Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/13f36f22-5767-365c-9680-7d79e16a4aa4.roa
File:                     13f36f22-5767-365c-9680-7d79e16a4aa4.roa (raw, json)
Hash identifier:          9YwwOBLm0tMt0e1J6Juh5/Zvxe9BGKodXxVTCRx8TyQ=
Subject key identifier:   3B:74:35:59:0B:06:59:48:D3:06:1B:9B:0A:D7:96:92:9F:AF:1F:F6
Certificate issuer:       /CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Certificate serial:       010D0C9F4328584AF9514056C8D762026EC2B620
Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/13f36f22-5767-365c-9680-7d79e16a4aa4.roa
Signing time:             Mon 25 Aug 2025 13:00:39 +0000
ROA not before:           Mon 25 Aug 2025 13:00:39 +0000
ROA not after:            Sun 23 Nov 2025 14:00:39 +0000
asID:                     398712
IP address blocks:        23.227.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Sep 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f9:51:40:56:c8:d7:62:02:6e:c2:b6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d
        Validity
            Not Before: Aug 25 13:00:39 2025 GMT
            Not After : Nov 23 14:00:39 2025 GMT
        Subject: CN=3795fe88-651f-46c8-b928-766b3e43e22b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:67:69:e7:5d:91:0a:d4:01:19:13:12:50:21:
                    3c:43:98:a2:ee:48:6e:cb:b0:61:a4:5e:eb:47:d6:
                    20:88:34:76:60:20:30:c5:55:6b:11:85:2a:be:26:
                    e4:3f:a1:38:4f:10:6f:e0:d2:e6:a6:c2:25:43:66:
                    32:17:58:92:e5:10:67:c6:44:6c:f0:fe:6d:14:3f:
                    ea:33:f6:c9:9a:40:f4:14:e4:da:01:b9:66:d3:f1:
                    0d:cb:76:e5:d9:a1:3b:4f:55:64:34:77:0b:3d:c0:
                    a3:6e:53:9e:bd:06:21:d4:7a:1f:c6:54:19:5a:f7:
                    af:f4:ef:e3:db:56:21:c3:13:07:f1:27:c3:66:7f:
                    aa:b6:e8:09:3a:d0:75:87:5f:6c:b4:77:71:bb:35:
                    2f:1d:44:35:63:24:e9:0f:46:8b:d2:41:98:02:f2:
                    e5:64:3a:9f:9c:16:8f:f3:3a:dc:09:62:9a:65:7c:
                    fc:16:2a:52:e0:03:39:07:c1:d0:7e:e6:bd:f8:88:
                    43:84:65:93:d0:fe:d9:7e:ec:c8:15:68:76:98:35:
                    25:5b:bf:45:3d:e3:29:29:fd:62:be:53:5e:ec:02:
                    f9:8f:d3:14:62:26:68:ed:0e:27:91:d2:b7:27:53:
                    d0:39:47:39:d7:85:3d:1f:5f:86:6e:22:bc:c7:6f:
                    81:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:74:35:59:0B:06:59:48:D3:06:1B:9B:0A:D7:96:92:9F:AF:1F:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/13f36f22-5767-365c-9680-7d79e16a4aa4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl

            X509v3 Authority Key Identifier:
                keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.227.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:02:fa:32:c5:54:01:2a:d0:56:25:3e:26:6d:f2:7e:cc:41:
         3b:00:2e:ea:a7:dd:6f:18:fe:3f:e5:a3:9a:2b:17:29:b8:dd:
         47:40:f3:2f:33:9a:b0:7a:05:56:c8:1a:de:26:5e:cd:17:5b:
         1c:15:60:04:c4:4d:97:f2:43:f8:b1:f0:5e:90:8b:89:da:aa:
         4c:3f:5d:03:a1:99:f0:3e:0a:7b:68:67:00:d9:9f:7e:27:57:
         34:68:64:5f:8f:7f:bd:db:46:cd:36:24:23:e7:58:af:26:66:
         55:12:cc:5f:ca:5e:3a:94:61:be:c5:19:d6:33:74:30:e3:cf:
         aa:ad:60:0d:93:02:0e:1d:b4:cf:26:88:b2:72:ee:ab:26:9b:
         41:86:03:fd:5d:b3:50:42:58:8a:14:ed:b9:e0:c6:c9:ab:2f:
         80:a7:ed:36:28:92:52:a1:9f:df:74:6a:12:3b:a5:a3:76:83:
         6d:9c:05:7e:35:c9:b0:3c:4d:1e:d7:2a:04:15:7a:63:8c:74:
         4a:43:8c:98:ea:b7:af:cf:f5:3d:a3:b0:c0:46:96:b5:f6:04:
         22:bb:c1:c0:4a:e5:a4:0d:d5:ee:6b:df:e8:8e:37:1d:c0:5b:
         d4:76:38:e1:6f:64:51:a3:aa:04:f0:9c:ca:43:60:83:7b:27:
         dd:67:b9:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 16:28:12 2025 by rpki-client