7e:
         47:9a:36:21:42:17:98:91:9e:92:1e:1f:34:dd:f4:05:9b:b3:
         c7:fb:a7:b0:16:6b:3c:7b:5b:47:a3:f8:cd:d9:07:6c:9c:25:
         cc:19:61:fa:de:03:ff:6e:f4:d5:7c:49:87:25:21:78:32:93:
         f3:a7:3f:43:62:92:34:69:b0:fe:a3:48:5f:ce:37:a9:9d:16:
         9c:fa:4f:12:27:b8:aa:22:b9:c8:4a:21:2b:97:96:61:fb:e4:
         c8:5e:1d:20:60:54:99:1d:05:91:6d:bd:41:89:5f:ff:93:dd:
         ac:b3:35:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:29:44 2026 by rpki-client