Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/6431a760-62b3-3c57-bd1d-7bebcf9c2f95.roa
File:                     6431a760-62b3-3c57-bd1d-7bebcf9c2f95.roa (raw, json)
Hash identifier:          TnlEygw09w1WwcSd1FxRRY8ylh9ga/wnqElWmUTAo2A=
Subject key identifier:   D9:EE:DB:0A:FB:8D:A0:CE:31:A4:3E:56:84:83:04:8A:70:FA:0E:AC
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584AD0D66A2933BCE2E9E9F95530
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/6431a760-62b3-3c57-bd1d-7bebcf9c2f95.roa
Signing time:             Mon 11 Aug 2025 01:00:32 +0000
ROA not before:           Mon 11 Aug 2025 01:00:32 +0000
ROA not after:            Sun 09 Nov 2025 02:00:32 +0000
asID:                     271
IP address blocks:        207.23.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d0:d6:6a:29:33:bc:e2:e9:e9:f9:55:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Aug 11 01:00:32 2025 GMT
            Not After : Nov  9 02:00:32 2025 GMT
        Subject: CN=067dd1c9-b1d9-4d64-a4a8-4359d5dd8f4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:99:93:07:07:be:32:03:ed:96:35:3f:98:32:
                    0c:e1:1a:65:17:d6:4e:ad:00:42:8e:31:8c:33:6d:
                    80:09:e6:3b:93:c8:46:39:00:8a:fc:52:ab:0b:07:
                    39:3d:53:69:a7:41:64:5a:ab:6e:b4:c8:39:9c:0d:
                    cd:3f:6e:ae:ca:f2:94:0f:48:cf:10:12:d6:4f:df:
                    46:00:bf:15:f5:38:68:17:53:c3:8f:a0:5b:ec:7f:
                    c8:50:2c:43:12:f6:64:30:d4:7a:7b:b4:37:30:88:
                    68:36:17:c2:d8:76:9a:d6:65:ba:0e:4d:c6:30:c4:
                    b5:73:30:d2:33:2a:ee:06:8f:f9:b4:b5:72:87:5d:
                    22:04:f9:88:13:56:39:81:73:9c:8d:5e:b3:06:0a:
                    4b:6a:14:ea:6e:af:e0:41:52:0e:80:b9:fa:93:69:
                    58:dd:5e:1d:5a:69:ab:69:5a:72:36:8a:b2:97:57:
                    a5:78:4c:48:16:21:60:2f:d9:e9:7f:a7:e4:dc:ee:
                    5b:48:b6:f3:fc:cf:60:55:1a:c9:51:72:9c:8b:9e:
                    00:34:1a:96:4f:74:fc:1e:cd:b9:40:d9:b9:22:8c:
                    33:c2:ee:6e:69:0d:91:19:db:69:64:e9:85:cc:6f:
                    26:f7:97:fc:4f:85:c7:cf:6f:a9:af:ed:aa:97:29:
                    47:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:EE:DB:0A:FB:8D:A0:CE:31:A4:3E:56:84:83:04:8A:70:FA:0E:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/6431a760-62b3-3c57-bd1d-7bebcf9c2f95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.23.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:a8:40:61:8d:50:40:6e:94:b4:3e:eb:59:c1:1f:91:64:de:
         a1:2f:59:73:94:a3:5f:1f:f6:1e:b3:33:05:2a:f8:9c:59:0a:
         ff:4a:a7:de:1e:d8:01:d6:86:b5:05:3b:20:d7:e6:3b:71:ff:
         b8:c5:2e:81:f8:1f:ac:ea:d9:a6:5e:52:fe:f5:12:a0:d0:65:
         de:53:b4:20:fc:a2:10:2b:7e:4c:7d:5a:cb:83:e8:a0:bc:78:
         a1:db:5b:d3:76:82:62:6b:4b:37:ac:85:3b:c6:57:18:e5:e0:
         57:c4:b0:6a:4c:14:b6:f8:21:13:fd:1b:ad:c6:0f:8a:ff:43:
         1a:18:c4:81:7f:4b:d1:c7:96:64:7e:d0:60:4d:79:d3:ca:77:
         c0:66:8c:cb:0a:33:36:4e:98:27:3f:91:e2:16:f2:35:4f:87:
         46:1c:b5:2f:0d:89:b1:d5:a2:c8:d5:14:f7:35:96:ed:83:39:
         49:e9:da:80:92:b7:ed:84:4d:01:c9:e7:b8:ee:4a:fe:12:f4:
         16:7c:93:26:d7:7e:43:40:de:3b:fa:e2:81:61:d1:51:86:b7:
         74:bf:e3:26:60:48:b9:2e:60:eb:0c:d0:8c:f2:84:22:a3:37:
         ce:8a:08:4c:2d:7a:35:7d:99:05:7d:46:1b:fe:a2:99:8f:8e:
         89:59:e2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:42:24 2025 by rpki-client