Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/f16f2a16-1247-3fed-b9db-fb4cbc9977e7.roa
File:                     f16f2a16-1247-3fed-b9db-fb4cbc9977e7.roa (raw, json)
Hash identifier:          ARJAjEHmnh6G+tJ3b5uGl28WVerhY/sKh5m329+bHpc=
Subject key identifier:   E5:C6:EF:40:76:41:F4:09:7E:7C:0F:38:B6:B5:63:49:38:19:6B:7D
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584AE2FBC13C51D535236F8A8600
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/f16f2a16-1247-3fed-b9db-fb4cbc9977e7.roa
Signing time:             Sun 17 Aug 2025 13:00:41 +0000
ROA not before:           Sun 17 Aug 2025 13:00:41 +0000
ROA not after:            Sat 15 Nov 2025 14:00:41 +0000
asID:                     199737
IP address blocks:        140.228.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e2:fb:c1:3c:51:d5:35:23:6f:8a:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Aug 17 13:00:41 2025 GMT
            Not After : Nov 15 14:00:41 2025 GMT
        Subject: CN=2a937735-e148-436c-83bd-25f3df186fab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ce:08:4b:21:38:76:05:e7:32:ed:9d:52:4d:
                    82:ad:8b:d5:d2:f2:4b:60:dc:8b:20:71:a5:69:b3:
                    e5:f4:b5:94:99:a3:bd:3d:d4:a0:d0:46:3b:ac:e9:
                    54:9f:9d:dc:b4:44:35:7e:6f:fa:9a:94:b0:f7:e1:
                    0b:f0:10:24:09:d3:92:c1:de:35:22:23:86:3f:11:
                    b1:91:e1:0b:a0:cc:16:59:fb:2e:30:cc:5c:72:9e:
                    66:fe:bf:83:c2:23:ea:48:52:14:94:6d:06:0d:66:
                    84:14:97:97:4c:ec:45:1d:34:7b:6d:a0:e5:27:32:
                    d2:b5:6f:df:d3:e4:43:c3:91:98:db:37:c3:f7:97:
                    ff:f1:12:71:f3:c5:ae:ef:c6:4e:54:8d:aa:83:5d:
                    a5:50:1d:c0:95:b4:ab:08:74:15:0b:cd:73:e2:ae:
                    b1:a6:c9:a1:83:56:72:ba:cf:1f:e5:bc:84:cb:fb:
                    c7:65:0a:1f:af:98:be:e0:7e:67:fa:61:bb:de:bb:
                    a3:03:bb:b4:cd:fd:e2:b0:e2:bf:89:55:21:9b:4b:
                    8e:b7:fa:ba:73:a0:54:01:a9:4c:a8:bd:f1:f4:f5:
                    85:2e:91:c8:0d:65:78:ad:16:c7:86:ee:b4:0a:d9:
                    06:13:25:4f:8c:f3:67:28:ff:97:f1:eb:b4:f0:1a:
                    20:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:C6:EF:40:76:41:F4:09:7E:7C:0F:38:B6:B5:63:49:38:19:6B:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/f16f2a16-1247-3fed-b9db-fb4cbc9977e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.228.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:53:28:f7:d2:32:46:d4:63:59:c3:cf:ab:a1:a4:dd:9b:de:
         dd:c7:00:6d:57:a1:4c:e7:c0:d9:b3:b7:b0:af:e9:d1:59:86:
         7a:00:19:4f:fc:f7:6b:07:39:a3:1f:d6:a0:db:ef:39:f8:d7:
         d7:ad:55:d8:c7:ec:42:c3:e6:fe:2e:47:70:d4:77:7d:82:b3:
         de:79:1e:70:39:db:2c:34:cb:70:88:c9:ae:c5:13:f5:b6:a8:
         7e:e6:3a:12:12:e6:a6:eb:c7:bc:21:75:7d:77:ef:c9:ad:87:
         5d:d8:9b:2f:9a:c8:b9:cd:8c:50:f5:8f:82:b3:2d:e7:85:ce:
         80:1b:66:a5:09:a4:4a:29:d4:5c:a0:37:bd:21:75:6d:c7:65:
         89:12:20:29:0d:f9:0b:ad:e8:0a:5c:ef:37:34:3a:24:bc:a5:
         86:99:51:5a:58:6a:74:aa:70:f5:e6:d6:b0:f6:da:cc:1a:a7:
         2a:e2:07:e4:92:85:e4:ae:39:47:7b:eb:e9:3c:83:90:ea:14:
         ef:b7:d7:fd:16:34:67:a5:7e:ba:20:3d:50:81:d0:ae:c9:3d:
         a8:64:79:11:1d:01:d1:df:2a:e2:f4:ea:2f:a8:f6:68:9a:a9:
         39:0e:88:f3:3a:eb:bf:0f:0f:a7:79:b2:fd:95:16:96:71:82:
         cc:4b:29:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:40:01 2025 by rpki-client