Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/20e49cb2-fcd6-3166-a044-9a424b162d74.roa
File:                     20e49cb2-fcd6-3166-a044-9a424b162d74.roa (raw, json)
Hash identifier:          vXtYymXr9Qz9tTVfD9XIRJgLUddP5DerWtLx861s6ek=
Subject key identifier:   7E:7E:5B:B4:97:22:8A:1E:6A:DD:DD:9B:B4:6B:3A:8B:CB:A7:FB:F6
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE1970B5BE022EA5CF58C7500
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/20e49cb2-fcd6-3166-a044-9a424b162d74.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     397168
IP address blocks:        206.47.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:97:0b:5b:e0:22:ea:5c:f5:8c:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=ac55f2a7-430c-4852-b0d0-98cfb7d38963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:18:9b:3a:c8:2c:8d:34:73:d8:f6:8a:4c:3e:
                    73:77:62:7d:6d:eb:7c:db:d3:20:85:f9:e2:90:29:
                    7f:7a:24:e0:e5:3a:25:2e:ea:12:2a:77:c1:bd:2f:
                    ee:1a:9f:80:8a:d5:13:48:8b:ce:bd:59:dd:1d:73:
                    1f:2b:b6:24:88:73:e7:90:b8:00:aa:9d:ad:9f:e0:
                    a1:32:0c:84:46:7b:60:e2:21:d6:56:57:72:e9:9a:
                    be:2c:51:70:1d:fb:34:16:7c:08:7d:96:e2:63:f8:
                    5a:3a:fc:fb:85:ee:d2:79:e2:c0:b2:06:49:58:8b:
                    c9:41:70:56:f8:e1:25:d3:3a:c5:8a:5c:bc:26:13:
                    0d:77:6a:6e:1f:16:16:d3:95:68:e1:67:a9:88:3d:
                    96:0c:8d:86:7e:6d:b5:d5:58:bc:34:79:49:88:dc:
                    6f:b4:cd:33:b5:e8:f5:4f:f9:bc:b7:0c:15:56:66:
                    5e:7d:2f:d3:bb:f4:2d:53:be:9a:3b:ea:dc:06:87:
                    12:31:0a:e5:5e:1b:47:42:26:b5:26:15:fc:84:81:
                    bc:ae:75:05:87:62:8b:ff:6c:a2:88:21:2a:85:bb:
                    76:9a:8d:8f:79:73:f8:15:ea:d5:fa:fa:fc:f3:92:
                    b5:ba:a2:b5:63:da:59:a1:0a:21:66:8f:b0:48:52:
                    00:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:7E:5B:B4:97:22:8A:1E:6A:DD:DD:9B:B4:6B:3A:8B:CB:A7:FB:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/20e49cb2-fcd6-3166-a044-9a424b162d74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.47.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:68:5b:f7:47:8e:5f:f8:fc:0a:45:9e:d6:7e:6b:72:c9:bd:
         84:7a:e2:c0:1c:e7:ff:60:f1:0c:42:a3:72:3a:23:5d:d6:2b:
         99:2d:90:34:b0:44:6e:48:e0:00:04:6f:96:1e:f9:37:87:b8:
         fc:48:16:52:02:e7:1e:da:87:91:cd:a8:80:21:2a:98:10:82:
         15:de:7c:41:5d:85:f6:96:39:9e:24:10:d7:82:9f:ad:9d:d2:
         9b:57:b0:67:4b:ae:cc:9e:83:ec:6a:e0:a6:ff:0e:b1:02:37:
         24:be:d6:39:84:b4:d0:2b:8c:e7:38:12:91:8b:48:b4:9c:6b:
         b1:be:58:e4:8f:7f:00:b5:2c:af:7f:74:f3:af:11:fc:95:6e:
         2a:04:d6:81:90:5a:5c:ed:70:0d:55:6e:72:f4:15:e8:79:0c:
         d7:8a:f6:9e:ef:2b:ba:0a:ef:02:e9:31:d3:a6:9c:d9:19:c6:
         12:a1:69:98:0c:c2:0e:ce:b7:16:7c:a7:3d:cc:07:10:30:c7:
         1d:31:a1:6c:b1:04:86:2c:0b:44:2d:a6:d5:d0:7d:ed:23:39:
         18:79:b3:50:3e:24:97:df:4e:e9:d7:62:ac:a4:17:47:6e:d9:
         29:81:57:01:bc:3f:2a:9a:c3:99:2a:d5:68:a1:15:ad:62:59:
         73:55:9b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 10:59:44 2025 by rpki-client