Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/a07336de-3104-3f62-a4a8-0a52fd6edb4e.roa
File:                     a07336de-3104-3f62-a4a8-0a52fd6edb4e.roa (raw, json)
Hash identifier:          kzoPugu2l3t5eBTfN2A5baoAtooCa9gttVXNdtMY2k8=
Subject key identifier:   32:B9:47:D2:86:0F:28:0C:F5:A7:BC:B4:A3:46:3B:BC:34:C0:F6:52
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584B1BA417BC2CD8995F343CBBC0
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/a07336de-3104-3f62-a4a8-0a52fd6edb4e.roa
Signing time:             Sat 06 Sep 2025 20:05:09 +0000
ROA not before:           Sat 06 Sep 2025 20:05:09 +0000
ROA not after:            Fri 05 Dec 2025 21:05:09 +0000
asID:                     16509
IP address blocks:        140.228.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1b:a4:17:bc:2c:d8:99:5f:34:3c:bb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Sep  6 20:05:09 2025 GMT
            Not After : Dec  5 21:05:09 2025 GMT
        Subject: CN=f2d014a7-2d49-4de9-9974-bf89747f08c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:4f:2c:fe:ae:34:1b:48:81:9b:a5:8d:cb:0f:
                    cc:e1:00:07:58:86:a4:65:f4:f7:79:17:fe:af:c1:
                    51:91:90:94:aa:2d:3a:6c:89:b0:76:01:b2:f9:ff:
                    fd:e1:89:e5:40:c9:51:53:97:e1:bc:96:c7:9a:22:
                    1e:f8:b7:02:ec:8c:45:16:db:75:2d:7f:ed:34:ee:
                    31:f4:dc:24:1d:7a:c5:26:76:ad:3a:04:ac:76:43:
                    63:ca:e9:d1:34:09:4f:a3:d3:95:7b:c1:d3:9a:d0:
                    10:67:84:cb:c5:29:61:64:1d:c7:08:43:9e:52:60:
                    33:08:d5:f9:48:9b:4d:a9:c5:b3:3a:2e:9a:6b:74:
                    70:32:0e:cc:b0:9a:d3:5c:32:a1:63:ab:78:f8:5d:
                    28:9b:d4:67:51:e5:df:86:b4:21:49:1e:6a:cc:ef:
                    91:e7:0f:ed:9c:c1:5e:8e:bf:e2:a7:f2:c9:b7:62:
                    13:28:25:91:b8:dd:02:f9:a2:7a:0e:1c:b3:97:bf:
                    66:66:3c:68:11:c2:99:59:39:ff:25:dd:9d:33:2a:
                    90:a7:54:97:85:89:81:28:06:e8:ee:fb:8f:10:3a:
                    19:86:0e:72:04:f4:89:49:48:d5:c3:2e:4f:8e:6e:
                    f8:f4:97:c5:85:8c:ff:2f:bd:67:3d:4d:d5:a2:01:
                    55:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:B9:47:D2:86:0F:28:0C:F5:A7:BC:B4:A3:46:3B:BC:34:C0:F6:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/a07336de-3104-3f62-a4a8-0a52fd6edb4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.228.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:e4:28:71:64:49:2c:68:95:4b:46:22:67:b2:b1:b9:1f:0b:
         ed:98:e6:9b:ad:67:75:30:93:97:22:8c:13:55:c1:3c:81:1b:
         f1:a0:61:40:1e:85:0b:20:8c:50:7a:d8:a3:b2:02:6e:59:1e:
         5b:91:8e:e1:f2:53:7b:50:f6:9a:ec:93:dc:8c:e0:34:c8:67:
         43:3b:22:f5:80:f4:1a:71:7e:de:7c:90:7e:c4:85:c0:09:af:
         9f:d8:37:45:74:07:a9:06:01:c4:c6:17:6a:43:89:8d:95:52:
         e9:57:bc:e2:f8:92:aa:3a:f0:03:eb:70:08:eb:2f:91:55:9f:
         fa:f7:f8:6b:a9:12:26:9b:3f:03:6a:9c:61:43:58:9b:9a:5b:
         15:42:2d:5c:6e:c2:ce:db:f2:5b:20:bc:36:21:2f:6c:a2:26:
         79:3e:94:71:00:5d:93:8e:cd:d4:4f:fa:a1:69:d8:f4:1d:5f:
         c3:c0:39:bb:b1:8d:71:a3:37:d5:12:f7:66:7f:4c:5c:0e:26:
         8d:48:74:2c:6d:08:72:2f:e6:b4:a9:09:d4:2c:b7:0d:5c:ef:
         9c:c2:78:47:43:14:d0:f6:97:cf:20:ca:79:03:69:15:e7:b2:
         82:7e:74:c1:75:47:2b:77:d7:87:83:41:92:7c:74:cf:43:96:
         11:82:2a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:43:20 2025 by rpki-client