Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/dadb8667-9016-3ed9-aec9-53a09735cd1a.roa
File:                     dadb8667-9016-3ed9-aec9-53a09735cd1a.roa (raw, json)
Hash identifier:          eO0wJVfcqHLxio8WSkB0rIMiTEJ7EXeFXwOU+Pc/GhI=
Subject key identifier:   49:36:5B:A7:40:3F:C0:52:1D:B3:07:72:92:53:6F:29:70:39:3D:2F
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584ACCA64F0964012B8B46AA8800
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/dadb8667-9016-3ed9-aec9-53a09735cd1a.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     396073
IP address blocks:        140.228.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:4f:09:64:01:2b:8b:46:aa:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=d20eac7e-7b89-4362-8f63-d0c5645166f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:df:79:0a:08:9f:7f:74:48:c5:5e:3d:95:d8:
                    2a:ba:26:5c:bc:c1:b4:cc:62:e6:40:ae:82:49:c9:
                    c2:f0:ed:83:0c:8c:97:96:05:dd:35:72:a3:5c:d9:
                    66:8f:93:1b:dc:13:81:5a:a7:e0:9e:eb:d7:03:5f:
                    e6:ed:12:52:3e:90:a1:04:c0:9b:9b:c1:ba:07:a6:
                    5f:22:39:7e:f0:03:33:8c:e8:b2:26:81:c0:99:89:
                    3c:8a:d3:1f:37:46:5b:07:aa:79:d6:08:8a:ba:02:
                    5f:0a:fe:1c:91:a7:1e:f6:f1:62:64:2b:47:12:f7:
                    44:43:c5:94:17:c6:58:17:78:30:c7:87:8d:f8:12:
                    aa:c8:99:48:62:da:96:90:ce:76:39:6c:86:76:87:
                    e8:23:4f:23:41:51:b0:a4:6f:23:0b:dc:57:c2:42:
                    81:c2:64:6c:a2:90:58:2f:ea:cc:7b:40:9b:45:1b:
                    3c:2c:90:c7:3a:30:e7:c1:73:8f:11:f3:2d:1f:c4:
                    5d:5c:1c:81:47:c8:b3:a8:b9:02:dc:10:85:cd:a7:
                    06:9d:bf:fb:55:06:15:a9:26:55:19:06:8b:4c:f6:
                    20:03:6f:b6:dc:d1:99:fd:74:b1:ac:d4:bf:da:ba:
                    5b:37:eb:76:ec:e6:dd:6b:c5:f7:e4:27:79:f8:82:
                    d8:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:36:5B:A7:40:3F:C0:52:1D:B3:07:72:92:53:6F:29:70:39:3D:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/dadb8667-9016-3ed9-aec9-53a09735cd1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.228.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:55:3a:49:58:e1:20:dd:60:67:48:89:d0:ea:bf:08:a9:27:
         c0:2d:52:94:6f:f9:26:e0:73:1b:2b:78:84:3d:6c:b7:d2:59:
         c9:1e:4a:79:99:96:7c:db:7a:d3:e6:e4:f1:5b:2b:0c:16:40:
         08:7f:a4:ef:e0:65:fe:ae:e1:01:76:74:f4:5a:20:77:7f:47:
         70:07:cb:b8:7f:65:b8:26:2b:17:55:ff:c4:34:b6:a1:36:b0:
         e8:dc:a4:f1:c2:77:36:94:10:ca:5c:4b:0a:a4:69:1d:f9:e9:
         9a:36:98:b0:84:ac:fd:b6:dd:b3:64:37:41:39:97:9d:d3:38:
         42:d9:9e:87:19:1b:dd:f3:c5:05:04:a7:27:5f:ae:ae:a3:c5:
         4f:ec:fc:2c:ff:ef:58:c5:c5:35:60:cb:bb:57:7a:55:57:6e:
         f9:5a:fc:14:84:e5:9f:b0:35:75:9e:fd:79:fd:39:53:0c:b4:
         79:a3:6b:fa:0f:73:29:b0:96:72:3c:50:16:f7:e0:72:fe:c1:
         68:25:f0:26:97:ec:12:41:cc:6c:d2:c8:21:89:b3:f8:d7:d8:
         ff:b8:bb:42:a1:84:48:51:86:c8:7e:ce:d0:7d:82:48:51:a2:
         f9:29:c5:d2:f9:f3:fb:20:d2:e3:95:9c:94:7c:92:18:67:45:
         f8:a0:b5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:40:54 2025 by rpki-client