Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/c2f2b4f2-3a7f-385c-93b7-c3fda7f79fc0.roa
File:                     c2f2b4f2-3a7f-385c-93b7-c3fda7f79fc0.roa (raw, json)
Hash identifier:          Y7RZyQwh7YKuWdZiCht+hZkldd5Q8Pi1y5y1QXXTx4k=
Subject key identifier:   C7:43:6B:4D:A9:04:12:33:26:C7:83:3A:EF:64:E3:0B:A6:A2:AF:A4
Certificate issuer:       /CN=88390227-7474-42cc-ab77-86c936657096
Certificate serial:       010D0C9F4328584B99D7890F0B91BAA7F758E980
Authority key identifier: 2A:C4:61:4D:D3:E3:D7:37:5E:4A:B4:61:47:C4:FF:55:D8:49:D3:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/c2f2b4f2-3a7f-385c-93b7-c3fda7f79fc0.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     14618
IP address blocks:        207.230.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/88390227-7474-42cc-ab77-86c936657096.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/88390227-7474-42cc-ab77-86c936657096.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:89:0f:0b:91:ba:a7:f7:58:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88390227-7474-42cc-ab77-86c936657096
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=c4cef272-644f-4167-a039-230271efa44f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:cf:a6:77:66:cb:c2:9f:5b:36:80:01:4e:86:
                    88:fb:ac:c4:68:c5:88:ba:f2:28:8a:36:dc:63:df:
                    24:c0:9a:0b:4e:2d:38:4e:e4:00:7c:c4:75:9e:1c:
                    91:7f:8d:7c:d9:5a:b1:28:08:96:97:47:cd:ae:ba:
                    45:f4:0c:0a:ed:7c:26:d3:be:1c:21:96:4a:c1:d4:
                    07:80:ae:a1:a5:58:66:9d:6b:5a:b4:df:7c:be:7a:
                    be:40:8c:70:26:24:0a:60:fd:a5:89:f7:8e:90:09:
                    26:05:4e:b9:6a:ce:bc:a1:46:a0:a1:75:e1:db:c5:
                    be:2c:f7:e9:9b:1f:7b:c0:f6:38:51:91:f3:81:6d:
                    98:68:69:9c:85:56:e1:d5:8e:48:97:a1:25:4c:1b:
                    61:73:85:f4:6b:c1:30:f8:ad:5c:3a:89:a1:57:a1:
                    23:60:77:a4:b5:62:96:2d:df:a5:96:ee:8b:f7:69:
                    10:1b:ae:c8:89:ff:09:96:52:a4:73:f4:26:e9:5d:
                    38:4d:ee:21:68:2e:63:09:3f:9a:e9:cb:26:83:0e:
                    24:a8:f6:6d:2b:90:ee:9d:b5:08:f1:62:a8:d0:31:
                    68:4a:d1:b5:80:7b:f9:15:d5:23:ba:c2:2b:79:1c:
                    5c:6e:9d:26:2b:fe:ef:58:1c:34:e1:7e:3a:0a:9d:
                    41:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:43:6B:4D:A9:04:12:33:26:C7:83:3A:EF:64:E3:0B:A6:A2:AF:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/c2f2b4f2-3a7f-385c-93b7-c3fda7f79fc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/88390227-7474-42cc-ab77-86c936657096.crl

            X509v3 Authority Key Identifier:
                keyid:2A:C4:61:4D:D3:E3:D7:37:5E:4A:B4:61:47:C4:FF:55:D8:49:D3:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.230.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:35:77:7e:88:3d:07:67:b9:d1:4e:b1:88:a2:8a:88:8c:a6:
         6c:ed:21:8c:c5:95:38:bc:1e:23:ae:0e:31:7e:a0:c7:08:82:
         01:4f:ad:7b:e8:42:87:e2:6b:32:da:22:3e:23:bc:39:ab:72:
         ba:d1:8b:3b:e7:86:a0:17:14:99:e7:6e:87:89:de:26:73:1c:
         ce:93:d2:0f:e8:85:34:0e:d7:9a:ea:47:b7:a7:36:7e:11:d9:
         e5:fe:26:6b:04:b5:c3:89:ba:ea:7f:95:47:47:3c:90:7d:bf:
         2e:e8:b0:35:a3:1a:4d:f8:66:ee:29:d1:2f:f5:40:68:16:81:
         f9:27:52:dd:3e:84:64:85:58:23:67:f1:80:4b:10:a6:d2:18:
         ca:2f:27:e7:c8:49:56:c7:ae:71:f0:42:81:22:71:f2:07:cb:
         38:a1:bd:74:dc:26:9b:8c:cf:38:f5:6e:25:c7:d6:63:b4:7a:
         8f:c9:1e:06:c5:50:00:14:05:99:be:24:1b:87:a8:87:2a:68:
         db:10:62:7a:92:fb:1d:db:9b:5e:ec:40:3e:1e:05:26:23:0f:
         a4:e3:06:da:71:26:3b:19:05:e1:f8:a4:a5:02:c6:aa:15:a3:
         84:e2:54:74:15:2f:19:85:83:e3:90:e2:a4:d0:54:dc:f6:06:
         52:9f:e0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:46:44 2025 by rpki-client