Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2d3e451d-ba47-3480-ba90-11d76fbd300d.roa
File:                     2d3e451d-ba47-3480-ba90-11d76fbd300d.roa (raw, json)
Hash identifier:          c6FsYhrPFbbDdAj4nZ/hDzZUBakiw/G7q59MkTUbpmY=
Subject key identifier:   3F:85:CA:5D:03:74:FF:14:08:33:8D:72:98:17:4F:CC:72:E8:37:B0
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE19710BE76E5413138B94D80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2d3e451d-ba47-3480-ba90-11d76fbd300d.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     16487
IP address blocks:        204.101.92.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:97:10:be:76:e5:41:31:38:b9:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=70ad1e17-2245-4c55-b480-5163da02931a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:bb:41:2c:a9:c2:67:d1:71:0e:bd:a3:84:00:
                    de:e9:fc:dd:88:c0:2f:49:e1:88:45:04:42:7a:eb:
                    9f:56:c6:4c:9d:46:c6:48:10:9a:ce:f0:80:75:b5:
                    e4:63:84:78:0b:e7:6a:73:85:e8:9d:1e:5e:05:59:
                    93:0f:26:67:17:eb:d8:55:a3:15:71:47:f8:28:26:
                    4a:5d:00:f9:de:28:04:cd:3f:76:16:ec:ad:98:cc:
                    b0:63:d6:b5:dd:a8:c0:c0:3f:b4:fc:14:55:fa:37:
                    f5:6f:7a:5b:9d:8d:35:b2:da:c1:c9:59:9c:6d:c5:
                    ef:8b:b7:f9:d6:dd:60:74:a4:50:b8:c8:fb:cc:d9:
                    a8:00:04:54:5b:87:10:7a:3e:72:07:aa:68:41:68:
                    65:ff:93:37:e1:64:3d:90:51:74:0a:57:cc:53:c1:
                    ea:a2:18:f9:65:dc:1b:0c:c3:55:b7:b9:f6:8d:fb:
                    55:9c:ee:cb:01:9d:aa:73:95:bb:f0:3a:8f:45:a8:
                    94:18:4c:28:69:9d:cd:ea:df:2c:14:1e:63:09:8a:
                    a0:37:54:1d:2d:fc:13:a0:99:2a:8e:01:ca:96:fa:
                    a0:13:79:b9:be:e6:c0:8f:d2:41:99:b4:0e:c7:74:
                    3f:5b:f0:d5:ad:7b:0d:37:ac:ed:f1:64:08:59:18:
                    53:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:85:CA:5D:03:74:FF:14:08:33:8D:72:98:17:4F:CC:72:E8:37:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2d3e451d-ba47-3480-ba90-11d76fbd300d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.92.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:08:54:e3:29:c6:f7:15:5c:be:e7:cf:ec:1a:05:ed:ca:e4:
         ec:62:ab:65:2c:3f:a8:10:de:38:50:29:a9:f5:f1:0a:25:3b:
         8d:eb:9d:59:16:c3:fc:b5:44:a9:2a:2e:4f:55:ed:89:fe:38:
         7d:4d:7b:f4:5d:38:32:f1:32:f4:d1:6f:e5:6c:67:23:0a:27:
         8b:89:8b:8a:1e:36:5d:8f:30:10:2a:ce:b7:8e:16:32:38:60:
         93:bd:31:62:d2:70:dd:16:72:da:1d:85:7b:d3:cc:48:47:1e:
         fe:f6:a9:a1:bf:12:a6:46:02:a6:59:aa:8b:e8:ba:ed:72:1d:
         09:80:07:e5:c3:cd:e6:ff:0e:11:b1:8c:b9:72:1a:e7:2b:4b:
         5a:d5:e6:8b:9c:05:61:4e:7e:6f:91:7e:1a:86:cf:4e:2e:23:
         1e:33:5a:d3:c8:53:17:6f:85:98:4f:62:8d:f9:91:7f:d2:f7:
         f2:4c:31:9d:96:1e:e3:64:39:ef:ef:d8:a5:bd:9d:a8:fe:6c:
         ee:15:c6:5d:b9:b1:6f:a4:07:6f:52:40:da:69:90:42:61:d1:
         f7:b1:32:c7:41:c6:ab:e5:9b:61:69:e1:ce:8a:88:17:d6:74:
         63:54:df:a8:8f:63:47:fd:c3:fb:b1:6d:3e:05:6c:28:6c:69:
         ed:80:b6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:01:33 2025 by rpki-client