Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/3ce071a0-b8d8-3780-a340-b7da5e2eef95.roa
File:                     3ce071a0-b8d8-3780-a340-b7da5e2eef95.roa (raw, json)
Hash identifier:          D6w5rcjP+S64x7nIKBFB6mRWBRvtacv57+pnjRq1v/8=
Subject key identifier:   E3:00:74:EF:19:CB:C2:BE:5D:70:24:FE:6D:40:45:2B:B3:CC:A6:13
Certificate issuer:       /CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Certificate serial:       010D0C9F4328584B7B21F782ADE66D4E84718100
Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/3ce071a0-b8d8-3780-a340-b7da5e2eef95.roa
Signing time:             Sat 11 Oct 2025 01:00:30 +0000
ROA not before:           Sat 11 Oct 2025 01:00:30 +0000
ROA not after:            Fri 09 Jan 2026 02:00:30 +0000
asID:                     398712
IP address blocks:        23.226.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7b:21:f7:82:ad:e6:6d:4e:84:71:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d
        Validity
            Not Before: Oct 11 01:00:30 2025 GMT
            Not After : Jan  9 02:00:30 2026 GMT
        Subject: CN=1ed53a36-ba05-4613-b394-c4342791f837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:43:20:82:1a:d3:de:ec:42:03:b7:0f:58:88:
                    15:66:29:14:f8:c1:c7:8f:cd:72:b1:4d:81:48:d4:
                    da:fa:2c:f5:e1:91:e8:02:7d:4e:84:aa:bc:c4:88:
                    49:b1:35:38:d4:25:35:58:b8:51:56:8f:de:27:6d:
                    ab:80:6b:b5:d1:16:11:87:e4:f5:ba:1c:20:35:77:
                    f2:04:2e:27:5c:b5:88:8c:bd:04:3a:b6:c6:12:e9:
                    ab:8d:84:9e:35:46:99:1f:2f:29:56:fe:ea:ba:36:
                    cc:55:85:f6:cf:64:0e:22:8a:dd:a9:d5:1f:2a:ad:
                    04:25:53:d3:ad:7f:e4:fa:ef:b1:52:6e:26:c4:36:
                    49:39:e7:13:5a:e4:6c:f6:1c:c9:5f:81:aa:ed:87:
                    b2:97:eb:49:e5:30:88:f2:47:bb:29:65:d5:aa:44:
                    e1:ea:1d:5f:98:54:47:4e:d4:c8:c7:b8:6c:b7:20:
                    17:b0:09:31:31:19:46:c5:8c:8d:b1:4c:e1:9b:73:
                    b6:06:9f:df:24:3d:3d:0d:39:df:94:54:61:25:66:
                    68:ba:79:20:55:64:e3:36:51:e8:83:72:02:3a:4b:
                    af:94:ab:34:da:ec:20:47:11:28:3d:85:f7:26:0c:
                    10:c4:f6:c5:e7:2d:09:35:f6:00:aa:2e:f3:93:4c:
                    3e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:00:74:EF:19:CB:C2:BE:5D:70:24:FE:6D:40:45:2B:B3:CC:A6:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/3ce071a0-b8d8-3780-a340-b7da5e2eef95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl

            X509v3 Authority Key Identifier:
                keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.226.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:75:c1:a9:a2:15:4f:1a:a5:9e:a0:6a:49:6d:29:6a:20:22:
         f6:5d:ff:cc:d0:49:64:2e:b6:fc:8b:d2:64:b8:79:a4:a1:b0:
         b7:9a:14:82:ac:44:a5:98:4d:0c:96:88:48:fa:e1:02:fc:1d:
         19:4d:9e:f2:65:fc:41:59:57:80:67:c1:cb:0f:4d:3c:6f:b9:
         e6:1c:c8:43:27:24:0d:fb:23:db:e7:d4:42:af:f9:2c:fb:eb:
         15:19:f7:5e:c3:12:84:2f:86:f4:9f:f1:98:2a:91:86:43:65:
         70:91:69:a3:54:02:c5:c8:5e:3f:18:b3:7b:20:b8:b6:36:f4:
         37:3d:0b:0c:05:f2:9d:b3:ee:af:b4:a3:7e:52:5d:12:34:c3:
         ef:5c:3e:a5:ce:35:f2:d4:68:e8:69:7e:83:12:7b:e3:87:e7:
         fc:bb:df:73:10:87:03:a9:2c:ca:46:58:ca:10:4c:64:0a:11:
         0b:9f:21:39:bf:82:d9:78:eb:ff:7b:5e:d6:76:c9:57:c9:23:
         c2:61:c7:98:64:d3:09:c1:75:14:65:14:51:6a:fc:18:33:cf:
         e4:9e:60:91:8c:cd:74:2b:1c:55:2a:f7:ca:b3:ad:d3:2a:70:
         33:10:8d:c7:cc:aa:4e:a4:6a:e6:48:e3:71:3f:96:45:f1:08:
         ba:15:69:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:31:26 2025 by rpki-client