Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/6d49050d-1eaf-33de-a66c-2eecc8f794c8.roa
File:                     6d49050d-1eaf-33de-a66c-2eecc8f794c8.roa (raw, json)
Hash identifier:          Jr9G5sag6pWNU0y9eZnQB5ezC7mc8m2NxjjeXDUnKqQ=
Subject key identifier:   75:D4:30:09:58:AE:D4:9F:2E:0A:FC:B2:60:23:F7:CE:67:05:9E:35
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584B40819DCDACC3FA1BFB9C4830
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/6d49050d-1eaf-33de-a66c-2eecc8f794c8.roa
Signing time:             Sat 20 Sep 2025 01:00:32 +0000
ROA not before:           Sat 20 Sep 2025 01:00:32 +0000
ROA not after:            Fri 19 Dec 2025 02:00:32 +0000
asID:                     212669
IP address blocks:        140.228.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:40:81:9d:cd:ac:c3:fa:1b:fb:9c:48:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Sep 20 01:00:32 2025 GMT
            Not After : Dec 19 02:00:32 2025 GMT
        Subject: CN=2678cba8-a8db-4674-92d1-c22ea601fb6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:78:69:f7:a6:58:92:a2:f7:15:38:95:b4:e7:
                    bc:3c:3a:4f:68:c2:e7:d8:0a:55:c4:9b:cb:a4:8a:
                    7c:d8:f1:92:79:bc:64:99:39:6a:ee:8d:b8:d6:5d:
                    67:92:34:40:71:15:42:06:90:01:d9:ef:44:13:b1:
                    f9:e1:77:7e:4f:09:9d:56:3a:dc:62:05:f7:9f:4f:
                    a0:3b:02:88:2b:aa:ab:95:b6:4c:e8:7b:da:57:28:
                    ee:8f:cd:50:f4:82:49:55:bb:62:18:a9:b8:50:9c:
                    f9:7e:87:01:e4:9c:bb:73:a6:c7:0b:09:90:93:24:
                    d6:43:4c:bd:f9:28:d4:12:27:78:5f:44:a0:03:68:
                    02:1d:22:cd:90:ca:86:e4:59:e8:77:ee:9c:ec:7b:
                    f5:d1:85:78:ec:a2:e5:5d:c4:5d:ac:2e:d6:b4:e8:
                    3b:f1:9f:67:c1:29:d9:78:2b:65:b2:08:b3:d9:74:
                    8a:7a:5a:e6:b1:84:fb:ee:52:db:d4:88:04:63:a9:
                    0f:2d:37:b2:d6:b0:1a:95:20:ff:c6:7e:05:f4:55:
                    d1:4d:ee:fe:b4:f0:d4:2c:d9:b9:53:b2:59:d5:7e:
                    cf:1f:c5:41:51:fe:a0:45:e7:2f:23:a1:92:63:9b:
                    8d:0f:e1:18:24:7a:1b:55:a4:ab:42:af:39:3f:89:
                    8d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:D4:30:09:58:AE:D4:9F:2E:0A:FC:B2:60:23:F7:CE:67:05:9E:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/6d49050d-1eaf-33de-a66c-2eecc8f794c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.228.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:c7:81:0a:c2:73:1b:2a:df:c7:27:ba:24:26:b8:67:38:b8:
         69:ea:e7:f4:67:cc:7b:90:38:04:fb:b1:06:4c:6a:47:23:0b:
         ef:f1:49:94:ce:3e:29:fe:58:57:5a:6e:47:e7:1c:40:0c:c3:
         ab:4b:42:7d:a6:b1:4b:88:02:a5:4c:90:72:07:82:9f:c7:bd:
         2a:c0:b7:43:9d:0b:fa:52:5a:11:28:de:d0:12:b5:c3:82:4e:
         0d:e0:02:3b:60:64:f7:51:6d:28:d0:83:93:6a:4b:c3:06:d1:
         15:b6:f0:c0:98:46:3c:bd:69:46:f1:e0:f1:11:f2:53:cb:92:
         0b:d1:46:ae:a2:45:4c:50:d4:8f:e8:2d:d2:cb:a4:82:d5:f2:
         35:46:7d:37:6d:90:78:42:db:cd:fa:d7:5f:54:43:3a:11:23:
         80:42:c6:a3:30:cb:fb:6a:d1:57:35:9e:70:bf:d9:98:86:a9:
         97:db:f2:30:b7:e5:e9:1a:a1:c8:a8:7a:95:00:9f:43:75:c5:
         c3:7b:ce:8a:e8:1b:17:71:9c:fc:82:d0:2f:49:84:1e:64:df:
         f4:92:12:61:47:af:ef:3d:88:94:0d:b3:d0:73:2f:e9:03:46:
         1f:b0:07:34:e4:da:bf:a6:31:d2:9b:8b:a8:6a:20:08:bb:01:
         04:92:0f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:30:31 2025 by rpki-client