Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/7c82ade7-1689-3d7f-82d3-8dd6684e4ca0.roa
File:                     7c82ade7-1689-3d7f-82d3-8dd6684e4ca0.roa (raw, json)
Hash identifier:          xHdPp8zQ2ib87g5B9cFbs9rOKkpQ37rt6he+rYVGyFg=
Subject key identifier:   CD:0F:FD:CD:24:08:EB:63:87:45:C5:C6:BC:37:76:7B:5D:0E:69:A8
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584BAEC7BE8DF0FD2CA2E8F04780
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/7c82ade7-1689-3d7f-82d3-8dd6684e4ca0.roa
Signing time:             Wed 29 Oct 2025 13:00:39 +0000
ROA not before:           Wed 29 Oct 2025 13:00:39 +0000
ROA not after:            Tue 27 Jan 2026 14:00:39 +0000
asID:                     271
IP address blocks:        207.23.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ae:c7:be:8d:f0:fd:2c:a2:e8:f0:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Oct 29 13:00:39 2025 GMT
            Not After : Jan 27 14:00:39 2026 GMT
        Subject: CN=4a79e341-ad54-48cc-be90-79e43f923b24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a3:51:99:ff:7f:42:b9:16:e1:12:01:7d:98:
                    8a:7c:cf:5a:d2:58:1a:50:75:20:2b:86:aa:67:d8:
                    c0:85:91:bc:da:a9:46:a4:e1:f1:29:d8:15:23:88:
                    98:8b:40:e4:fb:32:b3:6a:65:75:83:07:73:0e:f7:
                    13:c2:c8:23:bf:47:df:09:77:f1:9b:fd:38:c6:21:
                    73:62:c3:f9:4c:e7:07:f7:75:3d:3c:a7:44:97:9b:
                    c1:2f:a9:5d:ca:2e:56:34:76:ea:18:6c:a0:9b:59:
                    46:32:2a:69:43:16:5c:17:71:4b:c2:8f:77:2d:5f:
                    2e:68:ea:27:51:bc:93:e7:f4:c0:e8:87:ed:44:cc:
                    44:e0:48:ce:77:55:e5:c6:76:ef:b2:c6:8f:71:7e:
                    63:1d:2e:20:d4:e6:54:45:47:73:1a:4a:b9:b2:5a:
                    0e:76:2a:36:83:28:f3:5c:d3:bc:05:55:49:7b:41:
                    bd:4a:9c:74:4e:80:8c:7d:39:a2:0f:cc:88:20:e7:
                    c9:48:65:6a:e4:83:ab:93:8a:40:df:2a:b4:84:bc:
                    19:73:75:aa:fa:8c:45:d8:79:87:8f:53:0e:99:29:
                    43:20:98:39:f6:0d:bd:63:01:a0:98:2b:33:98:96:
                    a2:90:4e:74:f8:49:26:d6:29:28:97:a7:04:f1:da:
                    f5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:0F:FD:CD:24:08:EB:63:87:45:C5:C6:BC:37:76:7B:5D:0E:69:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/7c82ade7-1689-3d7f-82d3-8dd6684e4ca0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.23.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:40:47:1c:56:31:29:0c:5b:78:cd:51:d7:82:02:66:23:38:
         cd:e2:84:ea:b8:9c:71:86:db:c6:2b:ff:ff:e6:5b:b1:55:26:
         eb:ca:5e:2c:ca:bb:38:f6:38:4d:b0:39:3b:ba:ec:82:6f:ea:
         f5:f4:9e:d3:42:bb:78:75:ae:1c:fb:e7:af:70:06:9f:1f:12:
         78:71:b5:b0:92:6e:4a:89:7e:0c:4d:54:5d:91:5a:47:41:dc:
         0a:32:19:9f:70:30:4c:53:a5:32:3d:8c:e9:d8:89:66:21:48:
         1f:b7:ce:bd:26:e7:d7:2d:5b:94:d9:5c:49:4b:4c:e5:c8:da:
         72:5e:ce:3d:6a:3a:c6:22:c8:35:fb:ed:e4:a6:da:01:50:42:
         9b:74:c2:a2:fe:7e:9d:b4:40:20:3c:ff:bc:72:e1:22:56:74:
         36:6e:29:da:ed:ff:cb:51:c5:2b:94:25:82:ae:fc:da:90:a4:
         49:ec:7f:2b:f9:7a:7b:c3:59:f5:27:bf:75:d2:f6:19:3f:08:
         fa:49:f3:d3:04:e7:6b:f2:15:c2:43:dd:fa:29:88:70:f1:a3:
         1b:ef:ac:ed:88:07:71:75:10:79:db:2f:21:97:1f:c7:05:ab:
         5c:c5:dd:b7:5a:14:b3:3b:d8:9b:22:92:e7:d4:8b:d0:0b:5a:
         e4:0b:2a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:05:43 2025 by rpki-client