Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb/9897f656-b344-3323-a5ea-830b11fb1410.roa
File:                     9897f656-b344-3323-a5ea-830b11fb1410.roa (raw, json)
Hash identifier:          fK4iakVAVY9WLlikJiCf2Vex2ca4c9bwa49tU4T8v7o=
Subject key identifier:   D9:D4:3C:E6:CF:BB:FB:04:01:AF:0A:81:0E:84:8F:E4:29:79:02:B9
Certificate issuer:       /CN=2c2b1124-f433-4440-b52c-8f0b5650e2bb
Certificate serial:       010D0C9F4328584B41E720B9C0E9BADB2F938240
Authority key identifier: 5F:EE:E2:BF:7F:FE:5E:32:1F:29:95:6C:7D:EC:5D:BE:2E:21:D0:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb/9897f656-b344-3323-a5ea-830b11fb1410.roa
Signing time:             Sat 20 Sep 2025 13:00:41 +0000
ROA not before:           Sat 20 Sep 2025 13:00:41 +0000
ROA not after:            Fri 19 Dec 2025 14:00:41 +0000
asID:                     13875
IP address blocks:        207.228.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb/2c2b1124-f433-4440-b52c-8f0b5650e2bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb/2c2b1124-f433-4440-b52c-8f0b5650e2bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:41:e7:20:b9:c0:e9:ba:db:2f:93:82:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c2b1124-f433-4440-b52c-8f0b5650e2bb
        Validity
            Not Before: Sep 20 13:00:41 2025 GMT
            Not After : Dec 19 14:00:41 2025 GMT
        Subject: CN=900cc39f-aec1-41cd-91ef-84895613b3f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b8:50:7e:e2:fe:63:6e:78:1c:c6:5d:c8:15:
                    09:08:69:d7:0b:fe:2c:3b:5f:93:c6:9a:8c:0a:24:
                    a0:d2:67:21:92:42:6a:c6:07:7b:ba:bc:a8:34:2e:
                    d1:a9:4c:e6:12:b7:2d:c8:a3:81:9e:9e:af:ba:93:
                    a5:3c:de:74:d2:bf:44:0b:62:38:03:aa:3e:8e:ce:
                    99:8a:1a:b7:4c:cc:80:e7:c8:02:80:7f:00:4a:0e:
                    f7:7a:64:95:a8:2a:7b:29:26:52:99:4b:df:a0:e5:
                    81:8f:84:30:e6:b5:f3:f6:64:3a:5d:f0:69:f8:3b:
                    06:0b:43:e2:8f:27:5c:d8:03:fb:3e:79:50:90:54:
                    a0:c4:89:9a:70:c9:6c:23:53:be:fa:df:04:9c:3e:
                    5e:60:eb:3f:4c:a6:e1:09:65:e6:90:69:37:b9:1e:
                    13:fd:77:51:4a:7a:d6:98:bb:0f:43:60:4b:01:6c:
                    bc:e1:aa:c3:48:a6:50:e3:ef:ed:dc:a2:96:21:79:
                    ed:ee:7e:fe:e8:0a:e6:55:57:85:1d:ca:dd:7d:25:
                    85:c3:d6:8d:1b:34:41:26:99:93:54:72:c0:17:07:
                    f0:24:61:65:98:8c:41:0e:e4:18:c6:dd:2c:72:6a:
                    0d:8a:91:3f:ba:1a:d9:7e:88:a9:f4:ac:a8:d1:ae:
                    65:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:D4:3C:E6:CF:BB:FB:04:01:AF:0A:81:0E:84:8F:E4:29:79:02:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb/9897f656-b344-3323-a5ea-830b11fb1410.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb/2c2b1124-f433-4440-b52c-8f0b5650e2bb.crl

            X509v3 Authority Key Identifier:
                keyid:5F:EE:E2:BF:7F:FE:5E:32:1F:29:95:6C:7D:EC:5D:BE:2E:21:D0:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.228.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:78:13:4e:80:53:a9:5c:12:d8:e2:0c:5b:7c:74:87:20:11:
         03:a7:06:3f:bc:58:eb:3b:70:84:5f:36:e7:f7:bc:47:0c:f8:
         8f:2d:36:02:60:ba:04:12:da:75:72:ae:cb:a2:65:c1:0a:15:
         7a:9c:78:53:e3:f5:a2:0b:0d:c5:ae:08:19:7d:ef:12:cd:e3:
         1d:6b:6b:43:ba:dc:88:93:77:46:d4:03:67:64:e0:39:91:5b:
         ec:1a:5b:1e:89:15:ce:d5:41:19:54:74:87:44:b7:8c:bf:6a:
         e5:8a:37:84:9e:55:33:fb:32:cf:99:a3:77:e4:4d:78:83:5d:
         f0:3d:fa:54:71:29:96:99:e6:a2:9d:a2:0d:86:c0:ca:d6:11:
         9c:56:e5:9d:0a:be:e8:60:dc:36:87:cc:6c:69:2e:9e:77:77:
         23:10:f4:09:1d:aa:df:e8:dc:b8:eb:6a:c4:96:8d:33:7c:96:
         9b:6d:31:fa:0a:f0:84:a1:08:de:4e:60:fa:0d:02:2d:3c:09:
         81:0b:ce:7b:03:09:b6:b9:fd:3a:c7:c2:b4:74:91:65:64:01:
         e8:db:38:47:8c:61:68:bc:73:94:3e:13:1c:de:de:df:f6:03:
         7e:cb:1c:25:59:86:25:24:2d:65:98:4f:22:c1:80:c1:b5:4f:
         c3:96:76:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 19:50:37 2025 by rpki-client