Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/3c26cf5d-60fe-3bf3-a920-55747c112ac3.roa
File:                     3c26cf5d-60fe-3bf3-a920-55747c112ac3.roa (raw, json)
Hash identifier:          8nE5ixFu9Y76v+G+R/GqahBqIBIXpBnjzrYexzy+TLg=
Subject key identifier:   B9:DA:3E:41:BB:62:27:95:64:65:5D:A1:3D:F0:FD:76:35:43:31:44
Certificate issuer:       /CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae
Certificate serial:       010D0C9F4328584DF640A61F343DB5F28AB2A700
Authority key identifier: 8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/3c26cf5d-60fe-3bf3-a920-55747c112ac3.roa
Signing time:             Tue 26 May 2026 13:00:31 +0000
ROA not before:           Tue 26 May 2026 13:00:31 +0000
ROA not after:            Mon 24 Aug 2026 13:00:31 +0000
asID:                     398414
IP address blocks:        107.191.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f6:40:a6:1f:34:3d:b5:f2:8a:b2:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae
        Validity
            Not Before: May 26 13:00:31 2026 GMT
            Not After : Aug 24 13:00:31 2026 GMT
        Subject: CN=3b53f4e5-7c5e-4734-ac68-47bd795174ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b4:7f:46:bd:51:4e:65:fb:55:09:74:e3:66:
                    91:89:dc:78:2e:58:64:89:58:66:24:b3:f3:07:61:
                    61:09:2c:30:08:a8:5c:2e:8d:9a:03:59:d7:35:2b:
                    3c:cd:84:54:89:ff:7e:f3:3b:a9:ba:2a:b9:eb:53:
                    2d:5d:03:17:12:23:02:b5:0d:dd:2a:ed:c7:de:7b:
                    c7:40:e0:d2:44:9b:c6:a9:dd:9a:ee:4c:9f:3a:5c:
                    9f:80:e1:37:d5:a5:46:80:36:a8:32:3d:66:88:2c:
                    35:48:c8:34:c1:b2:6b:0e:89:a1:f3:8a:a0:d0:45:
                    c3:3c:1c:0b:31:11:80:44:05:10:cc:8c:35:24:30:
                    ce:7e:91:e7:c6:b7:d8:72:08:9c:11:d5:6c:6c:a1:
                    a6:4f:3e:2a:44:18:a1:39:7c:09:09:12:89:bf:7e:
                    63:e3:fb:c5:d5:ba:81:98:a8:78:c9:85:61:f8:72:
                    ac:a8:f1:49:15:3d:10:29:51:5c:6a:d2:68:d3:18:
                    d0:48:aa:ff:8e:c7:92:9a:34:6c:1f:f8:0a:10:9c:
                    15:25:a2:46:66:fe:76:17:3d:03:38:eb:2a:b9:07:
                    57:8a:e9:ba:fe:7d:e6:4c:03:56:6e:5e:ea:82:60:
                    f5:eb:58:75:d9:c4:6e:61:aa:4f:f7:9b:c2:75:c4:
                    d1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:DA:3E:41:BB:62:27:95:64:65:5D:A1:3D:F0:FD:76:35:43:31:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/3c26cf5d-60fe-3bf3-a920-55747c112ac3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl

            X509v3 Authority Key Identifier:
                keyid:8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.191.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:13:a0:82:ef:1e:5f:e5:a4:bb:de:0f:50:f8:47:ec:5f:93:
         59:f0:e7:99:77:28:e5:35:76:69:b6:9d:d4:ff:9d:46:25:70:
         37:10:16:4b:72:a5:db:31:71:04:18:d8:fc:89:46:c6:59:ae:
         3a:1e:ef:15:c6:3f:a3:35:f8:57:c2:ce:ff:06:2f:65:b1:66:
         a6:fe:9d:64:ea:40:2b:03:5c:02:d1:c9:db:83:bf:df:f4:42:
         7f:50:84:d5:23:f2:f3:61:6a:70:3a:cd:93:f1:85:b6:78:8b:
         d0:a1:16:b6:d0:4d:f2:fe:db:ab:b8:c6:9c:f1:c8:14:d0:92:
         ce:cc:5e:ad:c1:b7:45:ff:56:e0:bd:7d:1a:e4:a8:18:c1:c4:
         59:f8:9a:90:06:e9:da:8c:e7:e6:ad:3c:95:0b:dd:4f:58:58:
         2f:53:15:2c:94:47:4d:9c:bf:f9:dc:0a:ed:92:ba:c6:f5:e1:
         e3:a0:f2:23:37:7c:2c:c7:d0:6f:64:5a:67:57:dc:6f:42:bd:
         15:14:0a:5f:13:b0:6a:a8:53:17:94:b5:30:19:d4:0a:e3:18:
         48:8a:ad:93:f2:ab:1b:34:8f:95:bc:91:0d:78:c2:2b:92:39:
         2e:36:62:d6:76:0c:b7:be:6e:2e:72:b1:1b:c4:8e:e7:5f:a4:
         ed:48:da:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 03:29:12 2026 by rpki-client