Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/68ace997-f606-393d-a539-82254e71484c.roa
File:                     68ace997-f606-393d-a539-82254e71484c.roa (raw, json)
Hash identifier:          rP7I7GM9yfaWNXBwGeQFnbg8SQP7tDcfvyVfoxZzQzw=
Subject key identifier:   26:C1:3F:A5:8E:1A:66:12:42:CE:05:1C:9C:C5:B0:56:5A:80:AA:EF
Certificate issuer:       /CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Certificate serial:       010D0C9F4328584B5571E77D9487D4BA26C88C80
Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/68ace997-f606-393d-a539-82254e71484c.roa
Signing time:             Sat 27 Sep 2025 13:00:41 +0000
ROA not before:           Sat 27 Sep 2025 13:00:41 +0000
ROA not after:            Fri 26 Dec 2025 14:00:41 +0000
asID:                     7922
IP address blocks:        23.227.64.0/22 maxlen: 24
                          23.227.92.0/22 maxlen: 24
                          23.234.144.0/22 maxlen: 24
                          23.234.152.0/22 maxlen: 24
                          107.166.16.0/22 maxlen: 24
                          107.166.20.0/22 maxlen: 24
                          107.166.24.0/22 maxlen: 24
                          107.166.28.0/22 maxlen: 24
                          107.166.96.0/22 maxlen: 24
                          107.166.100.0/22 maxlen: 24
                          107.166.104.0/22 maxlen: 24
                          107.166.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:55:71:e7:7d:94:87:d4:ba:26:c8:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d
        Validity
            Not Before: Sep 27 13:00:41 2025 GMT
            Not After : Dec 26 14:00:41 2025 GMT
        Subject: CN=a00cba29-c3a1-4bfc-84d9-8fa898ca1f19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:88:8f:ab:c3:93:c1:74:9a:cb:66:10:b6:0f:
                    64:35:93:09:3f:fd:ad:35:22:4d:44:e8:db:4a:95:
                    5c:70:fa:95:c1:dd:e9:34:c5:d6:a6:b4:ef:5e:6b:
                    ac:01:ae:3b:2e:97:5d:7f:46:7e:f0:39:e1:83:c5:
                    c0:22:a2:90:83:a3:f3:c0:24:7f:c9:8c:b4:3d:8a:
                    62:9a:e5:08:af:f9:82:45:37:0d:d9:0d:c0:2d:e1:
                    6e:a1:af:32:b2:71:f3:62:9a:57:2c:1e:57:16:8b:
                    8e:9f:c6:72:f0:d7:64:44:f3:cc:8d:be:54:c1:e4:
                    8b:d8:96:32:28:15:a8:17:27:aa:50:71:60:7f:bf:
                    ac:ed:4e:42:60:b1:a2:fa:1a:1e:71:f6:7e:1a:f5:
                    9c:67:a3:5d:35:74:8a:53:96:c2:fd:2d:3a:b4:fc:
                    85:9b:4a:84:79:14:04:30:14:61:09:23:55:b1:9c:
                    a5:58:fb:5a:27:80:bc:dc:76:9c:e8:e8:4c:b6:b4:
                    6d:8d:11:f0:86:db:95:96:d6:7e:7f:05:e9:4d:ac:
                    6f:ec:df:99:cc:99:b1:73:f9:0e:83:b8:68:f4:33:
                    02:6c:6f:56:b4:5a:c0:79:25:1d:a7:1c:38:26:28:
                    60:42:83:be:37:18:52:19:51:ce:b2:cc:dd:aa:ec:
                    f6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:C1:3F:A5:8E:1A:66:12:42:CE:05:1C:9C:C5:B0:56:5A:80:AA:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/68ace997-f606-393d-a539-82254e71484c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl

            X509v3 Authority Key Identifier:
                keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.227.64.0/22
                  23.227.92.0/22
                  23.234.144.0/22
                  23.234.152.0/22
                  107.166.16.0/20
                  107.166.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:a9:f9:f6:b9:58:6b:2d:01:af:a5:38:55:a9:49:06:80:04:
         e3:06:47:dc:0e:83:73:fe:a3:2f:ca:59:9f:7d:10:31:c1:db:
         e0:04:01:d7:89:fe:ee:5d:e1:2c:e4:8f:7e:e1:85:cc:ae:ce:
         75:8e:5a:8a:86:c3:08:b2:0f:6d:91:82:c8:1e:98:be:96:17:
         cd:04:fa:9a:6d:10:7a:67:a1:6d:17:d6:00:5b:17:b5:90:46:
         c4:a5:2f:e1:05:e1:97:d3:e9:37:7f:a8:a5:ca:79:23:6e:bd:
         3c:d8:2e:8d:c2:6a:d9:42:7d:50:6f:90:51:db:32:11:d8:9d:
         53:05:63:b6:85:c8:c5:94:ff:22:1b:6a:9e:41:11:5b:b7:f4:
         d8:be:dd:ce:d4:16:17:2c:e4:42:50:a0:0c:76:a2:14:6d:a6:
         98:b4:5e:29:ce:7f:70:dd:8c:47:2d:0f:62:1c:bd:4c:45:39:
         6d:cf:46:5b:6f:69:f1:22:83:b0:22:b9:12:43:0a:d8:6b:d9:
         fc:1b:73:03:51:ab:6b:92:31:98:02:e0:e4:7b:f2:07:12:63:
         91:0c:90:62:d3:bf:5e:88:70:e7:c4:81:d5:3a:a8:84:eb:7c:
         b4:a2:b2:ba:53:04:1d:e7:f7:f7:60:4d:fb:8f:d8:6b:cf:26:
         e4:66:7a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:54:44 2025 by rpki-client