Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/b471a838-37ef-33b5-8d06-1deacc3e9618.roa
File:                     b471a838-37ef-33b5-8d06-1deacc3e9618.roa (raw, json)
Hash identifier:          pps7VaEGvyvWpewWzh/pOP9mXVTI7/6VTOoQlGDnzJo=
Subject key identifier:   7D:D5:88:EE:77:8A:E6:9F:0C:38:36:40:02:3F:54:A8:05:FD:B6:28
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584D703FD12869BBFBADC9DDE640
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/b471a838-37ef-33b5-8d06-1deacc3e9618.roa
Signing time:             Wed 08 Apr 2026 13:00:33 +0000
ROA not before:           Wed 08 Apr 2026 13:00:33 +0000
ROA not after:            Tue 07 Jul 2026 13:00:33 +0000
asID:                     1239
IP address blocks:        140.228.22.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:3f:d1:28:69:bb:fb:ad:c9:dd:e6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Apr  8 13:00:33 2026 GMT
            Not After : Jul  7 13:00:33 2026 GMT
        Subject: CN=b2502b15-9294-4567-bea9-9057053524a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:04:79:9b:52:ee:b1:6c:c1:bc:a1:a4:ec:de:
                    7f:d9:34:4b:a1:ab:87:a5:d9:3a:ce:35:bf:c3:9b:
                    12:7e:fb:4c:9a:44:9a:73:9c:af:4f:c3:4b:f5:36:
                    3c:5c:d7:8e:f3:3c:aa:08:d6:ec:3c:6e:d8:d2:c8:
                    3b:db:cf:07:9d:bc:ef:ff:02:20:f2:97:14:bf:ba:
                    6e:1a:12:b8:46:01:0b:83:2c:8b:5c:7e:2a:14:5c:
                    1a:c8:50:e2:09:68:75:75:a3:eb:89:70:67:ee:29:
                    1f:5c:ab:39:a0:d6:37:6d:28:ba:05:34:4e:7c:87:
                    76:21:2a:87:1d:99:cb:5b:81:d5:3f:b1:17:53:b9:
                    fc:a9:b6:f2:cc:a7:f2:2e:c7:b5:07:c8:be:a0:8c:
                    f2:3b:78:42:35:b3:88:02:82:1d:05:b6:67:f9:d0:
                    18:24:02:ee:0f:31:db:15:c1:f9:5b:4f:76:d9:5d:
                    87:63:7b:fb:3f:27:55:f4:55:9e:c9:47:e1:9a:73:
                    fb:74:44:4f:91:22:dd:c9:c4:e3:8f:91:b7:21:0c:
                    80:fb:f0:24:49:6f:67:9a:8d:c9:74:42:e2:31:a4:
                    a6:5e:cb:19:ba:9c:13:70:51:9a:91:5d:bf:b3:60:
                    94:ba:6b:0a:ad:a4:60:87:4e:c9:86:3f:54:4e:dd:
                    f8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:D5:88:EE:77:8A:E6:9F:0C:38:36:40:02:3F:54:A8:05:FD:B6:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/b471a838-37ef-33b5-8d06-1deacc3e9618.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.228.22.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:94:d7:a2:ce:17:50:14:7b:19:8c:c3:fb:13:ac:af:c8:8e:
         c2:f8:7f:25:cb:b5:bd:3c:59:1a:77:79:c4:17:fd:75:84:d0:
         7e:36:3c:13:89:ff:7d:a6:b9:b6:ed:85:d9:aa:58:b3:fd:71:
         76:e6:6e:61:22:bf:ae:a4:a6:d6:0b:31:64:aa:2e:a9:8c:4b:
         cb:31:c7:39:fe:29:1a:7d:dd:c6:5f:c8:da:35:aa:ff:0c:6f:
         41:bb:9b:dc:e0:0a:a3:f7:56:12:20:bc:dd:96:d5:cf:3b:df:
         e5:25:b6:b4:a0:14:f1:69:12:7d:b7:8e:6c:56:a6:e4:b4:33:
         46:16:e3:83:14:49:c7:8a:75:51:10:28:14:46:75:00:21:f7:
         f4:b1:a3:53:10:4c:41:38:e1:64:e8:76:81:c2:88:6f:07:9a:
         2f:4a:9d:d0:51:07:1b:d2:0e:8f:1f:37:cd:9c:eb:90:7a:12:
         e6:14:1d:53:a7:1b:77:83:92:32:e8:62:96:51:9d:24:e0:22:
         3f:ab:4c:68:a9:38:01:aa:ec:2a:f7:80:17:39:0b:2e:7f:03:
         ac:e1:be:7e:0f:d4:88:21:d1:1e:19:3a:4b:5f:17:e5:2b:ea:
         28:23:99:e1:17:f3:75:da:12:e9:29:6b:06:6b:a2:91:75:66:
         aa:1b:1e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:37:37 2026 by rpki-client