Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/0f86aeab-03dd-33f1-9568-2b2ad2262f1e.roa
File:                     0f86aeab-03dd-33f1-9568-2b2ad2262f1e.roa (raw, json)
Hash identifier:          EgNVZH3D4yfw8W5+JcjVKVQ+SvqDk3q+orwz/+udYSo=
Subject key identifier:   1F:C2:E8:51:27:30:67:0F:A6:7E:E0:C8:CC:A8:42:F8:71:BC:59:58
Certificate issuer:       /CN=88390227-7474-42cc-ab77-86c936657096
Certificate serial:       010D0C9F4328584AADF0F68AE29A8CBC51539900
Authority key identifier: 2A:C4:61:4D:D3:E3:D7:37:5E:4A:B4:61:47:C4:FF:55:D8:49:D3:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/0f86aeab-03dd-33f1-9568-2b2ad2262f1e.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     14618
IP address blocks:        207.230.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/88390227-7474-42cc-ab77-86c936657096.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/88390227-7474-42cc-ab77-86c936657096.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 31 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f0:f6:8a:e2:9a:8c:bc:51:53:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88390227-7474-42cc-ab77-86c936657096
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=733f4fde-dd35-4334-a2ab-3be969e0fc39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:34:e6:44:19:48:ad:a5:46:cf:a2:b2:c2:5a:
                    06:f1:1b:c5:ef:f7:70:f9:68:64:ba:6a:d4:06:cb:
                    4d:6d:3b:a8:8e:58:27:d3:c4:0a:c0:7c:5e:94:92:
                    5d:e5:c1:0f:89:4f:c9:e4:c5:cc:6b:1a:c4:10:39:
                    0e:c9:d4:51:da:1e:c5:7c:b5:21:1b:e8:5e:dd:cc:
                    5e:8c:ba:de:02:3a:a2:e8:24:93:bc:a6:66:74:b6:
                    a1:ed:e5:4a:c7:34:a5:a3:b1:0d:ea:aa:3b:18:21:
                    7d:26:e1:57:10:fe:c1:6f:63:d2:7f:47:63:d7:53:
                    a3:f5:5c:be:80:2e:52:fb:42:32:f9:4b:aa:26:92:
                    61:1d:33:c2:e0:40:00:75:72:e2:ce:10:69:63:0c:
                    33:d3:50:0d:48:f4:03:79:53:8b:4e:00:76:d6:1e:
                    65:c0:19:47:1b:8c:4f:65:a8:1f:af:f5:c7:fe:0d:
                    14:a9:fa:89:e2:80:3c:3a:25:e6:47:cf:43:e1:37:
                    41:80:34:02:2c:32:a0:41:4b:e9:91:5b:22:a6:ba:
                    f2:4b:30:16:65:e1:12:d4:1b:d3:cf:ef:f3:5d:35:
                    79:12:3c:40:54:63:3f:b2:9d:66:37:24:4b:7f:74:
                    6a:df:a1:3b:c0:80:35:e2:5a:a6:c8:d3:ba:11:a7:
                    27:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:C2:E8:51:27:30:67:0F:A6:7E:E0:C8:CC:A8:42:F8:71:BC:59:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/0f86aeab-03dd-33f1-9568-2b2ad2262f1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/88390227-7474-42cc-ab77-86c936657096.crl

            X509v3 Authority Key Identifier:
                keyid:2A:C4:61:4D:D3:E3:D7:37:5E:4A:B4:61:47:C4:FF:55:D8:49:D3:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.230.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:4b:cf:ca:07:95:12:1e:49:f2:57:97:60:b4:42:6c:1f:d6:
         43:18:ea:90:40:68:42:1c:46:d5:33:04:a0:19:c9:95:83:af:
         8d:1d:bd:da:bc:0e:73:0a:84:8d:08:2f:5d:88:17:b8:ee:33:
         fe:b9:f4:33:56:e2:6c:b2:4a:9d:ec:34:0c:3a:e3:a4:53:74:
         56:63:2a:fe:dd:a5:2a:37:88:34:27:ff:5c:cf:3c:a3:ce:44:
         ed:22:17:b3:d4:95:ba:2a:41:75:63:0b:19:37:54:70:4e:21:
         46:83:aa:8a:ec:85:33:88:46:02:51:95:b6:82:25:be:9f:c5:
         67:df:55:4b:a6:4a:2a:92:f8:80:c8:5a:6f:51:a3:06:c5:d7:
         c5:49:d8:f7:53:07:e7:99:b8:82:24:31:7b:86:db:90:02:47:
         4a:42:85:04:45:5c:1b:ec:e6:39:c9:5a:49:bf:a2:1b:f0:4f:
         ff:86:69:44:3a:27:88:e5:f1:02:c2:07:b6:2d:1f:a9:f9:b4:
         54:2d:cc:a2:e7:f1:fe:e2:12:21:bc:18:b8:47:c7:8f:eb:67:
         1b:2d:27:3b:1f:00:fe:2b:a2:d8:bf:28:ee:b5:ee:7f:35:73:
         74:35:b1:e4:b1:f5:8c:f3:54:27:80:ae:b7:51:c1:2f:be:2f:
         11:6a:d6:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 05:55:19 2025 by rpki-client