Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb/d8007fd6-d1cd-325d-b7d8-ba89b8bb17f5.roa
File:                     d8007fd6-d1cd-325d-b7d8-ba89b8bb17f5.roa (raw, json)
Hash identifier:          GPxVoHB487KJC8Y/DjdmRoR7qkRp9/CGlnGUiiDpu14=
Subject key identifier:   AA:F1:DC:98:B8:50:9C:57:F7:BB:99:F4:2F:F8:FB:B0:DF:30:4C:08
Certificate issuer:       /CN=2c2b1124-f433-4440-b52c-8f0b5650e2bb
Certificate serial:       010D0C9F4328584B41E70954125A0ACFE0EB7000
Authority key identifier: 5F:EE:E2:BF:7F:FE:5E:32:1F:29:95:6C:7D:EC:5D:BE:2E:21:D0:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb/d8007fd6-d1cd-325d-b7d8-ba89b8bb17f5.roa
Signing time:             Sat 20 Sep 2025 13:00:41 +0000
ROA not before:           Sat 20 Sep 2025 13:00:41 +0000
ROA not after:            Fri 19 Dec 2025 14:00:41 +0000
asID:                     13875
IP address blocks:        207.228.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb/2c2b1124-f433-4440-b52c-8f0b5650e2bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb/2c2b1124-f433-4440-b52c-8f0b5650e2bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:41:e7:09:54:12:5a:0a:cf:e0:eb:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c2b1124-f433-4440-b52c-8f0b5650e2bb
        Validity
            Not Before: Sep 20 13:00:41 2025 GMT
            Not After : Dec 19 14:00:41 2025 GMT
        Subject: CN=11d527f0-9482-4f46-b78d-1748161b35ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:7f:e3:82:7c:a9:0f:c3:84:f8:a9:e4:ba:3a:
                    9f:e2:dc:17:8a:81:51:f5:91:ad:3b:40:0a:e3:dc:
                    84:fe:27:27:8d:25:ca:02:95:77:38:54:a9:6b:65:
                    40:85:f9:d4:ed:c5:97:ba:7b:64:ca:f6:7e:d8:24:
                    61:2c:cb:44:a5:f6:85:04:f6:e3:90:dd:f5:91:5f:
                    db:79:db:c7:79:76:9d:56:4e:ff:d0:34:ef:a0:94:
                    df:9a:56:a3:93:a9:62:27:37:eb:3d:dc:8b:4a:7f:
                    aa:90:a3:31:ba:6e:71:84:fd:27:d7:54:c5:de:10:
                    ad:4d:09:3f:e3:76:58:2e:de:67:92:5b:d1:b3:1c:
                    b6:b7:3a:ed:a4:9d:cf:4e:8b:9d:3b:56:a2:aa:0a:
                    75:bd:34:c5:76:c4:2f:c7:81:44:48:87:99:39:a9:
                    c7:8e:b9:b5:e7:f6:c3:98:db:6a:e7:f6:24:38:ce:
                    c8:04:1f:a4:c9:b3:0d:aa:f2:93:dd:ac:c5:6f:15:
                    45:98:7b:6c:15:8e:ba:32:cc:b0:e0:1e:bf:13:41:
                    8c:b1:9a:6e:7e:0d:0c:b2:0d:9a:30:c3:d5:3c:38:
                    02:5e:f0:ab:4c:0c:52:bd:57:8f:fd:09:28:3d:b5:
                    77:c0:89:f9:84:ba:de:aa:ef:a6:8f:7b:05:15:e1:
                    b5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:F1:DC:98:B8:50:9C:57:F7:BB:99:F4:2F:F8:FB:B0:DF:30:4C:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb/d8007fd6-d1cd-325d-b7d8-ba89b8bb17f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb/2c2b1124-f433-4440-b52c-8f0b5650e2bb.crl

            X509v3 Authority Key Identifier:
                keyid:5F:EE:E2:BF:7F:FE:5E:32:1F:29:95:6C:7D:EC:5D:BE:2E:21:D0:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.228.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:82:45:2c:66:c2:8f:75:de:19:c3:21:16:7e:51:95:fe:87:
         84:f5:84:0e:5f:eb:85:d6:8a:c2:d3:d0:99:b0:50:bc:79:5e:
         73:42:18:0e:44:a2:29:a6:38:ce:87:0e:19:ca:5d:a2:d1:ca:
         a4:10:39:56:17:00:38:73:78:ce:a6:b2:71:94:d8:30:48:94:
         88:85:28:b8:5b:10:c4:39:00:cf:ef:7e:5d:8a:9e:a8:1c:6b:
         6f:fd:41:eb:4c:ab:24:7c:63:8b:9f:cc:60:dc:ab:1a:f7:a8:
         63:4b:eb:ae:86:eb:2d:34:37:a5:07:20:26:84:bc:f7:75:da:
         1e:7c:9b:9c:09:dd:4e:f3:f0:a5:4b:90:8b:00:f0:25:94:41:
         13:a2:ea:dc:42:4c:d9:bf:3b:7c:e6:aa:18:be:cc:bb:db:16:
         7a:48:98:52:06:32:e7:14:06:90:c1:65:d3:c1:62:77:44:19:
         4b:5d:e2:b4:c9:16:e8:e5:8c:7f:56:e1:9c:4c:f6:67:38:3b:
         39:f9:7c:6e:5c:e0:f8:b3:25:2d:7a:94:a7:0b:0d:cb:e9:ca:
         f2:21:cc:d6:9b:0d:3d:db:f5:8f:da:01:83:3b:39:da:ff:61:
         bb:49:45:f7:ab:f1:34:7d:3f:ab:d9:38:9b:8d:30:cc:bc:d2:
         a3:03:fd:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 19:54:55 2025 by rpki-client