Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/f2c6b3e9-07dd-357d-95af-0c568245dbec.roa
File:                     f2c6b3e9-07dd-357d-95af-0c568245dbec.roa (raw, json)
Hash identifier:          o1TmJK9jLaMBmXBZcKHI/FTs1fmM1M1SyTmqJ+xtoUI=
Subject key identifier:   48:6A:DD:7A:45:10:4B:ED:16:FB:D3:E5:39:40:93:5E:C7:CF:F1:27
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584AB91B9F0AC80B2A6E4C4B4340
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/f2c6b3e9-07dd-357d-95af-0c568245dbec.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     271
IP address blocks:        207.23.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:9f:0a:c8:0b:2a:6e:4c:4b:43:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=a3921a98-9b4a-4382-8c6e-117c6353315c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:47:e0:c0:45:03:ae:ec:e3:9d:07:a4:61:b3:
                    a1:ad:db:02:6e:e9:ba:12:38:a3:a6:ba:69:d1:cb:
                    51:ed:fe:9b:2f:a8:c5:05:06:36:b2:05:5e:da:70:
                    2c:cb:1d:33:e6:18:1a:96:81:79:d3:f7:d6:d7:fa:
                    ec:38:04:a7:c6:f6:e0:99:45:4f:20:99:8e:85:57:
                    22:c6:f3:a1:a7:6e:8c:e4:5a:d5:90:44:87:dd:50:
                    53:39:4e:19:b4:f8:ff:31:35:38:6f:e0:67:9f:b3:
                    e0:ee:14:fd:d5:3e:92:59:3e:41:98:c6:e3:5e:a6:
                    dd:5f:05:c7:2f:0a:68:10:da:cb:91:17:26:34:89:
                    f2:70:24:e7:51:40:ab:1e:bb:59:6b:b3:3a:b4:3b:
                    ce:ab:18:64:13:0e:9b:9d:1c:c2:51:a1:0e:29:b3:
                    56:12:68:78:72:d4:45:76:05:39:f1:12:4b:3f:fd:
                    f1:b2:dc:dd:b5:0d:58:17:ed:d6:ad:04:25:62:ce:
                    80:c7:83:46:e6:33:3b:0f:8c:b0:f5:38:7b:ef:71:
                    09:9a:05:ee:34:57:b7:ee:18:69:dd:0d:28:88:e4:
                    a9:1a:f8:8d:2a:2d:8d:14:a4:75:2e:f2:9a:18:23:
                    60:87:c7:cd:e9:f4:84:db:b0:24:d7:82:f9:47:04:
                    a3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:6A:DD:7A:45:10:4B:ED:16:FB:D3:E5:39:40:93:5E:C7:CF:F1:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/f2c6b3e9-07dd-357d-95af-0c568245dbec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.23.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:54:3c:ff:42:1a:e8:76:20:3d:cd:e7:c0:eb:4b:97:6c:76:
         e5:09:0b:d0:58:22:6c:79:4c:91:1c:1a:f4:b6:f3:24:ca:ee:
         39:02:69:af:27:ff:81:26:1a:c8:6b:5e:b5:c6:02:68:6b:8a:
         87:54:89:3d:bf:81:8b:16:19:f7:01:6b:e1:09:c2:ed:25:51:
         c3:79:12:53:66:5c:92:a9:8d:66:1d:b3:a0:58:66:62:cb:94:
         1a:e5:8b:b2:23:30:4c:ad:b2:3a:93:4c:99:0e:e5:ef:a5:48:
         83:c9:95:f9:9b:27:3c:44:d5:73:43:46:74:98:43:ca:46:7b:
         c8:82:b3:27:e2:ae:a0:54:b7:6c:eb:bb:bf:ef:7b:94:b1:ed:
         af:40:97:41:ae:d1:68:8e:57:96:cf:c4:c7:ab:1d:cf:57:72:
         3f:6f:1d:00:27:68:ae:e0:ae:32:75:17:86:0b:60:74:84:63:
         5d:c8:4d:54:91:bd:78:e0:0a:04:42:f9:1e:1d:09:44:dd:d7:
         d9:be:d4:f6:25:28:d4:3a:f9:0f:9e:cf:e1:0c:e4:48:ca:74:
         36:77:f0:93:ed:ff:f6:fa:f9:a6:57:24:0b:6e:e9:be:48:5d:
         67:8a:cc:b1:73:e9:fd:e9:c3:a4:f8:a9:fb:7a:8a:aa:c7:41:
         b1:d0:44:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:51:17 2025 by rpki-client