Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/3196d3fb-a558-3221-b887-258cd7225048.roa
File:                     3196d3fb-a558-3221-b887-258cd7225048.roa (raw, json)
Hash identifier:          cLVWVQmrq87Hlgc45KEZOxJuDAIt30GtGGUzR303NH8=
Subject key identifier:   DC:D1:33:9B:F9:60:94:20:51:B2:D8:E8:B1:C4:B8:5B:47:FE:F8:39
Certificate issuer:       /CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Certificate serial:       010D0C9F4328584AF9514076CC2DF5DFEB999400
Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/3196d3fb-a558-3221-b887-258cd7225048.roa
Signing time:             Mon 25 Aug 2025 13:00:39 +0000
ROA not before:           Mon 25 Aug 2025 13:00:39 +0000
ROA not after:            Sun 23 Nov 2025 14:00:39 +0000
asID:                     398712
IP address blocks:        23.227.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Sep 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f9:51:40:76:cc:2d:f5:df:eb:99:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d
        Validity
            Not Before: Aug 25 13:00:39 2025 GMT
            Not After : Nov 23 14:00:39 2025 GMT
        Subject: CN=cebbffd1-5927-486c-ba14-caa8882d63f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:fe:03:c9:20:88:40:11:8f:de:b7:a2:78:85:
                    1d:f3:a1:58:1f:bb:70:d7:8f:53:4f:e1:8c:75:17:
                    99:e4:2e:5a:12:20:e6:71:ff:39:7d:fa:53:ff:91:
                    5b:31:e9:7d:ce:c8:9c:c3:98:1b:70:2c:e5:2b:16:
                    17:64:26:57:07:ea:cf:e2:d6:d0:9e:1b:4a:2f:27:
                    48:bd:61:1b:8f:74:3c:87:7c:45:c4:dd:26:9f:a6:
                    e4:40:40:5e:78:99:82:06:e3:00:27:0d:39:ad:6b:
                    2c:aa:6e:1e:1c:fa:7b:63:8d:73:91:91:91:0e:65:
                    c6:82:6a:f4:77:c4:84:9b:b3:9e:ed:77:d7:bc:1a:
                    aa:20:82:b0:62:dd:02:ad:66:8d:28:d4:d9:7b:a8:
                    95:f8:39:0d:7f:50:c8:03:08:d9:f2:48:c4:fc:46:
                    af:ec:08:88:51:3f:e3:fd:01:c4:be:e2:1b:7b:7e:
                    d6:34:07:ca:5e:c8:7a:06:51:26:2f:f2:10:21:8f:
                    3f:76:4c:b6:65:16:8b:4f:66:16:93:d5:d6:0d:80:
                    49:b1:25:8d:37:a7:15:22:f8:3e:fe:5a:69:bf:a7:
                    b7:10:05:e0:26:91:80:16:c3:51:6c:c5:4c:9e:67:
                    66:8a:2c:68:27:30:c2:bc:6c:72:a5:bf:b6:f4:56:
                    d0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:D1:33:9B:F9:60:94:20:51:B2:D8:E8:B1:C4:B8:5B:47:FE:F8:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/3196d3fb-a558-3221-b887-258cd7225048.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl

            X509v3 Authority Key Identifier:
                keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.227.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:13:9f:6d:d9:b0:ac:c2:05:d4:34:d3:7e:c1:b7:da:9e:63:
         1a:21:45:b3:00:19:5b:6f:41:28:4e:28:8f:9c:5f:57:e4:e7:
         43:84:b6:42:e2:ab:61:fc:f5:91:3a:ca:7f:01:ba:d6:7a:da:
         7d:09:51:29:e5:4d:26:68:23:d3:68:39:91:5d:57:71:d9:4a:
         f8:23:ad:81:5d:2c:3b:30:d5:99:de:16:69:96:58:0d:bc:35:
         88:39:73:ad:54:26:cf:67:60:4a:18:78:fa:e4:e0:de:47:72:
         ad:a3:1c:e5:f1:92:20:c2:71:cd:11:60:9a:9b:dc:13:50:f3:
         85:4a:31:c0:8b:2c:09:00:3c:2d:69:b5:dc:5c:0d:75:b5:8b:
         ed:64:d9:50:03:5e:d2:f8:c9:3d:1e:73:3d:c9:05:9c:c2:e5:
         3f:49:47:63:9f:1e:42:16:61:49:54:38:01:70:0f:70:00:4b:
         da:1d:c2:f2:60:b6:82:10:44:66:4b:e9:ca:3f:e6:5e:e9:e9:
         f2:aa:06:ab:99:6f:a4:94:77:b8:9d:5a:44:1e:dc:b1:fe:01:
         48:25:b2:a6:a6:da:1d:15:7a:8c:40:68:ac:5e:bb:c8:3c:00:
         42:18:6a:14:6d:6a:d3:79:fb:b5:cb:f0:90:81:bf:4e:01:07:
         bb:90:bc:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 16:31:21 2025 by rpki-client