Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/d7985198-db94-3ad7-b94f-9a83cba2b147.roa
File:                     d7985198-db94-3ad7-b94f-9a83cba2b147.roa (raw, json)
Hash identifier:          AbX0H1yR1p1VtkZYP1bD456jXPTvg/9wEX9OGanwwR8=
Subject key identifier:   B1:09:4A:38:8C:C5:4C:AF:9B:BE:B3:97:02:39:02:BE:8F:B5:13:FA
Certificate issuer:       /CN=1284725e-3e3f-48a5-9b39-37b014dd6873
Certificate serial:       010D0C9F4328584ADECBCC0160889D2DEE463480
Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/d7985198-db94-3ad7-b94f-9a83cba2b147.roa
Signing time:             Sat 16 Aug 2025 01:00:33 +0000
ROA not before:           Sat 16 Aug 2025 01:00:33 +0000
ROA not after:            Fri 14 Nov 2025 02:00:33 +0000
asID:                     398465
IP address blocks:        207.237.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:de:cb:cc:01:60:88:9d:2d:ee:46:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873
        Validity
            Not Before: Aug 16 01:00:33 2025 GMT
            Not After : Nov 14 02:00:33 2025 GMT
        Subject: CN=866b5f2c-256c-47f4-b0dc-a9977abb4ffe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1e:24:39:87:da:8b:31:25:86:b7:ba:8c:ae:
                    8e:45:01:32:25:46:89:df:92:17:91:76:6e:39:46:
                    de:5b:90:62:f8:15:f9:45:1d:23:54:93:6f:e3:da:
                    41:de:16:fc:f4:97:98:cd:1f:dd:42:27:c6:c1:c9:
                    d9:72:65:85:e6:05:cd:f9:2e:0d:d7:be:3e:79:33:
                    13:6c:d0:1e:f7:55:ec:e5:ac:4e:87:1c:d3:7d:d2:
                    f9:85:0f:6c:fe:ea:5c:24:d1:cf:64:d2:ff:1c:6b:
                    e3:be:ec:b3:fa:33:24:6e:68:ca:31:a5:51:e9:e2:
                    46:af:ab:74:38:46:43:fa:17:9f:31:64:65:a0:08:
                    2c:46:df:4e:54:87:24:48:71:c3:3c:7e:dc:db:8a:
                    0d:bf:a8:b6:ed:39:43:ae:a3:51:9f:5e:03:91:c1:
                    1b:bd:2c:23:e1:43:96:9f:bc:ea:c0:98:53:75:70:
                    32:84:b2:c2:9f:0c:1b:08:08:34:15:f5:cc:fb:f5:
                    85:b1:98:19:62:93:d9:16:17:8d:99:c4:53:4d:7c:
                    03:8e:e6:11:71:e9:c1:ef:f0:e2:ef:a0:9e:19:51:
                    57:e7:86:96:dc:78:ce:fe:0f:2c:b1:74:f6:38:f9:
                    d9:6f:9b:5d:35:60:84:70:0a:4a:e4:83:4d:09:dd:
                    1f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:09:4A:38:8C:C5:4C:AF:9B:BE:B3:97:02:39:02:BE:8F:B5:13:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/d7985198-db94-3ad7-b94f-9a83cba2b147.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl

            X509v3 Authority Key Identifier:
                keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.237.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:8b:72:3b:3b:6b:ee:61:74:8e:6e:7b:9d:ff:b9:4c:97:3e:
         f1:b9:3d:18:34:b5:96:42:92:da:5f:3e:59:26:22:89:a8:8e:
         9e:56:21:6e:eb:9c:33:ef:d2:45:5b:6f:6c:61:62:f6:05:fb:
         a5:40:b4:54:ac:af:b1:d6:0a:c5:fe:4a:6d:d2:2a:46:7e:44:
         be:20:ff:18:94:8f:4e:7a:f4:2a:b9:ee:18:20:4e:7f:6e:f2:
         40:cb:64:3c:ef:14:b4:2d:19:f5:8d:0b:48:6f:d1:72:41:08:
         60:bf:1a:74:c6:f8:4d:46:94:14:8c:25:05:ac:bf:d5:ee:f6:
         7b:0e:e3:28:22:f3:78:55:96:09:4e:00:04:3c:50:86:f9:66:
         80:43:ff:54:74:b6:5e:9b:4d:20:df:d3:2e:e8:05:52:ac:3e:
         b1:b8:6f:4d:40:4c:ca:ee:35:b5:42:40:a1:e5:aa:bc:1f:bc:
         c8:10:33:f7:6a:b8:66:b4:a0:21:a1:6c:92:19:fd:15:41:ab:
         52:77:85:a2:fa:08:11:34:48:8e:4d:69:70:b4:4a:d5:0f:74:
         72:fa:dc:54:c1:0a:82:98:7f:32:8d:f6:92:22:cf:e7:6f:96:
         5d:a5:5e:80:ca:9f:b1:98:23:e3:91:f4:17:28:25:8d:c4:24:
         3e:9f:ab:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:02:29 2025 by rpki-client