Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2760c63b-1ba6-334c-962e-7a6e0017f26b.roa
File:                     2760c63b-1ba6-334c-962e-7a6e0017f26b.roa (raw, json)
Hash identifier:          SlZLbXY76Mheq3lvou9gb3OqA1gggjKxp+rbIp6vW6Y=
Subject key identifier:   52:89:33:0E:32:CF:AF:5F:E0:AD:DC:23:36:15:FC:00:D3:D3:54:CB
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE19682010FB6AE353F52F900
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2760c63b-1ba6-334c-962e-7a6e0017f26b.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     19152
IP address blocks:        216.208.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:82:01:0f:b6:ae:35:3f:52:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=38a13177-a4d9-41e9-b150-bca612757123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:32:0f:e9:3f:31:e2:70:85:29:ff:1d:16:47:
                    f2:42:63:70:5e:28:4a:42:da:df:54:3a:da:ee:af:
                    e1:89:cb:71:7b:a8:c9:55:2d:fb:7f:2c:0a:f9:c3:
                    3e:e3:f3:22:cc:5c:1b:79:54:22:bf:33:72:9a:24:
                    2c:a8:2b:87:53:48:24:9c:93:7e:bd:ba:ef:5a:38:
                    74:42:e6:9c:f7:c2:3c:5d:02:50:17:47:80:7c:49:
                    17:30:61:bd:df:1b:ec:4e:92:ef:c0:3a:ac:76:d3:
                    17:2f:32:7a:cb:a4:38:e5:64:ab:e5:26:9b:f3:22:
                    eb:01:28:98:06:0b:4d:4d:f5:da:19:ef:4a:22:9f:
                    2a:23:c3:cf:43:7d:73:d1:12:ec:5e:c9:ab:be:a3:
                    93:0a:85:e3:5c:75:df:97:57:57:81:e6:2e:c0:b9:
                    7e:55:3b:e1:3b:df:10:d4:52:55:e4:04:9d:24:98:
                    05:0f:6e:fc:00:ac:cd:3d:43:63:c3:01:df:7d:67:
                    15:ed:f9:fa:0c:b7:51:fd:5d:2e:99:a8:7a:ac:7e:
                    34:78:cf:09:fa:da:b4:0f:00:a9:03:f5:a5:b5:fa:
                    d5:e3:e7:55:3c:dd:17:1e:c5:8f:2a:fe:68:80:88:
                    29:45:79:cc:cd:fc:86:e0:4c:a5:40:e1:4f:12:cb:
                    f1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:89:33:0E:32:CF:AF:5F:E0:AD:DC:23:36:15:FC:00:D3:D3:54:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2760c63b-1ba6-334c-962e-7a6e0017f26b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.208.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:46:3f:5a:de:2c:9e:98:57:52:45:05:51:21:ca:ce:6f:81:
         fe:8b:b0:44:5a:50:76:1c:98:7d:94:d3:4d:da:21:50:b7:9d:
         80:9f:e1:78:e9:a5:75:4f:21:92:d8:d3:12:9b:69:c8:78:6b:
         c8:1a:c1:ff:c5:6f:27:03:d8:79:90:30:2c:74:0b:c9:89:49:
         45:00:24:d4:79:e7:10:88:99:af:bb:2a:54:5a:76:5d:0e:67:
         0a:7f:65:37:76:68:d5:91:4b:2f:48:a5:3b:6c:cb:ec:e8:72:
         ab:dc:e0:e0:9b:7a:08:86:e4:56:4e:88:e5:ca:2c:a4:5a:b4:
         9b:41:37:8b:65:33:45:53:81:a5:02:ef:38:32:01:6b:3f:7d:
         1f:2e:d4:e9:91:ab:f5:a0:b8:08:d9:b7:77:f2:0c:6d:1b:37:
         f2:33:3c:1c:42:cb:c5:6d:34:4b:76:d6:aa:a1:b9:1e:04:cc:
         9d:b7:43:a1:88:bb:7a:b2:a7:83:a0:83:63:52:de:a0:ac:9b:
         40:f1:5c:43:71:73:01:fd:24:ec:9b:22:f8:43:52:3d:38:3a:
         19:7d:f2:97:87:56:b5:2e:eb:83:bb:af:a1:f7:41:f6:23:df:
         4b:da:36:be:6f:c0:f7:67:40:17:f7:12:f4:7a:ab:7c:81:06:
         f1:ac:ee:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 08:58:18 2025 by rpki-client