Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7b066387-9ef6-334c-b412-45b617c6cec2.roa
File:                     7b066387-9ef6-334c-b412-45b617c6cec2.roa (raw, json)
Hash identifier:          mPVFWam+/K0Bk0ICtq6USGsojvh3WrbxRUNyNec3Vxo=
Subject key identifier:   71:26:58:CB:7D:9A:68:CF:23:76:36:72:D3:D5:E4:F4:59:72:E9:2B
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584ACF71045B96E49A606EE42180
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7b066387-9ef6-334c-b412-45b617c6cec2.roa
Signing time:             Sun 10 Aug 2025 13:00:41 +0000
ROA not before:           Sun 10 Aug 2025 13:00:41 +0000
ROA not after:            Sat 08 Nov 2025 14:00:41 +0000
asID:                     54113
IP address blocks:        131.125.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cf:71:04:5b:96:e4:9a:60:6e:e4:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Aug 10 13:00:41 2025 GMT
            Not After : Nov  8 14:00:41 2025 GMT
        Subject: CN=2f934c5e-72ac-4d37-bb78-2cbb5e48ee93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:81:c2:48:13:9e:36:6d:22:27:e3:d4:7c:cf:
                    b2:9f:ce:f7:de:56:5e:93:22:48:46:05:56:ed:cd:
                    fd:e1:63:3a:e1:84:9c:4e:69:4e:a0:9d:10:82:3a:
                    47:02:5a:90:74:20:ea:d4:cd:27:c9:30:3d:34:b0:
                    33:46:ee:1e:ad:64:18:a4:2c:bb:54:ab:ad:05:84:
                    19:35:d4:4b:95:03:88:3c:0a:cf:ef:79:2c:b3:58:
                    2f:05:bb:f6:df:bd:02:69:39:3b:d1:9b:8f:18:06:
                    ba:39:72:cf:f0:57:14:57:98:2a:1f:56:5e:97:a4:
                    c8:0f:d1:17:e5:f8:f5:69:0e:70:a3:92:5b:f6:a7:
                    02:6a:12:44:58:08:78:8c:d9:08:8b:5e:a5:73:3a:
                    22:30:64:61:db:a8:4e:fa:36:12:84:15:cb:af:b5:
                    fe:66:c9:a5:6a:9e:58:57:fc:ee:12:3e:4f:d6:da:
                    63:88:58:06:24:28:b5:ec:43:69:1c:23:12:0b:47:
                    92:35:cf:6a:d8:e6:80:b8:69:f5:6d:45:6a:85:27:
                    56:0e:14:91:da:ad:71:0b:9e:aa:d5:3f:5f:7d:7b:
                    4e:dd:00:ed:d9:26:89:dd:0d:28:1a:79:32:ac:6b:
                    01:7f:64:a2:fd:78:33:12:90:64:8f:08:4b:f3:70:
                    72:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:26:58:CB:7D:9A:68:CF:23:76:36:72:D3:D5:E4:F4:59:72:E9:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7b066387-9ef6-334c-b412-45b617c6cec2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.125.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:95:c2:51:53:8d:a6:cd:fb:c1:74:3f:c8:11:da:eb:40:3d:
         58:2e:c9:4a:80:85:6f:a1:54:01:a5:8e:6c:12:3a:53:bf:76:
         3e:79:59:f5:e6:80:c3:63:b9:b4:01:4a:dc:21:2c:ed:c9:c8:
         ac:fb:2d:65:d0:8e:c3:e1:92:e6:26:50:6b:41:d4:18:af:96:
         d4:26:96:9b:db:0a:25:ff:10:a0:e8:d9:f8:11:32:30:40:7a:
         8f:a0:f9:de:8c:0b:5e:98:ba:9b:71:54:44:0a:e4:06:7c:93:
         55:d1:03:f7:83:4c:bf:ab:e4:aa:ff:1e:8a:e4:c9:d2:93:72:
         e6:d5:14:bf:bc:ac:a1:f4:a5:c6:0f:5f:e0:a5:dd:bd:b9:4c:
         b3:ed:b3:ac:5d:ab:45:07:5d:b2:68:f9:8b:6c:ed:30:c3:07:
         77:cb:14:ea:a1:52:86:bf:02:ca:2c:b1:04:03:fc:67:40:3b:
         8a:3d:78:5f:22:c1:c1:79:35:b9:5a:f6:bb:2d:7d:0e:ce:ff:
         f0:65:ff:d7:06:65:4a:44:d4:ec:02:54:e4:ea:dd:5d:a4:20:
         aa:40:15:6d:2e:41:7d:25:74:7e:7e:e4:c9:1f:9a:12:a6:de:
         05:41:20:ba:bb:c5:41:40:7a:78:ee:92:5a:f8:87:41:00:fa:
         a6:df:eb:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:26:28 2025 by rpki-client