Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/0799c6c3-fa33-38b0-85b7-253ce955c08d.roa
File:                     0799c6c3-fa33-38b0-85b7-253ce955c08d.roa (raw, json)
Hash identifier:          AtkG634RF2CK0snmHqPxWrYrNneAccRkRXEjxAWK+y0=
Subject key identifier:   39:C3:67:55:4D:38:AF:2D:31:3E:B7:4E:13:5F:C2:15:BE:F7:0E:5F
Certificate issuer:       /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
Certificate serial:       010D0C9F4328584ACE0B8EB70AADAE0941F82A80
Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/0799c6c3-fa33-38b0-85b7-253ce955c08d.roa
Signing time:             Sun 10 Aug 2025 01:00:32 +0000
ROA not before:           Sun 10 Aug 2025 01:00:32 +0000
ROA not after:            Sat 08 Nov 2025 02:00:32 +0000
asID:                     13807
IP address blocks:        97.107.198.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ce:0b:8e:b7:0a:ad:ae:09:41:f8:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
        Validity
            Not Before: Aug 10 01:00:32 2025 GMT
            Not After : Nov  8 02:00:32 2025 GMT
        Subject: CN=bada4217-9e02-4080-99c7-ed6412e80c51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:1a:2e:71:2f:d8:01:ed:29:44:67:36:2d:c8:
                    51:4e:ec:ef:9f:5a:c2:f7:fd:d6:77:8d:ba:1b:7f:
                    86:2c:b8:7d:88:9c:ac:4d:1d:ba:53:43:b6:24:df:
                    31:d3:3d:6a:d3:c6:0c:e7:b1:8c:33:60:83:3e:10:
                    48:3f:29:6d:74:8d:71:da:90:f7:27:8a:50:08:1c:
                    64:6d:26:f5:a5:2c:df:46:bb:74:68:9f:e1:b3:66:
                    b9:58:72:bb:4e:6b:f4:d7:fe:62:03:18:5b:c5:f5:
                    a9:4e:e6:66:a0:45:6f:58:ef:3f:5d:a0:e4:67:b0:
                    8b:08:c2:80:df:96:d8:4b:59:97:df:13:50:2d:89:
                    3b:88:be:c9:21:f6:84:08:f1:53:72:78:b4:c5:2e:
                    79:83:19:89:0d:68:55:86:c9:57:57:d7:6e:a4:97:
                    76:b5:13:7a:e6:d6:54:ee:1e:8e:05:17:f7:12:89:
                    05:54:74:74:85:c7:d5:cc:fe:9d:cf:97:61:8c:c0:
                    01:6a:d1:43:2f:b1:f8:5e:5f:c3:26:70:42:6c:0c:
                    d9:02:55:84:21:45:40:e0:f0:5c:f5:d9:7a:9c:db:
                    96:f9:ed:ef:3b:3e:4e:28:4d:cb:1f:8d:b6:45:c5:
                    c9:7c:ff:fb:ae:c4:d7:f9:08:bf:d1:01:36:d9:27:
                    5d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:C3:67:55:4D:38:AF:2D:31:3E:B7:4E:13:5F:C2:15:BE:F7:0E:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/0799c6c3-fa33-38b0-85b7-253ce955c08d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl

            X509v3 Authority Key Identifier:
                keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.107.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:66:a3:2d:a4:8b:d1:2b:a8:5d:52:12:96:44:a6:c5:f6:23:
         20:57:3b:27:61:ab:40:13:0e:1f:76:ce:5d:7a:03:7d:cf:67:
         d5:61:a6:ab:0d:25:de:c3:dd:81:c6:e6:70:5f:d6:a4:6c:af:
         2f:90:9d:5e:28:78:80:41:6c:bf:5e:f2:f6:35:f0:cc:bd:a0:
         96:af:1d:b1:d8:82:f6:f4:b8:3f:5c:07:eb:44:cd:09:44:5a:
         04:7d:5d:bc:dd:63:7c:20:4d:b7:f9:12:71:a8:a4:82:bf:84:
         d1:86:f1:7d:83:57:09:02:2e:02:2e:07:07:46:57:0e:2f:af:
         f2:1b:ba:7b:45:6f:25:a9:70:f5:4f:e6:9d:31:76:68:5c:6e:
         20:5b:8c:a4:65:67:99:6e:d9:5d:53:dc:cf:bc:4f:ed:fc:69:
         d3:47:53:b4:89:c7:b3:17:5c:ae:7d:24:af:91:76:94:3f:fa:
         d2:37:70:fd:d0:46:d3:dc:e9:21:0c:4a:c0:8b:02:5f:5f:c5:
         4a:3b:12:32:0a:b8:ff:aa:1d:72:2b:a3:50:07:13:3b:da:29:
         b4:3b:bc:ad:e3:9f:b2:a1:8d:2f:de:f4:91:60:06:e5:bc:c6:
         08:f3:8a:32:09:05:c5:f0:2d:8a:57:2b:0d:cc:6f:13:cc:c5:
         5c:47:89:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 04:58:43 2025 by rpki-client