Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/17f7e103-f945-368a-8a1f-002e316488bb.roa
File:                     17f7e103-f945-368a-8a1f-002e316488bb.roa (raw, json)
Hash identifier:          AwPcURp3oSodo60yWE/I58SFc34EnVZSZqsL+FJDzaQ=
Subject key identifier:   32:39:29:41:32:D1:D0:30:B3:8C:0F:94:4D:28:D9:9F:D9:DB:E0:BA
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE1968339CF68BD988B911110
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/17f7e103-f945-368a-8a1f-002e316488bb.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     15321
IP address blocks:        207.164.188.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:83:39:cf:68:bd:98:8b:91:11:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=4f062df9-e51f-4c06-893f-95c01ba70069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0b:4f:19:61:d5:c7:a3:46:fb:cb:c3:99:9b:
                    83:02:48:ca:cd:60:de:78:02:13:08:3d:d5:8b:33:
                    eb:58:67:85:d4:6e:d3:75:97:09:ae:c1:99:7f:50:
                    da:28:de:9a:4b:32:68:57:41:32:4b:bb:a4:2a:47:
                    f7:67:db:58:d9:6a:f2:55:e0:3b:c7:07:79:97:07:
                    f8:33:58:c9:dc:ee:40:3f:b8:5b:b4:27:c3:10:b4:
                    73:7b:a7:ac:d3:b3:88:43:6a:f0:ca:11:07:f9:a9:
                    d6:f5:7f:c9:28:2d:6d:eb:13:c3:a1:12:4d:22:bb:
                    79:b5:61:40:18:38:d3:3f:47:c3:8b:03:ca:33:86:
                    bb:29:74:51:54:85:35:00:99:b1:9c:d8:63:19:70:
                    c0:94:33:73:9a:09:59:a9:e2:3f:54:9e:73:0d:03:
                    17:1f:4f:3d:b3:9a:b2:ea:82:3f:83:95:17:0a:d3:
                    94:2a:d1:78:8b:8d:f5:be:01:ee:e1:b8:da:cc:2b:
                    94:d9:20:56:86:7c:24:36:fc:de:7c:ae:d7:d5:cb:
                    19:7c:9e:ef:02:6d:b0:7e:17:28:d4:5b:4a:79:03:
                    d3:90:5c:52:b9:e2:d3:e5:33:db:a2:42:55:08:e2:
                    1d:55:cc:96:ca:55:27:14:cd:70:cb:1b:76:bd:1d:
                    f5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:39:29:41:32:D1:D0:30:B3:8C:0F:94:4D:28:D9:9F:D9:DB:E0:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/17f7e103-f945-368a-8a1f-002e316488bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.164.188.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:11:bb:42:bf:5c:f6:b5:27:d9:fa:06:6d:06:f7:b1:dc:ab:
         00:87:6c:22:85:71:fd:0c:1e:88:bf:54:5a:27:a2:cb:ac:8f:
         7e:69:7b:f5:57:c8:15:65:f6:44:02:3f:39:f1:f7:c8:b1:f8:
         2b:36:96:44:c0:f8:b1:c7:3a:fd:9f:2a:a3:7f:bf:52:9a:bd:
         cd:40:34:dd:f5:db:15:8e:54:eb:f2:ea:c2:25:ec:6f:e4:cb:
         9c:72:6f:c6:e3:f0:d8:94:9a:87:e7:af:3f:4c:2b:37:91:2d:
         62:8a:22:71:b6:5a:46:4d:62:49:91:df:01:f7:09:dd:73:3e:
         2b:a0:33:64:af:95:94:82:f8:e3:28:c1:e0:8e:8b:57:7e:5a:
         0b:ff:e7:39:b7:2f:b7:f9:83:be:2a:ad:ea:0d:b3:ff:6f:c2:
         1a:1f:87:ea:18:b9:60:1b:2f:3c:f9:de:91:f8:3a:cc:52:56:
         88:10:7f:e1:68:e5:28:27:25:7d:6a:56:86:81:70:db:35:34:
         1d:76:ee:5e:fe:44:10:5e:28:93:d1:b0:75:f2:51:38:ed:4b:
         d9:8c:9f:43:8b:48:07:b7:81:60:66:c7:00:1f:3d:03:3b:76:
         dc:30:08:19:ec:a1:23:07:6d:01:ff:fb:5f:d9:be:98:14:a0:
         ad:e4:93:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:01:33 2025 by rpki-client