Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/14a07018-19e8-3200-8023-9fa519279bef.roa
File:                     14a07018-19e8-3200-8023-9fa519279bef.roa (raw, json)
Hash identifier:          AEulokOuNAyLV9LDikGEr5DRREjE8RhzhU7W1ee4BdA=
Subject key identifier:   8F:B7:78:7B:EA:30:DA:30:F5:96:5C:71:42:95:27:3D:D8:58:70:EC
Certificate issuer:       /CN=888d6cc7-0aa2-467e-9649-a453942c2d85
Certificate serial:       010D0C9F4328584BA93272EDB881691B187E0F00
Authority key identifier: 85:9E:C9:BC:47:3A:4F:8D:1F:C8:6B:8F:48:E7:B2:AA:BE:7A:56:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/14a07018-19e8-3200-8023-9fa519279bef.roa
Signing time:             Mon 27 Oct 2025 13:00:38 +0000
ROA not before:           Mon 27 Oct 2025 13:00:38 +0000
ROA not after:            Sun 25 Jan 2026 14:00:38 +0000
asID:                     211373
IP address blocks:        199.7.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/888d6cc7-0aa2-467e-9649-a453942c2d85.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/888d6cc7-0aa2-467e-9649-a453942c2d85.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a9:32:72:ed:b8:81:69:1b:18:7e:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=888d6cc7-0aa2-467e-9649-a453942c2d85
        Validity
            Not Before: Oct 27 13:00:38 2025 GMT
            Not After : Jan 25 14:00:38 2026 GMT
        Subject: CN=c1f93280-738a-4cce-8728-ed66694852e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3d:1f:79:f8:36:04:07:91:a3:08:82:61:df:
                    d6:c6:bb:90:d8:15:7c:9f:2f:9f:93:0f:a6:7e:09:
                    37:47:2a:4a:ff:9c:6d:05:a1:a3:d9:04:7a:fe:f0:
                    bd:2c:5d:d3:dc:93:ea:59:1e:6b:eb:6c:fd:6e:a7:
                    8d:3f:2c:ae:1e:16:cc:e9:bf:eb:72:17:81:5a:8f:
                    8f:a0:1c:e8:75:a1:e3:16:cc:90:b5:cb:cd:ab:5e:
                    83:d7:13:c6:ed:d4:04:5a:8d:f9:b8:6f:e4:0d:58:
                    5b:1f:2c:e5:53:44:b7:9f:ad:c1:b9:c2:bb:df:f8:
                    a1:b0:38:97:ca:ed:35:5f:21:14:e0:4e:63:e4:54:
                    04:28:20:75:b7:c0:b8:f2:90:20:e9:bc:39:43:ac:
                    b0:ec:df:df:ad:7d:6a:fa:30:54:68:28:b2:ba:87:
                    dc:b4:34:8b:98:ef:74:ab:27:d6:c6:0c:1f:0c:8e:
                    f6:a1:bc:f4:44:16:42:54:02:9d:88:12:e2:ea:f4:
                    5c:f9:9c:28:5f:7b:56:09:30:8a:b8:94:2d:57:9f:
                    a7:77:86:56:61:11:97:94:b1:76:d6:02:e4:2c:35:
                    cc:64:e6:ca:4c:af:6f:32:ef:8a:24:8c:2e:95:c5:
                    55:6f:9d:5a:e6:b2:87:a8:07:75:d9:0e:06:9d:60:
                    aa:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:B7:78:7B:EA:30:DA:30:F5:96:5C:71:42:95:27:3D:D8:58:70:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/14a07018-19e8-3200-8023-9fa519279bef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/888d6cc7-0aa2-467e-9649-a453942c2d85.crl

            X509v3 Authority Key Identifier:
                keyid:85:9E:C9:BC:47:3A:4F:8D:1F:C8:6B:8F:48:E7:B2:AA:BE:7A:56:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:8a:38:d3:45:ad:01:55:56:ee:f7:15:6e:07:59:65:c2:19:
         53:b6:97:e4:1d:47:a0:8d:b7:c1:3a:ba:14:fb:ef:e7:45:99:
         b5:06:11:a4:0b:05:78:30:85:e3:58:d4:94:3f:cd:b2:70:42:
         46:73:f8:7f:80:40:8b:2f:bc:06:d5:14:98:7e:68:be:fa:99:
         46:a3:ee:56:ff:7c:ad:e7:fc:bc:98:eb:17:90:78:64:89:e3:
         1d:46:aa:04:d7:ac:8f:fd:06:89:5c:8c:98:a3:a7:b5:c1:7f:
         56:5a:f8:f9:97:c8:b8:67:53:38:bd:82:70:eb:7e:08:73:07:
         0e:43:98:d2:6b:e7:a3:d8:17:be:f0:c9:79:d4:03:c6:13:a0:
         6d:fe:f5:c1:34:21:86:15:9e:95:00:af:a1:23:9b:71:c3:a0:
         ea:8b:27:be:5b:ef:01:e1:a1:5a:be:35:40:1f:2c:8a:fa:3b:
         8a:be:f7:d5:3a:98:03:47:b4:7f:33:e5:44:e3:7d:e1:c8:d7:
         32:f1:77:63:23:44:88:a5:c4:95:4b:83:04:22:dc:36:20:4a:
         4f:41:7b:44:26:38:29:06:05:9c:d7:70:6c:25:25:fb:e7:6f:
         73:98:b2:56:ad:cb:6d:84:bb:f4:5b:19:78:30:67:00:3b:2a:
         b7:61:20:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 12:40:10 2025 by rpki-client