Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/cb404fc6-a959-37a7-ba03-66739b40bd83.roa
File:                     cb404fc6-a959-37a7-ba03-66739b40bd83.roa (raw, json)
Hash identifier:          AUBIJuuF04/L2FwM9O3mtVXTzZSb420zpce36stIhZ0=
Subject key identifier:   FC:4F:35:6D:81:E9:F4:D2:F0:63:AC:07:2E:F9:29:FE:86:A5:59:1C
Certificate issuer:       /CN=72b17343-d2f1-49ce-ba92-22f13cfbc0d0
Certificate serial:       010D0C9F4328584B1D9C2B1871878CBDDA258380
Authority key identifier: A3:26:D1:9F:CB:29:99:84:97:4E:7C:E2:DB:A5:3C:1E:A7:33:CC:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/cb404fc6-a959-37a7-ba03-66739b40bd83.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     46320
IP address blocks:        23.227.208.0/21 maxlen: 21
                          23.227.208.0/22 maxlen: 24
                          23.227.212.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:2b:18:71:87:8c:bd:da:25:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72b17343-d2f1-49ce-ba92-22f13cfbc0d0
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=14578bf6-7162-4569-95d7-ffce433c0cea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c8:89:3f:5f:2f:37:b1:ca:d6:10:2f:41:7c:
                    28:e5:06:df:68:3f:d2:38:dc:d7:c5:5e:fb:aa:a4:
                    85:df:59:c6:72:50:95:64:1b:5d:00:40:b1:22:ec:
                    37:0f:02:4e:49:1b:79:d3:39:87:59:b6:9d:45:1c:
                    f3:8f:9b:04:5e:bd:fc:96:7c:7c:70:53:07:eb:69:
                    67:28:fc:f0:b5:bb:6b:b5:fd:23:8f:94:bd:14:4e:
                    14:6b:48:16:2d:73:25:ce:54:04:92:71:1d:1b:72:
                    6d:c3:e6:e8:0c:60:f4:e0:f7:a1:bd:be:5c:cc:b1:
                    c6:26:da:e4:aa:75:5c:99:01:2f:f5:37:43:48:97:
                    f7:85:c6:ba:8b:e7:7e:4c:6c:ce:ce:fb:75:b7:59:
                    fa:70:f0:92:c2:e4:73:7e:6e:0e:db:c6:96:a3:be:
                    a6:94:51:73:66:7b:f7:d8:66:9b:59:4a:a4:44:72:
                    82:db:bf:7e:3f:38:3f:54:a7:6a:bf:dd:e1:12:6d:
                    9f:2f:ab:d3:3f:1c:dc:4e:a3:d0:f8:de:41:b9:56:
                    c0:18:e1:fa:ee:be:e1:cc:f5:ef:83:7c:56:65:7b:
                    26:d0:32:9b:33:9e:88:b2:90:11:5e:59:e9:bf:bb:
                    a7:0e:2a:32:05:e6:f1:53:5e:71:f6:95:5a:37:3d:
                    90:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:4F:35:6D:81:E9:F4:D2:F0:63:AC:07:2E:F9:29:FE:86:A5:59:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/cb404fc6-a959-37a7-ba03-66739b40bd83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.crl

            X509v3 Authority Key Identifier:
                keyid:A3:26:D1:9F:CB:29:99:84:97:4E:7C:E2:DB:A5:3C:1E:A7:33:CC:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.227.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:a5:88:ef:ea:a1:5b:7f:4d:c5:59:20:c1:e8:e1:cf:96:41:
         ca:e2:da:f4:85:5b:4e:c5:3c:2d:fd:8c:5f:ae:27:cc:7c:94:
         fb:28:04:3c:1e:97:be:38:4d:7b:86:65:36:20:c2:d3:37:61:
         30:08:90:bc:4d:d3:62:e7:4c:3e:d4:ce:32:82:cf:e5:91:0f:
         8c:6f:eb:24:15:53:99:3a:db:a0:ba:2a:c2:d4:03:13:8f:78:
         bb:1c:64:b3:fa:42:2a:93:4e:1f:cf:3f:10:4d:25:e4:cb:fa:
         7e:c6:6c:35:3a:21:f7:cf:ed:9d:be:f5:cb:70:0e:7b:fe:91:
         db:40:a2:d8:73:7e:33:56:4a:8b:56:45:99:54:80:6b:a0:f0:
         02:a7:ac:ab:85:5f:56:8e:4b:61:cb:97:c7:67:2b:5b:62:51:
         de:93:dc:26:f8:f4:14:5e:0f:07:44:62:10:3e:e8:c9:1b:db:
         eb:b9:a0:26:32:9e:70:6c:04:ff:23:a5:bd:44:48:b5:d7:81:
         c9:0e:1c:aa:e1:f7:65:ad:39:9a:ad:e8:6d:de:ff:85:0d:a0:
         26:b1:9b:35:9c:01:32:81:ad:85:df:70:67:70:d0:41:f9:b5:
         d4:52:76:64:e9:70:09:59:a3:0e:72:a4:4a:26:c4:8f:13:56:
         5a:77:f4:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:13:51 2025 by rpki-client