Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/28d5ba8f-0f4b-3f95-a9a5-ed8a41d3d0e9.roa
File:                     28d5ba8f-0f4b-3f95-a9a5-ed8a41d3d0e9.roa (raw, json)
Hash identifier:          kIE3nYyBf7KAHm+SaqFMNrnwxsrDwqL/x+2nvPz2x8Y=
Subject key identifier:   6F:A3:9B:E5:92:50:6D:DC:E7:C0:D0:E1:D4:BE:0A:31:97:19:AC:31
Certificate issuer:       /CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Certificate serial:       010D0C9F4328584AD23BC27E031D07BF2C3B7F40
Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/28d5ba8f-0f4b-3f95-a9a5-ed8a41d3d0e9.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     7018
IP address blocks:        23.227.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:c2:7e:03:1d:07:bf:2c:3b:7f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=06a6ed12-9e6e-4ac3-ad81-c533bee17781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:cf:42:04:30:fe:d1:69:e2:46:8e:47:1c:31:
                    51:e4:a3:ea:f9:83:c0:58:69:2d:9b:16:f1:2b:96:
                    69:9f:c0:24:83:74:0d:bb:ff:93:63:81:c0:25:43:
                    87:3b:70:4f:1f:9d:00:a1:19:00:11:95:2f:a0:8a:
                    d2:a3:57:a2:8b:f1:bb:5e:49:3f:44:29:93:21:ce:
                    ca:58:f8:c6:b9:ce:7d:d2:9c:14:c7:f3:3c:78:31:
                    60:d8:61:ce:c1:e9:70:b7:39:1d:fc:ee:f7:d9:fe:
                    d3:ec:9f:bf:04:e5:85:8f:73:b8:d8:0b:3d:76:3d:
                    c1:91:09:bb:f2:2a:08:8e:9c:bf:4e:90:20:86:48:
                    5e:b5:93:73:7f:68:09:39:c1:15:75:3e:81:1d:96:
                    77:09:59:3d:2d:99:9c:cc:b4:86:91:d1:0a:c1:f9:
                    08:cf:b7:54:00:02:1c:34:67:4b:5a:2d:6c:12:ba:
                    98:06:f7:c5:48:47:13:f8:c4:fb:e6:dd:9c:63:73:
                    3d:af:65:f3:31:4c:42:2c:93:ca:7e:a5:e0:d2:0b:
                    07:6d:55:35:70:68:12:a3:a2:bc:44:40:67:57:3a:
                    ed:7c:49:17:10:ca:b8:ca:d7:9d:23:52:9d:0f:ba:
                    6e:ce:07:90:1d:5d:ca:1f:9e:79:0c:af:9e:c3:4a:
                    7f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A3:9B:E5:92:50:6D:DC:E7:C0:D0:E1:D4:BE:0A:31:97:19:AC:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/28d5ba8f-0f4b-3f95-a9a5-ed8a41d3d0e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl

            X509v3 Authority Key Identifier:
                keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.227.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:55:46:83:33:c7:46:10:89:12:72:b9:e1:fd:9c:86:a4:8e:
         53:f6:de:bc:a5:05:58:58:c0:cd:9d:e5:fd:ed:b9:f3:8e:96:
         da:94:05:94:3c:2e:2e:6f:fe:b1:8b:65:de:3f:68:58:b4:03:
         be:f3:e2:5c:87:4c:a5:70:34:28:f0:b6:c2:07:b7:43:6e:2b:
         cb:64:d1:01:46:d6:20:09:26:a6:9b:ea:16:57:7c:19:2b:48:
         be:c6:68:62:3c:54:6a:98:a4:05:d9:cc:c4:72:50:f1:f9:c7:
         4c:b6:88:2b:fa:06:c1:51:c4:ee:e4:f2:48:db:3d:ce:42:52:
         47:89:ab:46:15:7d:81:d2:ce:ef:53:f4:b9:71:0e:69:6f:70:
         e9:c0:dc:2c:42:e6:99:9a:7e:61:8c:f7:56:1c:43:23:79:9f:
         a7:6c:c2:a7:32:39:58:10:83:36:fd:61:6b:e3:0a:77:aa:a5:
         18:7c:fc:d2:33:fb:e4:d8:ad:1d:c6:ec:40:6c:7a:75:8a:c1:
         3d:95:f0:a3:b4:79:76:e6:42:3e:90:96:f1:73:76:3e:dd:2e:
         b9:1e:4c:06:50:f3:78:bb:d6:26:70:85:87:cb:7b:e0:5a:39:
         44:13:59:f8:52:4f:fb:27:16:ec:f3:e7:81:20:c9:1c:97:73:
         de:cf:b1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:31:05 2025 by rpki-client