Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b8f232e3-9bf8-38bf-9a45-efbc1cbcfe26.roa
File:                     b8f232e3-9bf8-38bf-9a45-efbc1cbcfe26.roa (raw, json)
Hash identifier:          pMydbzWm75iiHTYPny/uVXunZIkj6cZ5ZOhEk90K+7U=
Subject key identifier:   49:9F:C0:AE:AC:55:8B:C9:4B:5C:75:2C:92:A6:52:9A:A0:B8:C4:B5
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584A506AF4EE8185FFBBAE001280
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b8f232e3-9bf8-38bf-9a45-efbc1cbcfe26.roa
Signing time:             Thu 26 Jun 2025 01:00:49 +0000
ROA not before:           Thu 26 Jun 2025 01:00:49 +0000
ROA not after:            Wed 24 Sep 2025 01:00:49 +0000
asID:                     174
IP address blocks:        207.230.3.0/24 maxlen: 24
                          207.230.6.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:50:6a:f4:ee:81:85:ff:bb:ae:00:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jun 26 01:00:49 2025 GMT
            Not After : Sep 24 01:00:49 2025 GMT
        Subject: CN=7de5a6e3-ec45-4901-81ee-7e0e041816f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:22:91:5e:6c:2c:9e:95:16:0e:ab:17:bb:36:
                    42:76:d9:99:54:43:df:a2:e2:cf:8c:21:22:55:56:
                    15:6d:b8:48:70:f1:86:dd:07:97:ce:74:76:03:8d:
                    d1:84:7c:3a:44:86:7b:cf:73:af:e7:07:52:25:35:
                    64:a4:a5:b9:06:82:e0:e8:14:d6:7f:3a:4a:bc:d2:
                    b8:83:89:9c:bd:44:ee:33:8f:66:7e:fe:d2:8c:c7:
                    e4:38:cf:6f:94:01:42:d2:32:b1:ac:5e:23:42:be:
                    54:e3:da:26:3e:67:94:57:eb:f6:dc:12:eb:f0:3d:
                    f3:c9:60:57:81:b9:e2:18:21:35:f8:26:1c:88:88:
                    49:a1:e2:7a:ee:01:74:02:36:55:15:29:fd:da:61:
                    06:fd:de:29:08:9a:f5:64:26:fd:fe:24:ff:fa:a4:
                    08:fa:5d:24:cd:1c:e1:44:17:67:d5:40:de:6c:48:
                    2a:bf:25:b5:a8:8b:2c:76:60:40:6c:85:3c:dd:b4:
                    e3:9b:53:db:83:b6:bf:a4:fb:92:9a:4d:8e:2d:93:
                    76:3f:9e:91:64:3a:b3:08:09:17:cf:f0:6d:33:21:
                    26:df:79:b4:32:24:9e:a7:05:67:56:63:d7:74:a3:
                    fc:a4:88:12:8b:8d:69:c4:3e:37:1c:bd:db:f3:6e:
                    1a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:9F:C0:AE:AC:55:8B:C9:4B:5C:75:2C:92:A6:52:9A:A0:B8:C4:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b8f232e3-9bf8-38bf-9a45-efbc1cbcfe26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.230.3.0/24
                  207.230.6.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:70:85:b5:c5:43:0f:69:cf:c2:d1:5a:6e:85:7a:d8:8a:8b:
         34:57:12:12:51:c8:c3:ee:03:23:85:e8:92:78:06:44:51:96:
         3f:bd:c9:dd:7b:d1:c7:6a:9b:52:90:0a:fd:db:e0:ed:58:48:
         71:e3:a9:1d:c7:16:96:ab:81:a3:da:c7:75:b9:63:5e:e3:24:
         32:de:05:ae:ed:20:96:8c:c2:1f:1f:c2:c5:45:97:ae:53:72:
         bf:30:85:1c:67:1d:9a:0d:6d:d1:77:b0:1b:4a:86:53:68:06:
         13:38:64:45:14:1d:9a:f0:8f:69:57:57:5e:55:10:6e:3b:ae:
         e3:14:9f:e5:a2:df:98:c9:e3:0c:c7:4d:a3:ad:b6:ca:41:eb:
         f0:4d:8a:03:b8:24:af:a7:9a:a2:34:f8:2f:70:77:69:75:2b:
         d6:d1:f4:42:bb:87:72:73:b2:98:06:d7:0a:31:fa:5d:68:c3:
         2f:b1:61:98:7a:d8:72:6c:18:d7:bf:c1:b4:45:ac:70:4d:e0:
         dd:54:9c:52:9f:fb:97:06:11:09:fd:63:1c:d4:be:f2:2b:ca:
         83:34:07:84:4b:80:68:c8:17:bf:9b:c8:6f:6d:cf:c8:e8:1a:
         e3:c8:50:bf:a8:7c:43:14:2f:43:ed:c9:0c:bf:79:b1:11:8f:
         4b:5b:cf:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:17:49 2025 by rpki-client