Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e262294-f3c0-4a56-8c97-786e6ae2f14c/1a700bb2-fb13-36b5-bd63-acd900c1c18c.roa
File:                     1a700bb2-fb13-36b5-bd63-acd900c1c18c.roa (raw, json)
Hash identifier:          811jCYrWlafXmJnCUKNEaMEkO1JTlhvlkCDq1BHVlbw=
Subject key identifier:   A5:10:77:85:C6:D3:BD:3C:C9:8E:DB:44:B4:18:C6:03:4A:D7:59:38
Certificate issuer:       /CN=8e262294-f3c0-4a56-8c97-786e6ae2f14c
Certificate serial:       010D0C9F4328584B84E788177950EFED2A0FDF80
Authority key identifier: 27:A7:46:6C:19:A9:9A:2B:26:07:13:D0:A7:19:8D:AE:5C:29:52:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e262294-f3c0-4a56-8c97-786e6ae2f14c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e262294-f3c0-4a56-8c97-786e6ae2f14c/1a700bb2-fb13-36b5-bd63-acd900c1c18c.roa
Signing time:             Tue 14 Oct 2025 13:00:37 +0000
ROA not before:           Tue 14 Oct 2025 13:00:37 +0000
ROA not after:            Mon 12 Jan 2026 14:00:37 +0000
asID:                     7018
IP address blocks:        207.228.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e262294-f3c0-4a56-8c97-786e6ae2f14c/8e262294-f3c0-4a56-8c97-786e6ae2f14c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e262294-f3c0-4a56-8c97-786e6ae2f14c/8e262294-f3c0-4a56-8c97-786e6ae2f14c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e262294-f3c0-4a56-8c97-786e6ae2f14c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:84:e7:88:17:79:50:ef:ed:2a:0f:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e262294-f3c0-4a56-8c97-786e6ae2f14c
        Validity
            Not Before: Oct 14 13:00:37 2025 GMT
            Not After : Jan 12 14:00:37 2026 GMT
        Subject: CN=d99b050e-62dd-42eb-b7d8-ec03b6673f26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d4:a9:b8:fd:d9:b2:d3:9a:5a:df:14:60:87:
                    c7:28:2b:4b:60:ff:07:bd:a5:7e:46:30:52:60:ed:
                    d1:63:61:f4:62:08:2d:0b:3f:c7:7b:3f:9f:0b:e3:
                    ec:76:0f:78:f5:04:41:0f:cd:47:ab:6e:c2:44:6f:
                    ca:9d:1b:e7:59:e2:7a:eb:27:ac:55:63:4d:25:ba:
                    0f:68:71:a2:11:a0:b3:63:96:3b:f0:94:15:d9:04:
                    dc:cb:f6:9a:06:10:37:71:0d:58:76:63:df:28:86:
                    c1:0b:59:17:78:df:1f:80:5e:7b:46:d3:0a:cf:79:
                    85:45:31:d1:b1:8a:20:08:d6:55:09:bd:6d:63:64:
                    3c:31:e6:fc:ec:0a:60:ed:95:6e:31:de:61:05:b0:
                    5f:9a:75:8e:a3:58:6e:82:03:cd:12:de:fc:1e:92:
                    49:f0:6f:df:43:9b:19:12:c2:5c:3c:a9:6a:bc:1a:
                    b1:74:f4:95:d2:75:b3:18:28:c2:78:70:3a:20:22:
                    53:20:ca:9e:ca:c5:c1:d7:57:fe:46:da:94:8b:02:
                    bc:5a:93:78:90:f5:ba:cd:88:5a:cb:dd:6e:07:11:
                    bc:c9:54:00:0e:28:80:ea:e2:0c:f8:5d:62:0d:39:
                    2c:cd:8e:1c:16:5e:ca:8b:bb:d9:34:08:89:55:73:
                    b3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:10:77:85:C6:D3:BD:3C:C9:8E:DB:44:B4:18:C6:03:4A:D7:59:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e262294-f3c0-4a56-8c97-786e6ae2f14c/1a700bb2-fb13-36b5-bd63-acd900c1c18c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e262294-f3c0-4a56-8c97-786e6ae2f14c/8e262294-f3c0-4a56-8c97-786e6ae2f14c.crl

            X509v3 Authority Key Identifier:
                keyid:27:A7:46:6C:19:A9:9A:2B:26:07:13:D0:A7:19:8D:AE:5C:29:52:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e262294-f3c0-4a56-8c97-786e6ae2f14c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.228.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:a1:2d:58:b4:b4:c9:fe:08:73:e9:50:74:6e:df:e2:69:7e:
         f0:c9:d2:49:ec:a5:69:92:86:11:dd:e3:09:72:4f:f4:ec:23:
         16:b6:83:15:79:01:8d:d6:be:fd:1d:d1:b9:fe:7e:f0:22:db:
         39:ca:5b:05:8b:c2:3a:1b:0b:0e:41:0d:73:11:86:c7:a6:10:
         f5:5c:77:82:f8:6e:6d:4c:63:b0:24:5c:7f:7c:c6:77:76:bc:
         7d:a0:09:a4:52:28:ff:3e:65:e3:7c:26:74:9a:db:d9:db:3d:
         e8:73:28:4f:73:9a:08:83:d0:e9:89:8e:ad:b6:e2:94:35:96:
         52:f6:40:17:e3:32:f2:5e:0a:96:38:40:ca:a9:fd:9b:a1:e4:
         d0:dd:23:4e:21:03:a0:d7:8e:ef:ac:47:96:fc:10:fb:53:8f:
         a3:f5:e3:49:47:eb:c3:4b:05:e3:32:04:46:99:cd:7a:00:43:
         32:49:37:3e:8d:c0:fb:0f:90:84:8d:e3:13:e6:3d:09:dc:d8:
         f8:65:09:7e:15:71:60:4b:bf:9a:94:54:14:59:d8:54:60:0f:
         98:5a:ee:a9:e7:09:2b:e7:a7:17:af:77:53:60:45:a9:97:b2:
         db:0b:07:96:69:b8:cd:3d:b3:d2:22:dd:2b:95:36:56:04:e2:
         75:68:3a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:25:53 2025 by rpki-client