Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/dc2306ab-7ea2-3fe8-9373-de59a92bfcab.roa
File:                     dc2306ab-7ea2-3fe8-9373-de59a92bfcab.roa (raw, json)
Hash identifier:          g6P2f669Sq3Oby3m5YTcfC5X2PmP4jJvUpoHy1bL7dU=
Subject key identifier:   BB:31:90:AB:91:83:82:3A:22:65:DE:DA:C4:D1:42:8A:51:BC:FA:28
Certificate issuer:       /CN=e286fd28-0939-48b9-86ba-cbe791497d15
Certificate serial:       010D0C9F4328584AFC1BF66EDD86177D95D1D3C0
Authority key identifier: 1A:A4:9C:18:83:7A:8A:F6:9B:C9:28:DF:33:44:30:F2:DD:71:0E:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/dc2306ab-7ea2-3fe8-9373-de59a92bfcab.roa
Signing time:             Tue 26 Aug 2025 13:00:41 +0000
ROA not before:           Tue 26 Aug 2025 13:00:41 +0000
ROA not after:            Mon 24 Nov 2025 14:00:41 +0000
asID:                     400214
IP address blocks:        207.2.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/e286fd28-0939-48b9-86ba-cbe791497d15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/e286fd28-0939-48b9-86ba-cbe791497d15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Sep 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:1b:f6:6e:dd:86:17:7d:95:d1:d3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e286fd28-0939-48b9-86ba-cbe791497d15
        Validity
            Not Before: Aug 26 13:00:41 2025 GMT
            Not After : Nov 24 14:00:41 2025 GMT
        Subject: CN=93d27c24-6304-447e-8dd4-48191bb1d689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:73:ef:88:71:8f:d7:4f:13:e2:3b:13:d5:55:
                    4d:75:fc:19:e8:71:7c:6f:96:b4:0f:9c:18:46:cc:
                    0c:0d:4d:89:bd:d9:72:2e:f1:50:ee:38:4b:13:bb:
                    17:ed:ee:63:e7:c9:bd:30:48:b7:12:75:ba:2f:72:
                    9c:7b:93:23:1f:b6:a6:c5:f4:c0:6c:61:cb:cc:19:
                    46:58:96:c6:40:39:92:1d:49:9d:1f:c7:ae:d9:2c:
                    a6:7b:c0:22:52:18:39:fa:ae:00:35:50:2a:34:a4:
                    1a:a1:33:7b:aa:22:80:35:7e:91:49:97:a6:09:d7:
                    ba:e5:5b:71:9a:ba:73:e0:24:ef:23:13:56:32:37:
                    77:3b:b6:8b:85:fc:d3:68:79:17:11:f1:cb:b7:d0:
                    d3:d3:e6:c0:4c:75:32:4d:e1:cb:c7:f6:6c:58:62:
                    10:b9:60:74:8a:63:cc:d2:85:e1:ec:e6:55:82:54:
                    44:39:8d:2e:6b:e7:7a:85:e6:97:8d:8c:05:9d:a7:
                    5b:c6:21:56:bb:6f:e2:24:39:79:dd:f8:1a:4a:e9:
                    7e:1e:b8:1b:e4:fe:28:04:f2:ce:f8:0a:cd:88:17:
                    f2:5b:ff:f2:b8:88:c3:30:73:df:9f:59:fe:2b:4d:
                    b8:4c:6f:b2:d3:d9:f3:19:76:2e:b1:04:15:41:f0:
                    57:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:31:90:AB:91:83:82:3A:22:65:DE:DA:C4:D1:42:8A:51:BC:FA:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/dc2306ab-7ea2-3fe8-9373-de59a92bfcab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/e286fd28-0939-48b9-86ba-cbe791497d15.crl

            X509v3 Authority Key Identifier:
                keyid:1A:A4:9C:18:83:7A:8A:F6:9B:C9:28:DF:33:44:30:F2:DD:71:0E:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.2.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:21:40:fd:ae:4e:22:04:6c:e5:af:1a:d7:35:0a:a4:22:f4:
         6d:9a:83:bc:fe:90:ea:ec:df:3d:43:d6:46:99:fe:61:b6:4e:
         22:14:7c:e9:17:dd:b6:ce:85:26:f9:cf:0c:18:4f:75:c1:bb:
         1c:df:cf:33:7e:c4:c3:2e:66:6b:ca:6b:03:ef:0d:41:e4:24:
         44:a6:17:b4:45:ee:48:5d:29:be:29:e3:68:79:2b:3d:01:81:
         1c:dd:e7:50:e1:fd:aa:32:1a:7e:4a:58:ee:33:6d:a1:aa:d3:
         b0:26:8a:cd:91:b1:be:72:61:56:82:36:af:9e:52:cb:e5:68:
         c5:39:30:95:f3:ba:e9:92:a2:62:a0:7d:76:16:1b:48:17:8d:
         03:fb:f2:ce:dd:29:a3:c2:a3:6e:b1:20:f0:41:40:bb:7c:09:
         3f:66:06:64:70:91:c0:ea:a6:61:ca:f6:d0:e4:33:77:ae:22:
         9d:58:b8:20:5e:39:b8:85:da:e0:07:1a:d3:e6:41:2c:dc:5b:
         ab:3c:20:2a:a7:e1:fa:cf:11:ac:43:ed:70:9b:c9:30:8a:32:
         70:b8:e2:63:13:fe:3b:73:82:57:f5:1e:ba:ca:99:05:a6:6c:
         1b:13:e4:7c:92:06:e1:ce:91:15:d9:31:49:8b:9c:76:f0:75:
         d1:3a:e4:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 21:41:38 2025 by rpki-client