Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/e28a2279-9842-305e-b0f4-a5fa89cfe419.roa
File:                     e28a2279-9842-305e-b0f4-a5fa89cfe419.roa (raw, json)
Hash identifier:          yXjWavUXrmPsD1HLJaxNtC/MPTbstTnMg0Vr+w/X1QI=
Subject key identifier:   BB:CB:D3:42:23:EE:29:ED:95:3F:4B:31:59:A6:BB:7D:9A:5D:D1:D3
Certificate issuer:       /CN=88390227-7474-42cc-ab77-86c936657096
Certificate serial:       010D0C9F4328584B99D77F88AE95EDF23B2C7D80
Authority key identifier: 2A:C4:61:4D:D3:E3:D7:37:5E:4A:B4:61:47:C4:FF:55:D8:49:D3:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/e28a2279-9842-305e-b0f4-a5fa89cfe419.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     14618
IP address blocks:        207.230.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/88390227-7474-42cc-ab77-86c936657096.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/88390227-7474-42cc-ab77-86c936657096.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:7f:88:ae:95:ed:f2:3b:2c:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88390227-7474-42cc-ab77-86c936657096
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=980a01dd-a3ff-4324-96dc-9f30315fa270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:9d:c9:99:e7:74:b6:1f:75:9b:d1:13:e2:85:
                    07:bb:f2:47:4a:9c:b9:2a:b8:70:78:2e:e2:1d:cf:
                    38:63:1e:3f:f4:8c:75:12:7c:5a:25:f0:ee:3a:83:
                    70:c7:92:d7:4d:92:7e:7f:63:82:b9:30:a3:e9:cd:
                    f9:92:d8:dd:ac:31:81:e6:56:95:05:7a:1d:e6:71:
                    7e:25:80:b6:9b:97:28:6d:1b:f0:56:f7:8a:fa:8d:
                    ce:ef:cf:76:bf:5d:e3:d5:22:96:2e:d3:15:3c:90:
                    33:5e:68:40:a0:7e:f0:cb:04:07:c7:24:3c:47:36:
                    40:e1:18:ac:0f:1f:1d:46:37:3b:0f:4b:04:ad:55:
                    76:04:d7:74:47:63:7a:2c:e4:4c:e4:32:42:21:57:
                    cc:81:e0:0c:6e:3a:33:d9:d0:9b:44:8c:40:c5:e0:
                    ac:10:9d:c5:c8:1a:c6:e6:81:a6:50:b9:56:98:67:
                    56:b1:19:08:3e:c7:86:b7:cd:5c:40:10:54:67:42:
                    7d:9f:db:66:45:78:47:47:42:25:ac:12:31:a3:f2:
                    74:ca:34:fc:ba:f6:19:12:11:fa:45:d8:3d:a9:c7:
                    05:a0:ff:3b:ff:ec:b6:97:f7:8e:e7:09:88:3b:a5:
                    8e:48:07:b1:42:db:91:b3:74:4f:0a:76:21:11:64:
                    c8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:CB:D3:42:23:EE:29:ED:95:3F:4B:31:59:A6:BB:7D:9A:5D:D1:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/e28a2279-9842-305e-b0f4-a5fa89cfe419.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/88390227-7474-42cc-ab77-86c936657096.crl

            X509v3 Authority Key Identifier:
                keyid:2A:C4:61:4D:D3:E3:D7:37:5E:4A:B4:61:47:C4:FF:55:D8:49:D3:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.230.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:cc:25:70:0b:72:02:47:23:91:40:dc:e3:8d:fb:18:53:37:
         d9:98:fa:e3:43:a3:b6:d9:90:08:09:d2:35:c0:63:2f:7e:fe:
         07:6d:1d:2e:c1:7a:72:3b:f5:d8:02:04:8f:ff:e8:45:6d:f1:
         20:09:61:20:3a:2d:90:8c:f0:82:bb:c7:10:02:5e:0a:95:df:
         a9:5c:2f:5b:f6:58:18:20:d4:34:5f:b7:e5:80:88:a5:3b:b5:
         ce:c6:94:50:a6:79:76:9e:4f:39:a8:e9:d9:d6:38:da:02:40:
         c0:6e:ab:bd:28:3b:25:9c:a3:2f:88:ee:5c:ef:d1:40:a7:a2:
         ea:e2:69:f0:23:71:c5:af:41:76:07:e4:21:96:43:23:d4:61:
         fb:84:b4:f1:29:f7:20:c5:ac:dd:08:ca:56:08:96:2a:3d:f5:
         c8:28:2d:f5:9d:b2:f6:13:f0:2b:50:cd:a8:3d:e7:d5:c6:ea:
         3c:73:fc:a0:1b:88:f7:cc:6d:df:c0:21:39:4f:f9:5e:d6:6e:
         b4:9e:42:2b:6d:70:f1:7d:05:7d:f3:e8:cd:31:b0:6a:ca:e3:
         3e:80:1e:29:0a:39:f4:c1:80:6c:89:e2:b0:21:bc:54:b9:04:
         e9:b2:a5:47:87:9e:0d:eb:74:bc:e0:bf:2a:ee:0a:29:99:3a:
         8a:2b:33:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:47:04 2025 by rpki-client