Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/058be8cf-8236-3d85-a825-36bb095a41a1.roa
File:                     058be8cf-8236-3d85-a825-36bb095a41a1.roa (raw, json)
Hash identifier:          zWPW3sqCx6uNczCkgBdRUskohIvmV9Ph0/LKK2XkY2o=
Subject key identifier:   8E:86:1E:17:29:2D:9E:99:07:2E:5B:CC:C5:85:4E:47:08:60:E3:3C
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE196646450B9C6366BEFC180
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/058be8cf-8236-3d85-a825-36bb095a41a1.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     36522
IP address blocks:        207.236.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:64:64:50:b9:c6:36:6b:ef:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=1b09d01d-9ff2-44b7-9455-8c69ad67b8ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e7:6d:da:66:9c:04:8a:9b:88:19:6b:c7:c5:
                    3a:e4:a2:b5:0c:1f:14:81:0e:81:cb:93:3e:ff:9a:
                    6a:7f:4b:f8:0d:e4:c6:85:ba:56:77:ee:e7:df:73:
                    79:c3:e1:fb:35:67:ab:13:09:bd:ce:92:7e:0e:ab:
                    f0:2a:44:2c:f3:e3:f2:e4:9a:f0:fa:55:de:bd:f0:
                    aa:b1:b6:0d:1c:aa:41:b4:95:27:1b:e0:e0:0e:ee:
                    2f:1a:43:80:a8:61:0e:ea:38:7a:be:1f:fe:e0:8a:
                    3d:5e:95:a9:d6:ae:5d:8e:67:10:bd:c3:51:c1:da:
                    7f:70:fb:80:c7:5f:a9:38:22:43:ee:9e:bc:50:99:
                    50:74:ae:07:89:8d:49:be:ba:bd:8d:29:82:01:31:
                    68:43:07:71:9e:5b:9c:64:a6:54:03:75:27:95:29:
                    61:f5:b3:ed:fb:30:18:36:df:03:2c:ae:a4:ae:ed:
                    0a:b1:10:e0:51:76:64:a8:fb:dd:cc:c3:c7:d6:72:
                    37:fe:be:ea:c1:0d:8b:e8:64:05:64:6e:2e:ca:d5:
                    fe:10:41:7c:df:fc:31:e2:dd:75:cc:39:bb:a2:32:
                    7c:5d:74:1f:8d:5d:af:9d:00:a4:31:b4:1c:bc:29:
                    2c:40:04:32:d9:d3:88:65:37:6d:ef:0e:c6:36:17:
                    ec:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:86:1E:17:29:2D:9E:99:07:2E:5B:CC:C5:85:4E:47:08:60:E3:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/058be8cf-8236-3d85-a825-36bb095a41a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.236.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:b4:04:13:24:c1:da:d7:0e:e5:2e:5a:e4:1e:50:a1:6a:59:
         06:84:0b:52:41:da:46:df:ab:6a:9f:cd:49:25:e9:62:c2:c6:
         df:a6:50:8f:2c:53:e2:01:4d:3a:5f:71:9e:26:5d:98:ac:3f:
         78:ac:b5:2c:98:c9:1b:c8:70:cb:5c:20:60:10:e8:a7:9c:1e:
         cd:b9:99:ab:ff:6a:6f:8c:1f:85:72:bb:66:b0:0f:f2:a2:17:
         5a:04:3a:62:8b:b7:db:01:8d:1e:c2:dc:53:3a:22:d9:34:3c:
         2b:b4:a5:a4:ba:12:75:e8:3c:64:25:4a:9d:63:e9:bb:1f:0e:
         b6:f5:8a:3f:89:24:b0:17:96:bc:e4:3d:9a:1a:d5:50:4a:5d:
         78:4b:5e:ce:3d:78:c6:45:e9:10:ae:16:2e:cd:7d:97:0b:2a:
         27:29:c6:42:97:ed:4a:92:e1:e2:7d:7b:73:84:db:0c:6f:65:
         96:67:5c:46:12:61:c6:b7:eb:b2:29:23:24:2a:e1:8a:b1:a5:
         d3:08:f8:2b:72:f1:27:5d:92:d3:87:ba:f9:f8:02:94:2b:df:
         64:c0:1c:71:d9:b0:c0:2e:b8:b2:1b:11:a8:de:6f:1d:77:aa:
         3d:88:d3:07:21:8f:76:58:af:e2:5d:46:50:bb:20:8c:f9:81:
         62:d9:88:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 08:58:49 2025 by rpki-client