Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/28d5ba8f-0f4b-3f95-a9a5-ed8a41d3d0e9.roa
File:                     28d5ba8f-0f4b-3f95-a9a5-ed8a41d3d0e9.roa (raw, json)
Hash identifier:          48EYOjV2Cl2QU5GMlCY3vxIMzIhc57JSnH0KoTABjfQ=
Subject key identifier:   18:AE:FD:EA:B2:EF:AD:9E:23:58:14:C6:5A:E8:4F:A5:8C:94:6F:AF
Certificate issuer:       /CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Certificate serial:       010D0C9F4328584D746FCF88B4ED7B36BDA61F00
Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/28d5ba8f-0f4b-3f95-a9a5-ed8a41d3d0e9.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     7018
IP address blocks:        23.227.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:cf:88:b4:ed:7b:36:bd:a6:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=1d31f8ad-943c-4e13-82ca-b6b29a64219a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cc:8e:7d:77:aa:3f:2b:9c:18:77:90:1f:d7:
                    66:b4:cd:1c:76:3f:ae:b4:a1:7f:f6:c4:38:71:43:
                    4b:e7:e4:5e:f5:14:1e:3f:73:4f:40:90:6d:6e:a5:
                    83:50:c9:a9:61:db:b9:16:97:2b:92:b7:9e:1d:b9:
                    d8:70:a2:96:1b:af:0c:f8:b4:4d:87:ec:f9:e5:2b:
                    d0:a2:f3:40:ce:c2:81:a1:a2:30:2a:b5:6b:cc:87:
                    aa:0c:f5:2b:88:c2:71:63:d0:33:93:87:6a:d5:b0:
                    99:3c:10:bb:16:53:01:fe:39:3e:8b:05:4b:bf:24:
                    6d:79:6b:22:7e:1a:9c:38:11:3a:2c:a8:3b:b1:db:
                    07:1f:fe:f0:9f:4f:d7:48:db:9b:b5:d3:07:4a:63:
                    a0:4c:34:fb:d8:d8:f4:11:a6:48:4e:94:97:dc:08:
                    79:7e:eb:ca:75:a1:6e:59:14:d1:ae:77:e7:9e:a2:
                    e8:12:d8:01:4a:63:be:c7:23:36:d1:aa:98:9c:a7:
                    9e:04:00:dc:41:2f:9e:18:fb:a4:73:13:a3:33:91:
                    db:48:7f:54:4f:50:97:28:14:89:c6:00:4c:1e:4e:
                    a3:35:be:49:f4:4c:7c:6f:95:f5:34:75:e3:49:8d:
                    63:dc:ab:86:3d:70:1b:ca:d3:9a:ac:52:0c:cf:35:
                    d9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:AE:FD:EA:B2:EF:AD:9E:23:58:14:C6:5A:E8:4F:A5:8C:94:6F:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/28d5ba8f-0f4b-3f95-a9a5-ed8a41d3d0e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl

            X509v3 Authority Key Identifier:
                keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.227.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:9c:9b:7c:bf:12:a0:89:af:bb:be:88:9b:1e:34:9c:41:be:
         30:d1:72:35:b4:22:8b:7d:ff:b5:fc:48:8d:cc:5c:ba:78:d6:
         32:d0:aa:85:d2:f0:f8:94:1e:f5:52:6e:5d:ef:a8:5b:d8:f6:
         e1:ed:77:3d:e1:17:7c:64:9f:a7:a8:4a:67:14:73:dc:5e:f9:
         09:b3:c0:48:80:b0:3a:79:78:56:b6:5b:79:75:36:e4:4f:78:
         f3:20:ed:54:fc:35:ad:ef:b3:e1:c6:6e:be:55:3b:89:fa:f0:
         00:25:19:1a:6f:09:67:d2:fc:63:b3:15:0a:9d:a1:ab:6e:6b:
         fb:ca:6b:27:dd:1c:7d:85:b7:86:12:1c:54:f6:2b:8b:d4:33:
         74:10:76:9d:61:54:8b:6a:1d:f6:f4:29:55:7a:29:a5:1c:72:
         e7:a4:d0:57:2d:70:fa:cf:4f:ee:dc:eb:80:8a:1c:b0:a5:36:
         6e:1e:c2:fb:4d:9b:fd:56:aa:83:df:19:4e:7c:68:aa:c5:26:
         35:cb:d1:fc:b9:76:32:1c:5f:60:e5:30:ae:a7:08:60:a6:59:
         bb:0d:fc:f0:0f:0c:38:90:e5:7e:04:46:20:c5:d2:5f:f3:49:
         f5:7f:c6:fe:36:4b:52:01:88:20:21:7c:ef:9c:54:02:bd:62:
         91:83:f8:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:06:08 2026 by rpki-client