Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/c2f2b4f2-3a7f-385c-93b7-c3fda7f79fc0.roa
File:                     c2f2b4f2-3a7f-385c-93b7-c3fda7f79fc0.roa (raw, json)
Hash identifier:          WoIuxDAmip5He81D4CyCO8Gy3ZdIeEa2VtO36c7gUwQ=
Subject key identifier:   CD:25:9E:E3:97:11:AF:28:07:AD:69:A1:C0:1A:63:EF:04:CF:A5:BC
Certificate issuer:       /CN=88390227-7474-42cc-ab77-86c936657096
Certificate serial:       010D0C9F4328584AB91B8E4921545F97A64352A0
Authority key identifier: 2A:C4:61:4D:D3:E3:D7:37:5E:4A:B4:61:47:C4:FF:55:D8:49:D3:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/c2f2b4f2-3a7f-385c-93b7-c3fda7f79fc0.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     14618
IP address blocks:        207.230.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/88390227-7474-42cc-ab77-86c936657096.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/88390227-7474-42cc-ab77-86c936657096.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:8e:49:21:54:5f:97:a6:43:52:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88390227-7474-42cc-ab77-86c936657096
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=2952b0d6-c117-495c-8123-dc1f923c66ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:44:50:ff:d2:eb:ce:5f:df:0b:32:33:a0:47:
                    27:74:f0:9a:92:fe:66:0a:3b:95:c3:de:72:87:5e:
                    d6:3e:b6:fa:3f:09:45:6c:e3:06:03:91:83:68:1a:
                    ef:6e:c9:10:65:b6:95:8a:ce:e6:95:9f:f6:41:83:
                    78:af:65:75:0f:58:23:cf:48:90:59:01:50:d9:27:
                    89:05:fa:05:35:fd:e2:34:95:16:30:e3:32:91:30:
                    f5:ca:a0:8c:5d:75:f9:e5:d5:7a:0b:cd:da:eb:5b:
                    f5:00:26:2e:c0:00:d2:dd:a5:66:29:8e:c0:d9:4a:
                    a9:54:58:a1:af:7d:66:93:9c:f2:30:b0:e1:96:e5:
                    8d:3a:2e:87:b1:1b:93:ad:e3:8e:af:29:c6:e0:fe:
                    81:7e:4b:df:99:53:b5:3f:fd:e1:5b:f7:79:ff:36:
                    06:4b:7e:6b:a8:a8:95:ce:e5:35:c5:52:ac:de:a2:
                    cf:1a:4f:9c:98:38:20:d7:4d:26:1f:33:15:d7:f0:
                    a0:b9:7a:ff:9b:8c:17:5e:ac:ac:4d:2b:f4:12:e2:
                    c0:ee:86:dd:42:1c:e3:68:3d:86:d6:b9:00:4c:fc:
                    de:f0:d1:2e:05:c1:da:ac:da:a1:c7:94:86:98:1e:
                    b5:b4:19:5f:b9:06:81:17:35:99:49:09:43:a6:0f:
                    aa:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:25:9E:E3:97:11:AF:28:07:AD:69:A1:C0:1A:63:EF:04:CF:A5:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/c2f2b4f2-3a7f-385c-93b7-c3fda7f79fc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/88390227-7474-42cc-ab77-86c936657096.crl

            X509v3 Authority Key Identifier:
                keyid:2A:C4:61:4D:D3:E3:D7:37:5E:4A:B4:61:47:C4:FF:55:D8:49:D3:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.230.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:1d:b3:b5:ff:3a:a0:82:37:19:80:05:39:06:39:04:73:95:
         f2:68:3e:da:24:01:cc:8f:fb:0f:00:14:0d:53:ad:65:1f:ea:
         14:88:a9:6f:b3:9b:24:5a:c9:e2:be:b1:fa:90:6e:f1:21:d9:
         0e:10:85:a9:41:60:e6:0f:99:60:2b:67:de:3d:7a:eb:b6:21:
         65:1f:6a:ce:5d:5d:52:f3:cf:b6:62:06:b1:38:c7:e1:44:6a:
         e0:ca:69:41:02:9f:94:82:12:61:c3:ff:17:f4:b6:d2:cb:5d:
         26:74:03:e5:11:38:8a:56:01:40:8d:38:a3:59:86:8d:a9:4c:
         73:83:97:b5:6a:38:f4:52:43:09:df:b6:76:45:39:98:54:25:
         21:3f:f5:07:7b:67:30:e0:97:b6:ad:33:1d:a1:70:6f:09:bb:
         d8:33:77:e5:19:12:a7:ed:e4:ab:60:74:c6:5a:d3:50:fe:9f:
         71:8e:f2:0e:d7:80:2b:8c:50:51:81:6f:3e:8f:02:53:ee:7a:
         ec:7c:30:3a:c9:a9:5d:e0:54:bc:28:c9:6e:4e:3b:ff:b1:7d:
         5d:84:13:65:b7:78:9c:cf:0e:51:3e:82:f8:03:5a:6f:fa:d9:
         c7:70:f5:1c:49:25:b4:16:a6:90:8c:73:74:a4:6e:7b:1c:10:
         2e:94:f6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:07:50 2025 by rpki-client