Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/3472bfab-8cba-3fda-b051-0fe32d29839a.roa
File:                     3472bfab-8cba-3fda-b051-0fe32d29839a.roa (raw, json)
Hash identifier:          SfP4LlsKDkaSAAlQBbJi6JoYymOD+/BNF05FwwkQy90=
Subject key identifier:   47:74:19:B2:74:80:D3:94:DF:56:D4:86:A4:BC:0A:48:C8:7B:73:08
Certificate issuer:       /CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Certificate serial:       010D0C9F4328584F7352E3E7BD0D272450AF2080
Authority key identifier: 2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/3472bfab-8cba-3fda-b051-0fe32d29839a.roa
Signing time:             Sat 10 Oct 2026 01:00:13 +0000
ROA not before:           Sat 10 Oct 2026 01:00:13 +0000
ROA not after:            Fri 08 Jan 2027 02:00:13 +0000
asID:                     62513
IP address blocks:        207.174.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:73:52:e3:e7:bd:0d:27:24:50:af:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
        Validity
            Not Before: Oct 10 01:00:13 2026 GMT
            Not After : Jan  8 02:00:13 2027 GMT
        Subject: CN=bba9aec3-8392-48b5-9275-a1cb730b058f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f2:53:c9:2f:06:ac:e5:71:40:e7:fd:ee:14:
                    0e:af:fb:b3:69:8b:1d:be:58:88:03:9b:5c:c6:ed:
                    12:aa:fe:60:4f:48:55:30:e9:4d:ba:2b:e7:87:a7:
                    ef:cb:10:71:e1:78:e9:fe:d6:2d:22:11:c1:4b:50:
                    cc:79:ad:2b:e0:35:58:5c:61:a5:74:fa:89:2a:43:
                    5d:cd:fa:43:0a:9a:f7:e9:f1:f1:5e:3a:c0:46:93:
                    d9:3c:3f:25:c4:79:15:da:c7:42:6b:3a:2c:8f:3b:
                    cc:c4:7c:b9:d3:13:29:4b:ee:bf:96:a9:b6:c1:48:
                    5b:84:c9:ad:42:ff:fb:a6:f5:6b:62:ed:4c:98:69:
                    5e:f2:34:8e:eb:9c:f7:cd:f8:bd:a7:9a:21:83:7f:
                    8f:71:92:59:35:e1:2e:a5:ae:de:b3:a9:62:40:f2:
                    01:1c:ca:49:c8:1a:6f:ce:eb:61:59:be:3b:7e:f3:
                    42:f6:bd:b4:2c:8f:b7:10:f3:cc:71:5f:89:16:8f:
                    6a:78:2f:cd:63:62:37:e4:c1:dd:53:93:02:7b:4d:
                    0d:34:86:a0:a1:66:8e:3e:01:3c:be:8b:99:32:25:
                    ed:1d:c8:27:b0:6c:9b:f9:42:eb:24:d8:a7:ff:c2:
                    f0:8d:12:c8:5b:d0:b1:5d:ee:f7:4c:66:03:e9:1f:
                    15:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:74:19:B2:74:80:D3:94:DF:56:D4:86:A4:BC:0A:48:C8:7B:73:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/3472bfab-8cba-3fda-b051-0fe32d29839a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl

            X509v3 Authority Key Identifier:
                keyid:2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.174.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:98:e2:0f:cb:2f:7a:6a:6e:2c:ea:5e:75:00:d2:79:53:48:
         71:8d:be:2b:b0:32:00:c7:5f:21:bf:a5:e4:21:b1:c1:64:54:
         b1:6f:e2:88:74:c6:e3:96:cb:ad:20:64:32:5a:f0:7e:d4:bd:
         7e:e1:5a:ee:cd:8b:43:2e:3b:f5:94:6f:28:39:5b:8b:c7:5b:
         cd:a0:fa:c6:eb:c2:32:7c:01:09:89:13:53:0f:90:b7:b7:99:
         56:33:fa:8a:b2:1b:b5:21:c2:2a:28:0f:0d:3e:d5:ea:1e:24:
         2a:ea:21:75:e1:f4:f7:e0:95:88:79:e6:5e:e1:96:84:8d:7e:
         a3:6f:8d:2f:f1:51:d8:7f:41:5e:6c:34:56:51:01:55:81:0d:
         5b:9a:6e:97:77:fc:3f:0d:85:4f:93:eb:52:02:f5:2a:a0:34:
         cf:6c:e8:f0:d4:ca:f2:18:6e:88:fd:bd:e8:d3:53:9a:84:65:
         8c:c6:94:5c:60:d3:86:ad:94:89:57:74:57:20:c7:ca:b2:e9:
         a0:f9:7d:57:c9:cd:f7:7f:18:0b:65:73:e4:d0:e8:74:a4:f5:
         fe:66:f1:93:9b:be:cb:84:ae:c7:03:79:91:d0:e4:51:97:e7:
         a3:e9:97:d3:eb:4d:8c:de:5d:e5:5b:aa:e7:b7:1f:e6:f3:94:
         3d:0f:8c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 16:08:17 2026 by rpki-client