Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/e7ee6420-4b9a-3570-94a6-f16a25260505.roa
File:                     e7ee6420-4b9a-3570-94a6-f16a25260505.roa (raw, json)
Hash identifier:          p3dJSKWBacg13HxzkpB21Qs+FBMX5UVx4TdITPCuowQ=
Subject key identifier:   68:7C:27:BC:22:5B:07:AD:DD:E7:CB:BD:A8:0D:0F:DB:CA:33:CB:23
Certificate issuer:       /CN=88390227-7474-42cc-ab77-86c936657096
Certificate serial:       010D0C9F4328584AADF0F9AC1402B4229EC85D80
Authority key identifier: 2A:C4:61:4D:D3:E3:D7:37:5E:4A:B4:61:47:C4:FF:55:D8:49:D3:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/e7ee6420-4b9a-3570-94a6-f16a25260505.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     17157
IP address blocks:        207.230.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/88390227-7474-42cc-ab77-86c936657096.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/88390227-7474-42cc-ab77-86c936657096.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 31 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f0:f9:ac:14:02:b4:22:9e:c8:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88390227-7474-42cc-ab77-86c936657096
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=20b8e011-ff82-406b-9dcc-8f84e3c44f9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9e:f3:e6:3e:60:fe:f1:2d:57:0a:18:39:55:
                    a7:51:de:c2:da:c5:27:20:7c:b4:02:70:57:33:78:
                    d7:e9:28:2b:a4:2b:3d:55:40:d8:48:2e:77:d4:c3:
                    19:52:e0:67:3b:9e:1b:55:fe:9d:d5:00:23:84:a5:
                    79:31:ed:cc:5b:39:20:93:54:bf:76:69:5f:56:9b:
                    92:e9:a6:d3:97:79:bd:49:4c:88:32:03:44:e7:1a:
                    f0:67:5f:76:9e:c0:0b:ca:e4:11:9f:c1:f8:95:d5:
                    49:cd:13:28:be:d9:1c:19:c5:23:af:3d:ea:fb:3b:
                    d3:51:f4:87:3c:c7:fe:f4:5b:72:66:86:2f:81:48:
                    dc:8c:0e:eb:e7:dc:8c:25:3a:c3:64:7c:b2:5b:23:
                    d0:5d:99:62:ee:ae:e1:04:43:03:5b:e5:b6:62:46:
                    e9:72:8a:d3:12:c4:fc:b5:ba:9b:71:9f:ec:76:8d:
                    2c:3f:4d:eb:2b:bf:04:cf:25:ab:52:db:3b:9c:a5:
                    7f:8b:a9:68:ca:33:8a:44:c1:4d:97:bd:0e:36:62:
                    3a:0c:ac:3c:e8:33:ff:c5:80:1d:f8:d0:61:65:3f:
                    73:65:9d:15:05:29:54:26:3e:49:35:ab:4c:0f:5e:
                    14:07:77:ea:f1:7f:42:d5:a9:a0:cd:1d:99:1b:ab:
                    48:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:7C:27:BC:22:5B:07:AD:DD:E7:CB:BD:A8:0D:0F:DB:CA:33:CB:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/e7ee6420-4b9a-3570-94a6-f16a25260505.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/88390227-7474-42cc-ab77-86c936657096.crl

            X509v3 Authority Key Identifier:
                keyid:2A:C4:61:4D:D3:E3:D7:37:5E:4A:B4:61:47:C4:FF:55:D8:49:D3:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.230.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:99:be:74:b5:79:08:16:93:f4:4c:03:3e:5d:b4:71:4f:7d:
         20:67:11:d8:05:d0:e8:3d:57:62:73:a5:aa:00:c8:83:2c:3a:
         ad:6f:a2:b7:7b:b7:e1:09:5e:8d:92:a8:0d:dc:b5:d7:76:03:
         18:b6:6b:30:fa:bc:2a:50:5c:66:04:a0:10:9c:f8:93:19:4d:
         b5:8f:58:05:84:51:02:a9:0a:96:d7:76:bf:72:f2:57:9f:4c:
         8a:79:f0:78:28:cb:c8:30:e2:0e:1e:73:be:35:59:90:eb:94:
         fe:3a:c9:ac:b2:b3:0a:06:c3:d1:0a:ef:a9:1d:6f:bc:4d:32:
         12:25:d4:8b:c6:22:39:0f:03:b9:1d:5c:f7:b2:c2:03:d8:5e:
         32:bc:07:9b:d1:42:28:d3:fa:80:25:24:5c:68:c9:52:18:7c:
         4d:8d:b9:a8:61:d5:64:3c:70:0e:e9:cc:32:f9:40:be:a2:90:
         4e:f5:de:47:b3:bf:1f:f9:c3:84:17:ca:46:75:d3:05:b5:f0:
         ec:a3:c7:3d:b8:c1:21:83:0a:c6:a1:38:95:a2:55:e9:80:26:
         2f:e8:fc:3d:9f:bc:10:32:3a:57:fd:d8:84:c2:4b:51:78:c6:
         bb:24:d8:b0:6e:05:d6:76:ed:7a:87:19:41:4e:be:08:9e:51:
         b7:34:a1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 19:02:29 2025 by rpki-client