Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2a83bad7-4591-3e31-aff4-b0912dacfda0.roa
File:                     2a83bad7-4591-3e31-aff4-b0912dacfda0.roa (raw, json)
Hash identifier:          I8FZOz7xALXdM3i/cylUwSSYZY3h2kNeRDaoDLZ3ymo=
Subject key identifier:   73:95:EC:D2:47:28:88:16:4D:48:76:EC:2D:58:13:59:4D:DD:FC:9F
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE196834E687CCB6976065ED0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2a83bad7-4591-3e31-aff4-b0912dacfda0.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     15321
IP address blocks:        207.164.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:83:4e:68:7c:cb:69:76:06:5e:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=696f450d-0e30-434d-ab22-e39db55564b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f4:bf:b0:e6:a9:06:12:34:90:24:f1:a0:44:
                    cc:44:22:51:f9:b2:6e:c1:5e:0d:03:e6:92:af:1e:
                    ad:02:1a:93:41:1a:3a:e5:67:07:56:41:f6:b4:75:
                    9f:30:23:bf:d5:47:6a:d7:c0:5b:27:78:60:aa:b0:
                    bf:80:3b:b0:38:a2:ce:12:09:09:99:10:5e:d2:c3:
                    cb:3b:51:3a:a8:64:00:99:62:67:2c:69:b9:f4:38:
                    17:66:f2:32:88:65:a3:58:c1:33:dd:9b:4c:fa:f6:
                    12:94:36:db:2f:e4:e4:6f:60:44:75:f9:56:71:c6:
                    58:b3:70:45:b8:ca:33:70:1f:09:c8:ab:8c:b7:9a:
                    2f:64:b5:83:94:01:a4:4f:e1:3f:b6:a4:14:c0:d9:
                    e7:71:15:c4:0a:cf:3b:e1:1d:a9:da:de:76:ac:3b:
                    94:27:8e:f7:47:b1:35:9e:fd:01:d9:4c:86:80:59:
                    64:36:4b:25:5e:35:d1:aa:24:ab:0e:73:56:2b:35:
                    a2:a1:90:79:8d:b5:85:1f:3f:4c:28:20:10:40:48:
                    54:26:8a:a3:13:dc:dc:2a:0b:32:51:d5:14:55:6f:
                    91:2d:02:48:ee:40:e8:2d:b0:40:37:fa:89:b0:ec:
                    67:34:75:6a:eb:4f:06:6e:77:c6:08:94:b8:2e:4c:
                    68:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:95:EC:D2:47:28:88:16:4D:48:76:EC:2D:58:13:59:4D:DD:FC:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2a83bad7-4591-3e31-aff4-b0912dacfda0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.164.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:fa:63:8e:49:0e:7e:7a:9c:9e:60:84:c1:97:d3:61:a0:1e:
         a4:50:cf:f6:a5:3b:d4:f5:55:c8:68:81:ec:d2:6f:95:fc:ba:
         8f:7f:1d:ef:ab:fa:34:a0:5d:df:60:b4:ab:1d:db:eb:92:54:
         bf:ef:4c:21:05:07:96:3b:4a:b6:95:de:3e:98:6a:b0:f0:71:
         62:5b:8e:01:bb:62:e3:6a:0c:25:9e:5d:40:bc:c3:b2:30:4c:
         09:22:8c:02:a0:af:36:d6:25:3f:fd:0a:60:86:a1:cf:83:de:
         e4:b0:16:fb:7a:64:5d:1c:82:bb:f9:a7:f5:1a:9c:40:49:03:
         48:0e:56:cf:7a:a5:74:e6:a8:57:04:70:97:52:94:df:e9:e0:
         a1:21:51:60:f2:33:f4:f9:a5:25:1b:64:b7:60:8c:d8:08:af:
         27:c0:ec:ac:20:52:63:86:67:7f:af:67:66:61:99:bb:72:50:
         87:ee:d0:ec:cf:59:4d:5e:74:4c:96:05:dd:7d:2e:a1:7c:fe:
         be:69:12:a1:a1:04:f0:ba:be:a3:8c:75:7d:f3:93:4d:42:6c:
         25:4a:dd:f3:0f:2a:47:60:79:a9:00:08:b9:04:68:06:8b:f9:
         34:fb:d2:49:f9:1b:de:b7:90:a4:e3:b5:45:f8:29:5f:f8:e9:
         57:c3:0c:ee
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErhloNOaHzLaXYGXtAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk
Njk2ZjQ1MGQtMGUzMC00MzRkLWFiMjItZTM5ZGI1NTU2NGI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vS/sOapBhI0kCTxoETMRCJR+bJuwV4NA+aS
rx6tAhqTQRo65WcHVkH2tHWfMCO/1Udq18BbJ3hgqrC/gDuwOKLOEgkJmRBe0sPL
O1E6qGQAmWJnLGm59DgXZvIyiGWjWMEz3ZtM+vYSlDbbL+Tkb2BEdflWccZYs3BF
uMozcB8JyKuMt5ovZLWDlAGkT+E/tqQUwNnncRXECs874R2p2t52rDuUJ473R7E1
nv0B2UyGgFlkNkslXjXRqiSrDnNWKzWioZB5jbWFHz9MKCAQQEhUJoqjE9zcKgsy
UdUUVW+RLQJI7kDoLbBAN/qJsOxnNHVq608GbnfGCJS4LkxoKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHOV7NJHKIgWTUh27C1YE1lN3fyfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMmE4M2JhZDctNDU5MS0z
ZTMxLWFmZjQtYjA5MTJkYWNmZGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz6RoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEP6Y45JDn56nJ5ghMGX02GgHqRQz/alO9T1VchogezSb5X8uo9/He+r
+jSgXd9gtKsd2+uSVL/vTCEFB5Y7SraV3j6YarDwcWJbjgG7YuNqDCWeXUC8w7Iw
TAkijAKgrzbWJT/9CmCGoc+D3uSwFvt6ZF0cgrv5p/UanEBJA0gOVs96pXTmqFcE
cJdSlN/p4KEhUWDyM/T5pSUbZLdgjNgIryfA7KwgUmOGZ3+vZ2ZhmbtyUIfu0OzP
WU1edEyWBd19LqF8/r5pEqGhBPC6vqOMdX3zk01CbCVK3fMPKkdgeakACLkEaAaL
+TT70kn5G963kKTjtUX4KV/46VfDDO4=
-----END CERTIFICATE-----
Generated at Sun Aug 24 08:58:55 2025 by rpki-client