Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/5d6a9f28-2666-33e5-8b6e-1d970730e477.roa
File:                     5d6a9f28-2666-33e5-8b6e-1d970730e477.roa (raw, json)
Hash identifier:          4xhMLCr3ee+xAIKxUlxPm++KB2O4rF6bp+ltUMGwdu4=
Subject key identifier:   6D:D9:E6:3E:9D:22:7F:0A:0D:51:2B:AE:CE:A5:B9:3A:08:09:A0:C4
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584B64CCA139B928B472EF008D00
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/5d6a9f28-2666-33e5-8b6e-1d970730e477.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     19437
IP address blocks:        140.228.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:a1:39:b9:28:b4:72:ef:00:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=b5d8fe80-ff06-498e-b4a2-429aa896b8da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d9:fe:ff:d4:56:86:b2:53:37:9b:64:04:76:
                    bc:a7:65:a1:b0:1e:c7:79:1d:06:80:9a:a0:ec:bf:
                    da:61:07:87:37:a3:75:63:bd:f7:7d:7c:c2:d1:34:
                    d9:72:22:91:0f:ce:ee:c3:d1:a6:56:6e:49:a2:c6:
                    be:00:2e:f7:17:90:4c:8f:35:61:49:ef:ea:e1:c8:
                    ff:4b:66:71:fc:0a:1f:1b:74:55:58:ee:c2:66:64:
                    5b:a6:44:6b:25:5a:06:31:ed:c2:fa:22:74:3f:d4:
                    06:e8:01:a0:7b:c8:d7:70:19:a8:8f:46:c3:78:f7:
                    01:e2:55:99:30:32:67:4b:f9:ab:df:6f:0d:c2:78:
                    f7:56:71:19:f7:81:e5:5d:fa:7b:33:6b:d4:f2:1a:
                    de:62:d7:c6:c6:95:41:71:03:54:69:3f:cc:78:46:
                    60:18:52:14:27:af:90:ba:8d:54:f2:cc:f0:51:b7:
                    a5:1d:9f:c9:b9:3a:8f:3d:fc:e6:e4:c8:54:15:b5:
                    aa:b6:37:13:a4:f0:0a:d9:e7:69:1a:a4:1f:e3:a4:
                    0d:7c:e7:6e:55:ac:81:3c:e5:3e:eb:0c:47:ca:b1:
                    de:e9:c2:5a:fe:c8:2b:8b:c5:4d:b2:96:83:86:69:
                    03:31:d4:43:b0:cd:6c:a4:6e:00:9e:00:d0:f8:b2:
                    2c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:D9:E6:3E:9D:22:7F:0A:0D:51:2B:AE:CE:A5:B9:3A:08:09:A0:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/5d6a9f28-2666-33e5-8b6e-1d970730e477.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.228.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:e1:76:bf:18:41:fb:98:3d:45:b6:a4:2f:ff:9a:90:22:05:
         f3:81:c6:c1:10:21:51:2b:66:f9:6c:53:00:31:3e:8c:5a:7e:
         2e:58:38:b9:b2:e3:df:e1:2a:cd:39:42:7b:34:82:58:da:15:
         82:67:b2:8e:58:4d:7a:a4:de:15:24:a9:ed:d8:a3:58:2f:4f:
         f0:9c:7b:6e:91:a7:d6:4f:32:c0:ee:38:5d:67:9b:38:33:3a:
         0d:b4:84:e3:d6:79:62:10:a9:b0:b2:b6:a9:53:4b:cf:cb:9e:
         8f:1f:e8:58:43:29:3e:de:eb:a2:49:53:d4:8d:83:38:52:42:
         f1:f8:a2:29:d8:1c:25:03:df:39:7b:8a:fe:d4:2e:4c:a0:65:
         6c:e0:de:3b:12:56:27:35:97:11:4a:42:31:8b:a7:76:21:bc:
         46:d2:3a:27:5e:59:42:d6:c2:48:dd:b9:28:1b:3d:c1:d7:54:
         cc:0f:cf:dc:2e:4e:83:e9:61:f8:ef:65:88:c0:0c:84:28:ba:
         e6:b8:90:c5:08:e9:20:42:67:95:8d:a8:b1:48:85:1b:ff:93:
         90:e5:83:87:a9:d7:ea:65:a8:0d:8c:ba:e2:aa:cc:ff:5a:54:
         32:0c:05:e3:6f:b0:c5:53:ce:70:71:71:7a:9e:7c:f8:23:b7:
         9a:5a:82:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:17:19 2025 by rpki-client