Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2d04afec-c0dc-33b5-a111-8efe0a75b954.roa
File:                     2d04afec-c0dc-33b5-a111-8efe0a75b954.roa (raw, json)
Hash identifier:          gxwdbrdVHFlnnJLsOLond/880rHLFosFlGDAWHUBvuk=
Subject key identifier:   D5:9E:BE:47:7A:9D:45:C2:65:FE:2C:45:67:B0:00:0C:3C:CA:24:98
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE19719AF2D5E491EF2820670
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2d04afec-c0dc-33b5-a111-8efe0a75b954.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     36522
IP address blocks:        207.164.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:97:19:af:2d:5e:49:1e:f2:82:06:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=4b90386c-82f4-41ed-bce4-1672e74aa8e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fa:7f:58:3a:f2:71:93:81:9c:9e:d6:78:0e:
                    54:8c:e6:7e:7d:f1:13:c4:d2:83:61:e0:60:00:32:
                    80:73:d5:39:95:eb:08:63:36:2c:27:fa:55:63:36:
                    d0:1c:bd:91:81:5c:fc:34:28:10:c5:90:25:f4:bf:
                    f5:38:7d:84:8f:5a:75:7b:0e:4e:83:58:18:90:51:
                    ae:98:6e:49:2e:a6:5c:cb:54:c0:b6:81:92:d2:7a:
                    60:65:21:1f:4b:83:c1:c7:25:6a:59:93:82:44:bd:
                    34:d0:f8:f9:18:73:4f:92:7d:59:4b:e7:4f:03:48:
                    d1:37:24:8d:34:6b:d3:6f:59:e7:15:13:33:9b:f6:
                    57:37:38:16:02:c5:0d:84:4d:b2:cd:59:e2:51:ec:
                    56:9c:1d:98:35:f7:c4:f9:eb:aa:a4:14:ec:d8:21:
                    c1:84:13:f1:ef:91:21:ab:c2:fd:ab:d1:b5:ba:8b:
                    96:e1:9c:e6:08:98:11:60:51:94:65:70:ed:c2:9e:
                    6f:52:54:6e:89:78:da:84:ec:4f:f5:9c:9b:4a:0c:
                    6e:a4:62:b7:79:99:0b:15:35:31:22:af:b3:62:ee:
                    2e:e5:98:7d:cf:ec:46:32:59:60:47:14:c1:fe:dc:
                    68:3a:02:c3:e1:d4:a8:dd:ec:f3:44:79:bd:16:8a:
                    b5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:9E:BE:47:7A:9D:45:C2:65:FE:2C:45:67:B0:00:0C:3C:CA:24:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2d04afec-c0dc-33b5-a111-8efe0a75b954.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.164.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:d8:61:3d:6c:94:16:62:68:ee:ae:7e:78:13:50:45:7b:11:
         2f:cd:b7:e2:6c:2b:61:0b:67:2a:52:03:a3:aa:a3:6d:bd:36:
         ac:c4:6d:8d:28:a5:78:41:9c:7c:7a:6c:36:ce:a2:e1:09:28:
         11:74:2b:a4:10:97:6b:93:52:26:d8:35:82:30:b0:fe:e5:ab:
         e7:25:56:cc:08:25:0c:40:54:de:2d:85:f3:c9:db:f7:db:8b:
         d7:90:ac:78:05:cc:4e:70:d8:e9:2c:4b:53:16:b2:8a:0e:98:
         ee:18:2b:ab:1d:7d:e0:9f:78:56:23:73:61:84:6c:fe:5f:41:
         50:4b:d4:7a:43:b4:4f:c1:bc:6c:86:ea:b7:d0:88:4a:14:14:
         96:cd:e7:fe:fd:3b:08:88:3b:ac:62:15:8b:14:a9:4b:9a:b0:
         cc:73:6b:83:21:ad:07:71:1d:71:96:75:a3:dc:b1:71:ba:26:
         b9:14:82:af:db:b3:1b:af:1e:8b:52:1c:83:91:90:83:ae:91:
         22:73:3a:06:55:0a:18:b7:90:fe:67:9f:4f:49:13:ab:33:d5:
         f5:16:ad:8f:2c:be:3c:bf:78:d1:b3:f1:ed:e0:7a:b7:18:97:
         bd:0d:c0:63:4c:f4:42:b7:48:67:df:12:5f:97:8b:db:4a:d9:
         f9:03:61:ec
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErhlxmvLV5JHvKCBnAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk
NGI5MDM4NmMtODJmNC00MWVkLWJjZTQtMTY3MmU3NGFhOGUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvp/WDrycZOBnJ7WeA5UjOZ+ffETxNKDYeBg
ADKAc9U5lesIYzYsJ/pVYzbQHL2RgVz8NCgQxZAl9L/1OH2Ej1p1ew5Og1gYkFGu
mG5JLqZcy1TAtoGS0npgZSEfS4PBxyVqWZOCRL000Pj5GHNPkn1ZS+dPA0jRNySN
NGvTb1nnFRMzm/ZXNzgWAsUNhE2yzVniUexWnB2YNffE+euqpBTs2CHBhBPx75Eh
q8L9q9G1uouW4ZzmCJgRYFGUZXDtwp5vUlRuiXjahOxP9ZybSgxupGK3eZkLFTUx
Iq+zYu4u5Zh9z+xGMllgRxTB/txoOgLD4dSo3ezzRHm9Foq1DwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNWevkd6nUXCZf4sRWewAAw8yiSYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMmQwNGFmZWMtYzBkYy0z
M2I1LWExMTEtOGVmZTBhNzViOTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz6TDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHPYYT1slBZiaO6ufngTUEV7ES/Nt+JsK2ELZypSA6Oqo229NqzEbY0o
pXhBnHx6bDbOouEJKBF0K6QQl2uTUibYNYIwsP7lq+clVswIJQxAVN4thfPJ2/fb
i9eQrHgFzE5w2OksS1MWsooOmO4YK6sdfeCfeFYjc2GEbP5fQVBL1HpDtE/BvGyG
6rfQiEoUFJbN5/79OwiIO6xiFYsUqUuasMxza4MhrQdxHXGWdaPcsXG6JrkUgq/b
sxuvHotSHIORkIOukSJzOgZVChi3kP5nn09JE6sz1fUWrY8svjy/eNGz8e3gercY
l70NwGNM9EK3SGffEl+Xi9tK2fkDYew=
-----END CERTIFICATE-----
Generated at Sun Aug 24 10:59:46 2025 by rpki-client