Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b8f232e3-9bf8-38bf-9a45-efbc1cbcfe26.roa
File:                     b8f232e3-9bf8-38bf-9a45-efbc1cbcfe26.roa (raw, json)
Hash identifier:          7Yu43C3BMTWkHVjlZegLn6ostbhX+ekGxkEuhAn6gUE=
Subject key identifier:   A9:2F:6C:C3:03:31:3A:64:F0:3C:1C:16:EA:2D:F8:8B:4B:E4:E0:FD
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584B3126F5ADA7299418A72E0500
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b8f232e3-9bf8-38bf-9a45-efbc1cbcfe26.roa
Signing time:             Sun 14 Sep 2025 13:00:42 +0000
ROA not before:           Sun 14 Sep 2025 13:00:42 +0000
ROA not after:            Sat 13 Dec 2025 14:00:42 +0000
asID:                     174
IP address blocks:        207.230.3.0/24 maxlen: 24
                          207.230.6.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:31:26:f5:ad:a7:29:94:18:a7:2e:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep 14 13:00:42 2025 GMT
            Not After : Dec 13 14:00:42 2025 GMT
        Subject: CN=241fe345-e90e-4c3b-bb39-7877d7ef14b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d4:72:25:ae:0e:d2:d7:f6:a7:99:58:96:c4:
                    61:62:fe:73:20:d7:fc:1d:0b:74:32:09:27:61:9a:
                    e6:66:f6:23:30:4f:66:52:19:5a:2e:e3:e6:6f:83:
                    32:f4:56:5b:b4:96:97:22:8f:18:ca:92:e4:5d:ce:
                    05:d1:3f:79:1e:76:fb:18:63:e3:09:2f:6a:49:24:
                    35:5a:fb:ef:ee:0b:11:90:a6:35:e9:22:0a:0d:d4:
                    f7:d3:d0:6e:05:ae:4c:df:0b:3c:33:46:be:28:2b:
                    52:90:43:6b:e6:9b:11:a8:37:60:bd:28:d2:af:e5:
                    a5:fd:12:d4:32:e7:89:e2:ba:34:08:52:8f:87:10:
                    23:8f:57:6c:d6:fe:96:fe:2b:a5:0f:fd:da:e3:46:
                    a8:22:e0:3f:dc:ea:81:7f:3d:96:e0:36:80:30:90:
                    44:44:95:71:4c:bb:c6:a7:e0:00:ff:e0:af:de:61:
                    22:95:41:a5:95:eb:49:de:f4:c5:da:1e:ba:86:ff:
                    43:d4:11:97:70:4b:3a:16:b0:9b:e3:48:f2:62:b8:
                    4e:2b:c6:13:eb:20:e3:8e:7a:99:6e:c8:ae:d5:6d:
                    1b:12:6e:18:fc:58:bc:c5:8a:34:99:57:7a:10:b3:
                    d3:7b:9f:64:7f:e6:27:e0:7a:90:cd:92:29:14:84:
                    56:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:2F:6C:C3:03:31:3A:64:F0:3C:1C:16:EA:2D:F8:8B:4B:E4:E0:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b8f232e3-9bf8-38bf-9a45-efbc1cbcfe26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.230.3.0/24
                  207.230.6.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:21:b4:e2:c5:96:cf:17:de:3d:2e:c2:c7:f8:2b:55:21:ba:
         fd:1d:c7:24:0b:ea:3c:ad:1b:93:35:dc:89:e3:f8:55:f9:44:
         fc:f4:23:33:34:af:e8:ae:71:42:43:93:b7:8a:c0:c5:4d:4a:
         18:5f:10:33:1f:d1:fc:2b:07:db:ac:05:3e:f0:3b:76:f2:d3:
         02:e7:1f:62:e7:63:4d:73:2e:3a:f4:89:e1:9d:c6:94:04:e1:
         74:03:d3:6b:bd:46:a9:8d:d6:e2:c9:19:e7:24:c8:07:ec:2c:
         54:f8:8e:8f:bb:af:a0:94:8c:52:8e:3f:92:c4:43:10:65:25:
         02:b4:8a:ca:95:34:d9:47:d9:a3:3c:f1:9b:b6:98:b3:f6:07:
         89:9e:97:60:ec:54:52:ca:56:cb:a4:bf:50:7e:49:71:c6:51:
         93:e4:7c:14:8b:ac:1c:f5:1c:84:84:24:2a:5d:1e:9e:9b:ed:
         d3:f7:8b:45:b0:b0:80:dc:ce:61:b2:99:44:e6:89:77:c7:33:
         ff:97:ee:68:f9:28:cb:52:36:39:bb:b2:ec:fd:98:8c:e8:0f:
         2a:51:77:1a:80:78:91:9c:48:9b:72:11:f8:a7:6d:50:a3:19:
         d6:0e:47:88:b0:6d:94:02:b3:10:08:f6:19:8c:f0:55:da:18:
         ef:45:2c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 12:15:03 2025 by rpki-client