Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0d144817-4c47-3884-b7f1-e2ceb372cede.roa
File:                     0d144817-4c47-3884-b7f1-e2ceb372cede.roa (raw, json)
Hash identifier:          o0ItRpb6rsJwssxVOgEiSqenAGyG6jtZ2y6P7m6hJmA=
Subject key identifier:   B1:EE:63:BC:5E:70:BF:0A:EB:E7:0A:CE:64:2C:B4:8A:4A:4D:21:4C
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE1965FA8B7A6BB21919A8E00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0d144817-4c47-3884-b7f1-e2ceb372cede.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     30336
IP address blocks:        207.236.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:5f:a8:b7:a6:bb:21:91:9a:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=d5bd6426-a7e0-4521-bd2f-7d39102a67a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6d:f2:d1:47:b9:91:f8:8e:a3:2f:d5:11:c2:
                    42:34:e6:2d:84:d7:59:f9:eb:b4:69:0a:a3:90:9b:
                    ef:0a:de:2b:90:03:2f:69:77:a8:40:03:d8:74:8d:
                    67:20:61:8a:bd:5b:69:df:85:a7:ba:93:ca:af:76:
                    21:c6:de:0d:3f:b6:42:ff:3d:c9:24:ec:a8:4a:45:
                    1d:34:28:5e:6e:c1:63:ee:f9:17:32:5c:26:cf:7e:
                    81:f5:82:93:75:db:0e:81:c6:b8:d1:72:b4:82:35:
                    1e:e2:1c:8d:8c:dd:f1:e4:b2:3a:6b:50:14:05:8e:
                    0c:36:60:06:60:6c:e5:fa:1f:61:3c:21:52:5a:e8:
                    ce:e7:ab:e7:24:f1:36:11:00:58:33:38:fc:14:b2:
                    dd:9a:23:cb:63:c6:bf:28:e4:f5:43:44:94:2a:68:
                    28:07:67:c0:32:0e:b4:2f:be:de:76:95:a3:83:dd:
                    69:dc:dd:9a:df:d9:c6:00:8f:28:7b:d8:15:7c:00:
                    15:1e:d4:9a:c5:06:ce:46:21:07:af:75:e0:6a:bb:
                    71:d0:29:09:f6:86:81:2c:93:18:a9:3a:26:48:2f:
                    42:d0:8b:00:a4:d7:06:da:45:9c:3a:58:b7:9a:ad:
                    55:9c:fb:c3:45:8f:cf:ed:4e:12:f9:33:87:07:e9:
                    34:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:EE:63:BC:5E:70:BF:0A:EB:E7:0A:CE:64:2C:B4:8A:4A:4D:21:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0d144817-4c47-3884-b7f1-e2ceb372cede.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.236.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:25:cd:77:1f:38:a8:16:84:f5:01:da:2e:31:55:f6:c2:b8:
         87:cb:be:e0:33:32:e8:15:ae:93:67:b9:0d:59:ef:f2:dc:00:
         b6:6f:16:2e:89:de:d8:c0:29:4d:50:2f:0f:b6:18:5e:c1:25:
         fa:3f:a9:69:23:6e:ba:53:2d:a4:21:8f:6f:09:43:00:a3:4a:
         0a:01:9b:d4:b7:32:c0:e6:b7:ba:c5:75:f0:dc:21:bb:03:b0:
         53:56:1d:d2:3b:82:7c:57:f4:95:19:fb:06:d6:ce:76:97:d5:
         d8:48:20:4e:f4:c0:13:eb:80:ea:44:e9:17:f0:ff:24:5a:c9:
         fb:17:f7:89:ea:d9:99:2c:a1:fb:82:36:54:12:01:a6:0d:1b:
         7b:1a:ac:c9:d8:8e:a6:6f:8a:6d:16:e7:a2:dc:88:64:30:e5:
         f6:27:ac:72:6e:0b:4f:96:0b:fc:17:19:9f:48:b5:d1:75:eb:
         e8:3d:27:73:14:12:bc:bb:17:c2:c7:91:f0:1d:36:56:7d:26:
         cb:aa:e2:4a:82:3a:0c:96:09:c2:c6:83:ae:ab:61:8f:fc:2a:
         07:fe:6e:ea:02:ff:d6:8e:aa:83:cf:ef:9d:ac:bd:f0:41:30:
         73:c8:43:3f:38:c0:e7:8c:fe:25:03:a7:e5:d4:b2:c2:e3:e9:
         de:1e:24:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 08:58:48 2025 by rpki-client