Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/38788932-00ab-3089-9e2a-44887f398caf.roa
File:                     38788932-00ab-3089-9e2a-44887f398caf.roa (raw, json)
Hash identifier:          DhurK1R6dfX3AE13yNyYend+BPrVPCjZbqpUdadr4eE=
Subject key identifier:   41:9E:A2:D5:A9:F1:C5:90:CF:C7:69:BE:61:77:76:F8:F7:78:DF:3E
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584B25FC36EB1EDA66FDBD6F3DC0
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/38788932-00ab-3089-9e2a-44887f398caf.roa
Signing time:             Wed 10 Sep 2025 13:00:41 +0000
ROA not before:           Wed 10 Sep 2025 13:00:41 +0000
ROA not after:            Tue 09 Dec 2025 14:00:41 +0000
asID:                     271
IP address blocks:        207.23.88.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:25:fc:36:eb:1e:da:66:fd:bd:6f:3d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Sep 10 13:00:41 2025 GMT
            Not After : Dec  9 14:00:41 2025 GMT
        Subject: CN=f508145b-a420-4640-90e9-c988e19eb82e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:aa:3a:e3:15:e4:f9:2c:8c:fb:78:8d:d7:1d:
                    3e:f7:7c:c6:3e:d3:4c:b8:d3:30:64:51:16:84:e3:
                    7f:8f:e6:de:36:d3:32:d6:4e:df:5f:d9:64:2f:95:
                    10:f8:28:21:62:e4:77:d7:87:f8:7c:48:5e:dc:40:
                    64:6d:54:b2:51:f7:f7:57:e6:a2:cc:dd:03:aa:54:
                    22:eb:d7:fd:62:19:f1:e4:e0:c1:19:6a:e1:a4:5f:
                    36:e3:86:a9:2c:61:3d:f5:99:7d:cb:50:52:2f:cb:
                    fb:6f:5e:fb:cb:1d:b1:f6:a3:c0:71:fa:44:3c:a2:
                    7e:ec:c3:51:40:14:14:4b:4f:20:04:a1:0c:1b:20:
                    fd:1c:02:6c:96:c6:aa:96:4c:2a:45:95:95:7f:37:
                    0b:08:43:eb:4d:7e:03:fd:ae:d6:c2:45:ce:81:84:
                    a6:36:6f:f3:6d:83:d1:16:67:bb:0e:34:e8:8c:fe:
                    84:e7:3a:7e:64:51:f0:5f:f0:29:98:d8:02:4b:74:
                    c5:96:bc:9a:b5:48:fa:69:78:d8:c6:69:95:33:ed:
                    2b:14:a5:18:24:04:53:97:79:76:88:28:f5:ae:90:
                    20:50:b6:7a:8f:6a:04:11:7d:52:f4:b1:c2:af:8e:
                    a4:a4:4f:db:e8:8e:27:3d:b7:a8:d2:15:2c:b6:ae:
                    b4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:9E:A2:D5:A9:F1:C5:90:CF:C7:69:BE:61:77:76:F8:F7:78:DF:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/38788932-00ab-3089-9e2a-44887f398caf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.23.88.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:3d:1e:00:6d:61:2d:59:07:50:2f:aa:67:ad:02:15:f9:b3:
         eb:04:c2:64:93:8c:48:5e:1c:4a:74:7a:af:45:cd:3c:80:dd:
         79:df:b3:7e:e4:c3:80:e4:dd:98:5f:76:8c:68:76:ff:47:a0:
         db:e3:30:10:72:cd:a3:3b:1d:38:61:10:a9:c5:d8:26:0e:4e:
         72:40:04:ae:da:c8:c9:63:4c:a3:f5:97:f7:40:e9:00:3e:ca:
         42:9f:b5:9c:25:9b:0b:b7:14:cf:3a:e0:94:13:78:a8:c7:b4:
         d8:1e:95:8d:3b:a2:57:78:b7:01:5b:3b:40:be:90:82:8d:6c:
         0f:fa:78:30:42:c9:c3:73:4a:d8:60:a7:16:3c:99:8b:28:47:
         47:82:ad:62:78:0d:57:25:ba:d6:fc:19:11:6e:f3:4c:9b:32:
         89:b1:a6:ce:a6:da:0f:ee:78:27:b2:a0:09:10:95:f6:6b:37:
         99:f3:3e:9e:33:91:7c:d5:e9:68:1c:81:fc:b9:5a:66:8d:a5:
         02:0c:98:23:29:0c:e7:4f:ed:47:ad:83:b7:83:04:ab:6f:2c:
         5b:84:0d:ae:46:5f:24:33:3c:94:a3:1c:82:a4:6d:d8:6f:30:
         56:99:5a:c5:72:ec:fa:ce:0b:9a:aa:e2:d1:64:3f:45:46:96:
         8b:1b:2b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:53:28 2025 by rpki-client