Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/abd7cb8d-3700-3953-9b08-55ef721cd0ad.roa
File:                     abd7cb8d-3700-3953-9b08-55ef721cd0ad.roa (raw, json)
Hash identifier:          jLR2OX+i2aiBob0NhAMaGkWAo+c3YrsOybyhLWxVHtk=
Subject key identifier:   91:06:D0:9E:6A:64:3B:07:28:2F:90:0B:24:67:21:77:1C:EF:C0:93
Certificate issuer:       /CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb
Certificate serial:       010D0C9F4328584A6C55D6F68BEF287511A35F80
Authority key identifier: EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/abd7cb8d-3700-3953-9b08-55ef721cd0ad.roa
Signing time:             Sun 06 Jul 2025 01:00:49 +0000
ROA not before:           Sun 06 Jul 2025 01:00:49 +0000
ROA not after:            Sat 04 Oct 2025 01:00:49 +0000
asID:                     395201
IP address blocks:        23.227.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6c:55:d6:f6:8b:ef:28:75:11:a3:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb
        Validity
            Not Before: Jul  6 01:00:49 2025 GMT
            Not After : Oct  4 01:00:49 2025 GMT
        Subject: CN=743d58ec-d1b3-4aec-87f3-39a5faedcfea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:03:33:8a:82:d2:df:73:17:48:b9:d5:2b:3d:
                    66:64:1f:a8:55:66:b8:1d:95:8d:f0:62:31:41:c4:
                    e9:92:a1:8c:a5:3f:78:a9:9d:e2:39:b9:64:62:ed:
                    91:1d:27:d0:c7:50:5b:ea:cb:b9:c0:f0:e8:23:ec:
                    e5:58:c3:eb:84:86:78:bd:77:26:34:44:e8:32:28:
                    aa:b6:46:e3:b5:cf:c7:f9:22:0a:6c:c2:9d:41:a4:
                    d5:ee:ec:b2:36:ad:c0:97:6b:15:3b:cc:5b:e8:b7:
                    fb:3c:7c:e6:4a:1b:fd:be:44:d7:af:8d:06:35:2c:
                    58:e9:3a:ba:c2:4b:0b:90:e6:f2:54:6f:42:f2:99:
                    cb:6f:c2:20:d8:e3:90:82:2a:8c:50:29:fb:11:e1:
                    d7:2a:19:ae:41:d3:c7:f8:3f:a0:56:16:2c:d3:d2:
                    91:6b:27:38:61:07:60:9e:f1:a3:d1:86:09:f0:d0:
                    16:ee:93:0f:12:03:e2:75:d3:c1:91:1b:13:ca:e0:
                    f5:5a:ba:fe:a8:81:65:21:9d:ab:7c:cc:7a:92:be:
                    20:97:b6:d3:38:8c:a8:1b:30:c4:6b:11:5d:7b:13:
                    8b:20:4a:61:5b:0d:24:31:e5:e6:5b:a2:aa:b0:e9:
                    66:e6:a5:e0:5d:26:7f:30:76:36:0f:9e:13:13:40:
                    f6:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:06:D0:9E:6A:64:3B:07:28:2F:90:0B:24:67:21:77:1C:EF:C0:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/abd7cb8d-3700-3953-9b08-55ef721cd0ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl

            X509v3 Authority Key Identifier:
                keyid:EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.227.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:8a:76:5b:b7:ec:cf:f3:34:27:02:98:67:5a:bc:48:1f:40:
         b8:40:d2:c4:38:80:ce:11:23:aa:5a:b0:8d:ba:bb:1b:f6:ee:
         51:c7:cb:d3:d6:1c:f6:fe:f4:45:63:97:83:79:1b:fe:90:8c:
         51:f5:aa:a4:f6:e1:7e:92:53:be:40:05:82:e6:4e:17:f3:08:
         63:33:7d:90:2f:23:bb:55:a4:52:31:04:7d:b2:18:8a:c0:65:
         8f:d6:0d:5a:d4:64:b0:14:6e:8c:c7:87:e4:5a:a4:7a:af:b7:
         9f:df:9d:4a:07:40:83:92:fb:04:de:7b:3e:e6:e2:17:cd:78:
         a4:4b:5b:c4:3e:5a:98:72:2d:2e:43:a2:0b:b8:4c:fd:7c:b5:
         da:4f:10:55:40:13:a6:ee:a9:bf:a8:f3:ef:19:b5:c0:ef:bf:
         9b:89:c6:06:21:e2:be:41:30:70:dd:ca:d8:55:b1:f2:6a:bc:
         a6:01:64:fe:1a:40:e1:93:bb:93:42:1b:d8:1d:3a:1a:74:dc:
         86:0b:6c:03:10:47:49:b6:7b:c0:18:85:cd:90:3f:12:5e:76:
         0e:c6:97:40:21:10:5d:8d:71:8b:1b:59:6c:d6:a1:1d:91:dc:
         b3:4f:38:21:0c:f8:e7:47:ab:c2:68:13:08:e3:82:d4:6f:ca:
         65:7d:9e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 17:57:54 2025 by rpki-client