Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/ad23cf3e-bbe9-39d7-8093-04fae440dba4.roa
File:                     ad23cf3e-bbe9-39d7-8093-04fae440dba4.roa (raw, json)
Hash identifier:          JRjfMJDC/Bd0Lj/wsAnikSYAfKvj9ATMyYeUnVL/m/E=
Subject key identifier:   D5:8C:EC:1B:3F:99:5E:B6:E9:84:66:44:31:DC:70:08:EC:93:23:7B
Certificate issuer:       /CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Certificate serial:       010D0C9F4328584AAB26663EBC8381CECA8E3580
Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/ad23cf3e-bbe9-39d7-8093-04fae440dba4.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     265753
IP address blocks:        23.226.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:66:3e:bc:83:81:ce:ca:8e:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=28f1f3fc-32d3-4b38-a7d7-1f8e68fd5d17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9f:25:b2:36:45:e3:ce:08:f6:1a:95:a3:ef:
                    f1:81:d8:95:7d:c2:d5:52:1e:d2:a9:d4:8e:77:aa:
                    49:c8:3b:db:f2:12:71:2e:14:3e:70:a6:76:91:be:
                    c8:af:61:34:36:42:30:06:e0:bd:c5:ad:d2:71:bd:
                    55:4f:09:c8:69:35:23:49:1c:2f:7b:45:63:24:92:
                    8e:b7:9b:e7:8d:cc:62:5e:b1:9e:74:d6:30:ad:e4:
                    ec:27:54:15:0c:68:ae:9d:97:39:a4:94:5a:8c:02:
                    14:4c:8a:33:25:d9:91:86:97:16:2f:f3:96:32:6d:
                    36:bc:c1:43:b7:6e:7c:77:aa:24:9b:4e:d6:f8:80:
                    a4:e2:ae:6d:b7:ce:0c:91:05:0e:61:b3:4d:10:0e:
                    05:99:08:e9:f8:59:2d:14:c8:a5:4c:e6:99:c0:8b:
                    fd:7b:0b:14:47:80:f7:b1:fc:b1:da:0b:2f:42:99:
                    d9:99:40:c0:50:da:ac:fd:a7:07:0d:9a:3c:dc:b2:
                    7b:99:bd:8f:63:0a:3c:3c:1c:0e:28:78:77:dc:11:
                    b3:26:36:24:0b:e6:d6:d0:e0:09:96:51:47:3d:9b:
                    78:22:7a:bf:26:69:25:44:c8:3f:df:f0:1b:89:b9:
                    15:12:c7:1b:4a:3e:90:e3:46:17:5e:44:89:66:4a:
                    9b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:8C:EC:1B:3F:99:5E:B6:E9:84:66:44:31:DC:70:08:EC:93:23:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/ad23cf3e-bbe9-39d7-8093-04fae440dba4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl

            X509v3 Authority Key Identifier:
                keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.226.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:26:f8:b0:5b:ec:9b:62:e2:b8:a0:90:c4:1f:5a:28:53:9d:
         f1:c3:b1:cb:39:ae:56:a1:31:b5:f8:ad:54:64:f2:37:58:25:
         0d:e1:a1:f7:08:76:01:9a:ed:33:a0:ab:5e:35:26:bf:c9:1f:
         c3:f2:7d:b0:41:7d:37:be:0e:2b:9e:d9:a3:9c:50:bc:77:70:
         35:4f:3e:f9:00:59:ad:50:30:f1:88:7d:c6:16:6e:53:13:25:
         e6:da:d6:89:2f:f1:97:92:8a:96:75:b8:2c:44:a8:b3:4e:28:
         e9:ca:bf:3f:82:b1:e4:02:18:4a:51:65:29:b9:88:56:09:1b:
         fd:27:7c:db:06:c3:e4:27:47:20:ab:0f:4b:e2:17:d5:ff:a2:
         59:56:55:e4:09:36:09:e7:2a:3c:60:2e:5a:ce:31:11:f9:9b:
         70:e9:c3:69:e5:34:a2:09:0b:40:f2:4f:69:df:af:7f:4a:34:
         0e:da:8e:9f:82:87:d5:d1:64:a9:fa:61:16:c3:17:54:88:f5:
         58:8f:fb:09:c3:0f:64:58:d0:25:c1:96:fe:02:83:c6:28:e9:
         99:3d:7f:68:61:43:da:7c:41:a6:2f:1b:3a:cd:cd:35:ba:e8:
         1c:c6:75:de:cf:94:37:06:cb:eb:e7:bd:b2:49:c3:c2:27:c3:
         7c:09:a2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:36:34 2025 by rpki-client