Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/7206b8e5-96b0-3b78-a114-38b6e087b13c.roa
File:                     7206b8e5-96b0-3b78-a114-38b6e087b13c.roa (raw, json)
Hash identifier:          9VD+19SH9YOQgajZ/jS72JWLy2Cp1/TGAnxWkBCv44I=
Subject key identifier:   A1:AD:09:A0:E2:10:A9:F6:15:AD:6B:DC:2C:21:06:7F:70:CA:B2:B9
Certificate issuer:       /CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae
Certificate serial:       010D0C9F4328584E66DA3A12B5AC6172B3781F00
Authority key identifier: 8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/7206b8e5-96b0-3b78-a114-38b6e087b13c.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     3842
IP address blocks:        107.191.96.0/22 maxlen: 24
                          107.191.108.0/22 maxlen: 24
                          168.235.64.0/22 maxlen: 24
                          168.235.68.0/22 maxlen: 24
                          168.235.80.0/22 maxlen: 24
                          168.235.88.0/22 maxlen: 24
                          168.235.100.0/22 maxlen: 24
                          168.235.108.0/22 maxlen: 24
                          2604:180:2::/48 maxlen: 48
                          2604:180:9::/48 maxlen: 48
                          2604:180:c::/48 maxlen: 48
                          2604:180:f3::/48 maxlen: 48
                          2604:180:f7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:3a:12:b5:ac:61:72:b3:78:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=bbd03584-5e70-432c-8415-bc65f785677a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b6:5e:fe:4c:13:4b:31:e6:13:cf:14:c6:55:
                    b8:7f:9d:f3:5e:42:03:01:ff:69:5e:ac:95:0f:4b:
                    85:da:25:61:90:6f:b7:cd:5f:19:c2:1f:65:36:98:
                    b4:95:dd:17:98:6b:53:da:d8:0b:d4:7e:b1:36:74:
                    52:43:60:ef:29:46:76:69:c5:71:0c:4d:af:87:16:
                    82:0e:3a:6f:87:bf:ca:bd:7b:e8:48:5f:f4:67:56:
                    bf:d1:c1:b1:7c:29:64:c6:f1:0a:37:47:4d:92:ad:
                    da:7e:5a:ec:be:d0:1b:21:82:af:ac:60:cb:42:af:
                    54:a4:7e:ef:9a:25:2b:ef:01:66:8c:26:60:eb:59:
                    fd:07:3e:ce:fc:ff:bd:70:75:11:74:2c:db:36:5c:
                    e2:d6:1e:8b:62:2f:98:fe:8e:40:d5:77:7b:f9:42:
                    ef:a3:2c:33:81:18:ad:0f:35:80:86:2a:2c:70:89:
                    1d:39:46:3d:c5:03:9c:f8:23:a0:d8:88:9d:73:76:
                    58:c8:88:df:29:09:95:68:92:99:ac:ee:72:c4:13:
                    52:65:20:ef:69:6d:9c:96:f8:ec:5f:2d:2d:01:4f:
                    44:34:b3:da:41:03:46:95:e0:8e:cd:b6:40:02:0e:
                    2c:99:f3:fc:85:f7:40:75:6b:57:6a:c7:2d:48:1b:
                    2e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:AD:09:A0:E2:10:A9:F6:15:AD:6B:DC:2C:21:06:7F:70:CA:B2:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/7206b8e5-96b0-3b78-a114-38b6e087b13c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl

            X509v3 Authority Key Identifier:
                keyid:8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.191.96.0/22
                  107.191.108.0/22
                  168.235.64.0/21
                  168.235.80.0/22
                  168.235.88.0/22
                  168.235.100.0/22
                  168.235.108.0/22
                IPv6:
                  2604:180:2::/48
                  2604:180:9::/48
                  2604:180:c::/48
                  2604:180:f3::/48
                  2604:180:f7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:80:c1:5b:24:8b:6b:21:bb:ec:ff:7b:63:1d:09:d8:e0:d6:
         52:9c:9e:fc:30:d2:c3:1e:a8:74:7a:d1:fd:21:3b:1f:63:12:
         f3:06:f8:9e:23:0b:36:21:27:f8:86:86:26:02:3c:40:1c:36:
         74:77:9d:bd:e0:5d:94:93:46:c3:80:e6:b0:da:34:c8:4d:bd:
         8d:50:76:b1:80:9a:cc:26:fd:8c:bd:d0:63:dd:33:ab:92:70:
         c4:de:11:c9:b2:93:9a:60:13:59:e8:7f:f3:5b:87:c3:a4:8e:
         d9:ef:d5:56:55:a6:39:13:c8:a1:be:d4:8e:dd:32:6b:f1:58:
         14:e6:2b:c8:21:ee:23:07:ef:dc:71:7f:c1:e6:df:1b:1e:ed:
         20:73:06:53:83:5c:eb:7b:55:b0:2f:e5:26:67:ad:da:2b:8b:
         55:3a:10:91:6f:45:70:13:24:65:8b:47:d4:62:aa:49:52:f9:
         0e:ed:64:fa:1e:ff:3d:97:cc:17:0e:ca:38:af:20:86:bd:9d:
         e1:95:ee:a1:f1:14:37:44:28:8f:27:94:89:fe:56:de:10:20:
         fd:d7:5f:05:82:6a:b9:69:5d:9a:53:f8:7b:e2:72:0b:7f:d2:
         b8:02:ba:49:c2:71:53:79:c2:44:49:3a:09:09:18:05:2b:81:
         1d:a0:2b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:18:34 2026 by rpki-client