Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/f021a27e-0d4a-372f-b416-5534c39efebb.roa
File:                     f021a27e-0d4a-372f-b416-5534c39efebb.roa (raw, json)
Hash identifier:          NZ63uA2cmmK1pSe9G7UxVuf80FbX/4uSbDiyV9W7cI4=
Subject key identifier:   17:99:20:AA:87:EE:C3:9A:48:29:0B:B4:B3:93:09:FE:D1:24:EB:8D
Certificate issuer:       /CN=88390227-7474-42cc-ab77-86c936657096
Certificate serial:       010D0C9F4328584AADF0F62A62A6A47B8625B800
Authority key identifier: 2A:C4:61:4D:D3:E3:D7:37:5E:4A:B4:61:47:C4:FF:55:D8:49:D3:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/f021a27e-0d4a-372f-b416-5534c39efebb.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     14618
IP address blocks:        207.230.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/88390227-7474-42cc-ab77-86c936657096.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/88390227-7474-42cc-ab77-86c936657096.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 31 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f0:f6:2a:62:a6:a4:7b:86:25:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88390227-7474-42cc-ab77-86c936657096
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=9d97bfd9-9947-42af-b2cf-ce034313cbb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:21:2c:92:5c:b4:48:d6:af:43:0c:1c:3f:d4:
                    d5:89:6b:c0:e7:49:a6:c5:56:00:fb:69:eb:6a:5e:
                    55:51:99:e8:d4:4d:90:f9:01:36:b7:6d:e5:41:5a:
                    81:ae:b9:99:19:44:6a:11:c3:02:68:52:64:c1:0c:
                    d4:2e:00:c1:b1:3d:f3:22:dc:55:d9:5e:32:fb:4f:
                    b4:b1:d7:f7:a9:ea:29:57:15:50:01:2d:57:cc:b5:
                    96:a2:a0:26:1b:9b:db:c4:fc:d6:30:a8:08:7b:76:
                    04:a2:73:90:1b:36:94:18:9d:52:76:68:a4:d5:35:
                    42:86:7e:25:41:a9:dc:4e:52:e4:be:fc:5b:02:24:
                    d7:ce:68:9d:c2:70:94:4a:7a:ea:47:93:0e:60:e0:
                    e4:a4:7c:0f:cb:80:0a:be:61:46:b8:70:2d:af:86:
                    8e:c5:0c:ef:9b:37:c7:89:5a:7b:f3:13:a2:b3:b1:
                    77:fa:4a:98:47:50:19:3f:8d:3f:04:be:03:20:a3:
                    2f:d5:ac:84:52:4c:be:94:5b:ae:dc:a4:ac:21:36:
                    0a:71:86:ba:cd:c4:ff:ae:4b:c5:ee:92:21:ff:a8:
                    e2:f8:cb:f4:d4:fb:ce:92:c3:31:e2:20:fa:5f:9d:
                    02:cd:4c:f9:e7:2a:f3:37:f9:7d:36:84:90:4e:c5:
                    0d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:99:20:AA:87:EE:C3:9A:48:29:0B:B4:B3:93:09:FE:D1:24:EB:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/f021a27e-0d4a-372f-b416-5534c39efebb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/88390227-7474-42cc-ab77-86c936657096.crl

            X509v3 Authority Key Identifier:
                keyid:2A:C4:61:4D:D3:E3:D7:37:5E:4A:B4:61:47:C4:FF:55:D8:49:D3:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.230.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:41:0f:ba:fd:ff:ed:f0:3c:4d:23:f0:a7:6e:ab:3d:2a:8c:
         2d:ed:f3:33:3b:69:af:99:bb:79:f5:a3:60:0a:41:b6:d4:48:
         c9:18:d1:1d:ea:7f:0f:0b:4c:e4:48:ac:20:8e:b1:1f:4c:34:
         78:a2:67:dc:80:9d:b2:26:2c:ed:6f:73:4a:08:c0:14:c4:c8:
         85:60:34:3d:1b:64:04:0d:2c:6a:c6:22:a4:e9:6e:87:53:4e:
         19:23:f6:77:98:61:e9:80:91:e8:fe:b0:fa:b7:a3:80:d4:cd:
         a6:35:c6:c1:61:31:80:35:9c:d2:f2:97:2e:8b:10:f2:3b:42:
         e2:34:e5:f7:c8:c7:5e:d1:06:25:55:f8:f7:f0:85:7b:96:9f:
         c1:b4:69:84:93:3d:a1:ea:33:2e:b5:63:42:75:2c:ba:33:97:
         ae:e4:b9:7c:5a:8e:9b:c3:da:85:1d:56:21:7d:cc:04:83:1b:
         ce:39:db:c3:46:07:e6:a6:41:fb:40:5a:03:58:72:06:0c:ee:
         9a:7e:22:af:ed:c8:0c:d9:04:f5:ae:17:2a:6e:22:12:14:89:
         1f:69:e5:e2:26:45:de:b1:cf:d4:9d:0f:b6:83:66:b3:2b:9c:
         8d:45:96:47:d7:f9:6e:0a:e8:ee:1d:c3:eb:e8:37:87:21:bc:
         23:91:52:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 05:53:27 2025 by rpki-client