Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/c7d7aef3-1f19-3f42-a05d-81f59c59181f.roa
File:                     c7d7aef3-1f19-3f42-a05d-81f59c59181f.roa (raw, json)
Hash identifier:          iLqYpHgmW+VSFsJJfxoU7vlWvkj/4Sfv2dV24eq5kr8=
Subject key identifier:   23:38:CA:31:90:98:8D:94:0E:71:75:89:6F:70:95:ED:FE:CE:17:23
Certificate issuer:       /CN=11f590b6-eb6e-4969-824b-0df247220283
Certificate serial:       010D0C9F4328584B13D6BC631BA2F113B7BCA6C0
Authority key identifier: 82:E3:24:D8:BE:C6:85:DD:4F:6A:D5:26:93:6C:BE:0A:48:31:18:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/c7d7aef3-1f19-3f42-a05d-81f59c59181f.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     395301
IP address blocks:        23.227.216.0/24 maxlen: 24
                          23.227.217.0/24 maxlen: 24
                          23.227.218.0/24 maxlen: 24
                          23.227.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:bc:63:1b:a2:f1:13:b7:bc:a6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11f590b6-eb6e-4969-824b-0df247220283
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=62287b0b-35f1-4e30-b443-78cbe4309a67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:27:bd:b0:a7:cb:c2:16:72:8b:ff:0c:d8:40:
                    81:a2:1d:37:96:6e:d6:65:c1:96:db:a7:11:be:40:
                    04:9e:71:b9:1e:18:72:40:fe:37:5b:d4:9b:48:a4:
                    c2:19:7f:ce:01:60:6e:63:f4:c0:a1:ef:c8:f0:e2:
                    7b:74:85:dc:6a:ee:fa:b1:ff:80:49:e4:7c:59:55:
                    63:62:97:11:cb:ec:c2:7c:96:42:98:9e:b8:e4:c9:
                    bb:55:e1:3a:4c:3d:66:03:99:a0:52:1a:d8:04:c3:
                    14:5e:54:e8:f9:1e:48:db:81:8c:5c:00:dd:cf:72:
                    7f:a3:21:10:d3:a3:92:ae:69:f5:8f:da:55:1f:46:
                    3a:29:c3:f3:ee:db:80:25:87:a8:2e:22:47:53:f0:
                    d8:b7:02:b9:74:0e:46:1d:5f:00:7a:65:60:96:d6:
                    6a:45:e3:2c:e0:57:02:f5:b4:2c:cc:27:25:ed:84:
                    3a:ae:b4:be:40:52:21:bf:8b:c0:93:aa:7d:af:6f:
                    eb:43:18:9e:dd:1c:26:a5:75:2c:90:89:b0:67:d6:
                    d1:7f:40:51:8a:24:38:8a:dc:4e:9f:2a:bd:80:98:
                    d0:a4:45:ee:11:12:ce:1d:26:ee:ff:f2:e7:89:b2:
                    78:79:0e:cf:f0:56:35:fb:15:ed:f7:bf:08:93:75:
                    5f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:38:CA:31:90:98:8D:94:0E:71:75:89:6F:70:95:ED:FE:CE:17:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/c7d7aef3-1f19-3f42-a05d-81f59c59181f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.crl

            X509v3 Authority Key Identifier:
                keyid:82:E3:24:D8:BE:C6:85:DD:4F:6A:D5:26:93:6C:BE:0A:48:31:18:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.227.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:67:34:80:20:9e:64:8b:e4:67:d1:15:b8:79:1c:a6:da:c8:
         62:12:a9:2e:eb:0d:ab:0f:d0:b8:ed:30:85:04:4a:c9:79:65:
         1d:7a:e8:bd:9d:03:a6:22:fc:6f:59:19:49:98:bd:35:15:65:
         96:9b:b1:5e:15:44:bd:13:de:f8:5b:ac:d2:98:e8:0b:d6:bf:
         45:bd:2b:b2:cb:88:42:c3:e5:94:da:78:89:cd:db:4f:86:84:
         aa:dd:97:54:97:ce:1a:f7:4a:10:1a:ad:59:da:3e:cd:4f:49:
         dd:00:2a:f4:12:fa:79:dd:14:04:4c:6f:ee:15:31:7a:93:91:
         42:c4:5c:7f:4c:65:dc:ea:7c:36:f1:3f:44:c0:6e:b5:d3:57:
         9d:f8:f7:27:56:7f:56:99:86:21:ea:15:ef:d9:6d:d7:2d:d5:
         a1:31:7d:37:b0:cf:6e:ee:b0:71:99:16:26:7d:16:08:0d:81:
         07:39:6d:96:12:7f:6c:18:ed:de:49:8b:ef:91:d8:a5:ba:ee:
         07:b3:44:08:90:7f:c8:42:a7:b0:e2:a2:48:1e:6c:f8:b2:7e:
         b1:3c:24:1f:a5:fe:bf:26:d0:21:6d:57:89:cf:46:fc:a6:84:
         02:6d:2a:28:e5:3b:5d:a9:c2:cb:fd:ae:82:e0:9e:12:d3:5d:
         a1:50:1c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 14 11:24:24 2025 by rpki-client