Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/bac647f9-fa92-3707-a9a8-4f3bf760719d.roa
File:                     bac647f9-fa92-3707-a9a8-4f3bf760719d.roa (raw, json)
Hash identifier:          PGHZ0fIvlamJ+2YXdEtkxfTAtXV8Pc8m3jRo5fKKUXU=
Subject key identifier:   4B:14:57:CD:3E:2E:54:41:9F:04:7A:0B:D8:1F:78:55:D4:47:7B:C2
Certificate issuer:       /CN=7ede7b70-d745-425d-975b-bb0eb6368430
Certificate serial:       010D0C9F4328584BDC58BC031D2E668EDA761480
Authority key identifier: 42:6F:F9:26:1D:D7:83:76:C7:99:96:08:74:48:44:89:11:97:CA:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/bac647f9-fa92-3707-a9a8-4f3bf760719d.roa
Signing time:             Fri 14 Nov 2025 20:44:20 +0000
ROA not before:           Fri 14 Nov 2025 20:44:20 +0000
ROA not after:            Thu 12 Feb 2026 20:44:20 +0000
asID:                     16509
IP address blocks:        107.180.200.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/7ede7b70-d745-425d-975b-bb0eb6368430.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/7ede7b70-d745-425d-975b-bb0eb6368430.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Nov 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:dc:58:bc:03:1d:2e:66:8e:da:76:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ede7b70-d745-425d-975b-bb0eb6368430
        Validity
            Not Before: Nov 14 20:44:20 2025 GMT
            Not After : Feb 12 20:44:20 2026 GMT
        Subject: CN=2b1dbcb8-6c5f-448d-a89c-bc42436a6587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:3d:a1:e1:f5:20:14:cd:cb:52:e5:25:54:ec:
                    04:83:c5:f5:bd:77:92:be:f3:89:4f:3a:32:35:0d:
                    16:4d:cb:cd:d9:9e:19:5d:02:aa:17:3d:c8:a6:4e:
                    a1:5b:55:d4:b1:21:20:32:2e:37:b6:7c:24:7b:f2:
                    29:57:5c:91:f6:9f:fa:6f:85:44:0e:b1:3d:6e:9d:
                    a4:6b:07:d9:86:6f:ce:d7:05:14:11:11:3d:5d:5a:
                    8c:98:ca:76:bb:f4:da:76:cd:8d:1a:35:3e:38:66:
                    7e:8f:e0:01:47:1a:ac:21:d1:41:86:7c:c4:05:c4:
                    e6:bb:ed:36:cb:9b:a8:02:5f:72:b4:f3:98:54:68:
                    d1:cd:50:a4:2e:a7:85:ae:9c:27:b9:09:c9:3e:7e:
                    ff:67:39:ad:5b:3c:52:f5:8c:31:de:7e:e0:89:fd:
                    9e:b5:fd:83:a2:81:86:a0:f2:27:fa:3b:c0:74:46:
                    82:d5:f7:ec:d8:63:2f:4d:75:24:8c:6f:8d:10:0b:
                    7c:29:cd:c4:27:13:45:a8:68:dc:4d:05:97:53:cb:
                    98:72:fd:c1:42:9d:64:74:40:7b:ba:f0:f4:68:18:
                    7a:0e:6f:4b:b5:36:49:e2:a3:9b:7a:dd:cc:7a:32:
                    96:23:bf:d2:25:2d:bc:bc:c6:55:5b:34:b8:89:7c:
                    38:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:14:57:CD:3E:2E:54:41:9F:04:7A:0B:D8:1F:78:55:D4:47:7B:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/bac647f9-fa92-3707-a9a8-4f3bf760719d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/7ede7b70-d745-425d-975b-bb0eb6368430.crl

            X509v3 Authority Key Identifier:
                keyid:42:6F:F9:26:1D:D7:83:76:C7:99:96:08:74:48:44:89:11:97:CA:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.180.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:8c:77:95:31:c4:68:d5:35:43:d7:75:8d:e2:be:2b:a8:b4:
         9b:5e:0c:01:5a:1f:91:78:c7:42:f6:ad:91:62:19:32:82:88:
         2d:2e:87:ec:e3:ea:51:5f:40:00:1c:0b:af:b5:fd:f0:73:42:
         04:fc:7d:4d:82:09:ef:c1:18:eb:70:c8:3b:65:4d:0b:01:5b:
         f8:1b:d8:ba:c6:78:92:b6:0f:af:34:1f:0d:af:10:6a:b1:a4:
         75:4a:7f:82:75:17:2a:cb:c4:6f:bf:de:49:c7:b7:94:b7:d7:
         37:82:40:b7:6f:04:4f:34:d7:fa:32:81:2a:81:cc:fd:79:be:
         d9:9b:da:9f:55:db:21:c0:dc:6a:68:24:ef:2f:d2:73:6f:d0:
         c1:81:f3:5c:53:17:a7:2c:c8:ab:d7:ec:42:cb:5f:83:a2:ea:
         a1:67:01:35:66:4d:71:9c:c0:3a:32:f1:66:ce:af:dd:f7:73:
         60:0a:13:21:4b:12:2c:1d:3e:59:54:85:41:e8:ea:91:63:c8:
         50:ef:33:da:16:3f:7c:18:e0:fd:7c:84:ad:44:c0:19:9a:dc:
         48:eb:23:da:e8:cc:b0:61:03:2d:05:47:3c:e5:f3:89:7f:a8:
         5b:d8:72:76:bf:9f:82:ae:69:33:c0:33:0c:40:48:13:6d:b4:
         14:33:25:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 08:24:22 2025 by rpki-client