Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/12418dcd-cef2-3591-9cdc-e25c3f6be224.roa
File:                     12418dcd-cef2-3591-9cdc-e25c3f6be224.roa (raw, json)
Hash identifier:          akplIGvxZ+uSQcePCAyhQTU17OulwMocJHqN0PsK2UM=
Subject key identifier:   27:85:6D:C7:C8:16:A7:51:1B:D7:CF:CF:38:47:19:B8:D2:E8:53:21
Certificate issuer:       /CN=e0927227-fbc8-4924-89af-1885637cb07c
Certificate serial:       010D0C9F4328584AC8764BBB99EB11CFE7F121B0
Authority key identifier: 42:D4:C0:D6:AB:19:EE:81:22:57:BD:C2:B6:88:1C:A1:71:C0:7F:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/12418dcd-cef2-3591-9cdc-e25c3f6be224.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        107.162.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/e0927227-fbc8-4924-89af-1885637cb07c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/e0927227-fbc8-4924-89af-1885637cb07c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:4b:bb:99:eb:11:cf:e7:f1:21:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0927227-fbc8-4924-89af-1885637cb07c
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=98a77ca0-8f9e-41f1-bd08-bad5bfad0c9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:91:20:8f:c1:e4:1d:fc:30:1d:be:91:0f:56:
                    07:c7:94:da:99:c8:ed:53:f5:66:65:cf:df:12:0b:
                    c8:5f:3a:d3:f8:71:1a:05:bc:7a:bd:65:4b:ba:f5:
                    a4:28:36:f2:b4:23:a1:00:b1:34:c9:5c:36:f5:e3:
                    92:35:de:59:2c:61:03:7e:a6:c3:51:a3:20:33:e0:
                    26:c4:19:69:2b:f3:61:eb:b8:ee:48:fa:23:ab:6f:
                    cf:45:4b:a3:0f:ad:41:81:ac:c4:52:88:46:6c:b3:
                    89:c5:aa:c4:8e:ba:0d:66:e5:8e:c1:7a:23:04:01:
                    e2:80:50:87:67:4f:7e:f0:d5:12:1a:55:9e:12:17:
                    54:d3:62:b1:33:dd:ca:c4:40:ca:44:e3:c7:d1:11:
                    e8:9e:50:1e:b8:01:76:fd:73:64:ab:36:44:bb:94:
                    3b:6c:3a:83:ce:fb:ef:ca:a1:69:98:69:86:ad:d1:
                    d6:e2:77:f3:1a:9b:44:2a:dc:1f:91:99:cd:6d:e6:
                    85:59:84:8e:4a:3d:d2:12:0c:5c:91:5b:7f:99:c1:
                    db:61:40:a0:34:6e:92:cf:af:e8:06:e8:1c:35:57:
                    0b:44:34:91:72:ff:08:90:ff:51:3e:a3:37:e8:a9:
                    70:0f:e7:0c:98:8d:6b:29:72:26:1f:11:f4:aa:fb:
                    1a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:85:6D:C7:C8:16:A7:51:1B:D7:CF:CF:38:47:19:B8:D2:E8:53:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/12418dcd-cef2-3591-9cdc-e25c3f6be224.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/e0927227-fbc8-4924-89af-1885637cb07c.crl

            X509v3 Authority Key Identifier:
                keyid:42:D4:C0:D6:AB:19:EE:81:22:57:BD:C2:B6:88:1C:A1:71:C0:7F:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.162.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:d6:02:b8:5f:1d:c7:b0:70:8d:c6:f7:ec:f0:ec:ca:07:01:
         a2:30:c7:69:37:a8:91:23:f1:76:ef:f8:8f:3a:94:12:aa:62:
         a3:d5:28:34:f3:0c:85:0f:9c:e0:5c:15:2d:b9:ec:b2:30:50:
         1e:1c:fd:a8:df:51:c0:70:b5:7c:07:c9:49:91:cd:e1:02:7c:
         d5:42:3d:cd:e6:00:9e:e0:53:0e:7c:ad:37:cc:98:dd:fb:8a:
         2d:99:13:95:2e:97:a4:83:e0:fb:da:b4:5f:c0:51:a2:f9:22:
         6a:ac:96:ce:9f:b9:5d:d5:a5:b0:c8:20:48:f3:02:54:14:49:
         de:29:c0:1b:5d:f8:d8:ee:13:7b:ba:2a:46:be:4d:67:ba:c5:
         6e:1e:b4:98:a4:0f:09:78:d9:62:f9:9d:ac:06:44:9b:25:7a:
         b0:53:bd:91:14:25:72:f2:64:d3:9f:41:f0:2e:bd:89:1c:fd:
         00:c1:33:ee:81:54:4f:f1:c9:2b:d5:8d:fb:d9:e1:ad:4f:28:
         be:7b:0d:ee:86:18:12:aa:62:cb:b7:b9:01:65:fb:19:da:fc:
         08:32:5c:f3:02:32:e2:6b:08:72:41:b7:d4:8b:ea:24:82:26:
         07:26:8b:ab:22:70:9e:43:ee:ed:f9:be:be:93:d6:be:f3:5e:
         dd:76:3c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:53:23 2025 by rpki-client