Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/c1c1cf93-92dc-36ab-b18d-2025357a206f.roa
File:                     c1c1cf93-92dc-36ab-b18d-2025357a206f.roa (raw, json)
Hash identifier:          vbF8p8/vCgLEMIehHWToXJ3peGJQWyiZHC7X6b3oKN0=
Subject key identifier:   22:C4:39:E5:12:8A:35:78:03:E3:F3:B4:5F:B1:07:4A:63:89:E2:D5
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584B1806D245D0446435D748EE00
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/c1c1cf93-92dc-36ab-b18d-2025357a206f.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     212384
IP address blocks:        140.228.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:d2:45:d0:44:64:35:d7:48:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=0f6ad418-a800-439b-82f3-742986998795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7f:6f:3a:bc:2a:62:6b:f8:52:c5:e7:d6:d9:
                    47:c8:c7:e7:8c:ea:77:e8:ed:d5:65:ad:2f:0c:59:
                    bc:bc:fe:dc:77:e3:71:94:c5:d4:20:d5:d5:1c:52:
                    de:25:68:d5:86:d1:aa:ac:00:a4:92:c9:45:82:fe:
                    52:dc:05:4c:0d:d0:9a:23:1f:28:49:11:2e:af:e3:
                    33:13:a3:78:5f:1f:9d:40:4f:9d:56:a6:9b:35:b7:
                    9e:3b:68:24:e9:56:2c:a8:24:3c:6f:27:84:e7:99:
                    00:1a:02:64:7f:18:41:7c:8f:1f:96:87:1c:44:44:
                    aa:0e:d9:80:71:5a:59:a3:cc:75:ae:9b:80:ab:b8:
                    83:8b:fd:a4:eb:ce:4f:ab:f8:7d:50:5b:e4:e2:09:
                    72:15:5b:1a:38:cc:2b:e7:02:d4:09:97:04:a5:4f:
                    90:f3:76:97:bb:fb:b7:ba:99:ba:e7:57:63:bb:bd:
                    2d:ee:b8:16:98:f0:50:e4:14:f2:50:17:bb:a0:d4:
                    f8:e0:4f:26:d6:43:2b:37:7a:fc:ec:b6:7c:86:eb:
                    b8:fe:fb:d9:77:0b:87:8a:61:31:a2:de:97:b4:3e:
                    d9:01:05:12:b1:23:aa:dd:2e:f6:03:50:65:21:28:
                    97:64:a6:b5:ca:4f:07:d7:4b:06:9a:79:51:50:41:
                    be:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:C4:39:E5:12:8A:35:78:03:E3:F3:B4:5F:B1:07:4A:63:89:E2:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/c1c1cf93-92dc-36ab-b18d-2025357a206f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.228.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:41:3e:d8:4b:3f:c2:42:21:d0:36:c8:b4:d7:a1:0c:be:98:
         80:62:d6:14:51:0b:c3:b9:6b:5d:b4:e2:10:23:a6:36:95:47:
         91:e3:86:c6:e9:34:c7:ea:46:09:b4:54:42:06:d4:fe:c4:cc:
         97:93:78:19:d9:b5:01:4b:02:ce:24:99:76:ec:c4:af:4d:a9:
         64:32:df:6c:9d:05:3a:0b:86:cf:31:0f:26:51:be:cb:42:04:
         70:30:7c:a5:be:6a:8b:e6:c6:cf:85:db:9e:08:4a:07:9a:fa:
         18:a5:9a:0e:3d:65:79:f6:2e:23:26:5b:1a:ef:c3:1c:67:1f:
         ca:31:68:61:93:44:ed:7b:df:73:14:bc:25:a1:d5:b3:e5:3f:
         57:89:d8:9c:29:73:a8:b3:28:71:d6:20:85:ac:3d:a6:83:cb:
         5f:d4:13:90:77:9d:22:fd:ca:68:9c:c1:48:e0:1b:58:9b:af:
         2a:6d:ab:72:f0:cf:b8:c3:b0:ef:a2:96:c1:c0:00:43:2d:44:
         45:6f:2b:6a:36:fc:b8:42:3d:c6:4d:df:f9:51:03:d7:81:4d:
         1a:42:e5:de:4a:88:be:6c:1d:1f:bc:ed:89:74:b6:d8:62:3f:
         5b:a4:26:5e:a6:49:ed:52:5f:f2:2d:3c:64:20:34:05:17:4a:
         bc:20:c0:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 20:00:10 2025 by rpki-client