Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3539c1b6-8269-3185-a0c2-cd1dc30305ab.roa
File:                     3539c1b6-8269-3185-a0c2-cd1dc30305ab.roa (raw, json)
Hash identifier:          9gYZVim1qG757WvuVQ00UbjiAaKB/Yl5qS5/et5Sd5g=
Subject key identifier:   8A:43:08:BF:18:32:30:F0:5E:87:87:4F:36:8A:4B:FA:3B:56:B3:4C
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE197084C056BFA54764EA380
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3539c1b6-8269-3185-a0c2-cd1dc30305ab.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     15321
IP address blocks:        207.236.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:97:08:4c:05:6b:fa:54:76:4e:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=54ceb548-012f-4832-9616-dc1973ba078c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a4:cd:ea:4a:e0:71:57:df:70:ba:87:be:78:
                    bb:86:5d:fe:96:6d:89:f3:a7:ee:7c:e2:86:7a:a9:
                    fa:ef:a5:96:15:44:63:43:d5:53:d6:2c:20:e0:f7:
                    ab:7c:c0:c2:02:70:7b:9f:d8:83:9b:f3:16:10:e2:
                    44:7f:54:3d:fe:35:b3:31:56:28:b2:fe:63:de:6c:
                    3e:bc:39:c6:dc:aa:9e:aa:9a:aa:da:aa:9b:9c:0c:
                    ec:9c:94:b0:fe:40:d5:6d:33:ed:65:bd:bb:97:c1:
                    99:94:30:57:bf:f4:5c:ae:82:10:23:7c:1b:05:9d:
                    aa:6f:40:fd:71:07:03:6e:fe:3f:6d:61:e7:2c:f8:
                    6c:b4:1f:b9:b0:63:d9:50:ab:f2:e4:38:09:fd:23:
                    8e:4c:0a:ff:ab:06:2d:d2:f4:38:c8:51:0f:1a:e2:
                    78:34:7b:6a:9f:6a:fd:7e:de:6c:fd:54:1e:93:29:
                    24:e3:48:49:6c:c1:81:e7:c7:e5:f7:63:5e:b3:c9:
                    59:1a:f5:22:fb:ff:cb:33:09:d1:59:6f:63:5e:81:
                    45:a9:93:9d:10:32:77:9a:24:a9:0a:f2:c3:df:1d:
                    76:80:b5:1c:59:aa:c1:92:7d:13:b1:b7:f9:b8:25:
                    54:0b:37:a3:a1:88:9d:b3:61:c4:21:0a:2c:19:fc:
                    d8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:43:08:BF:18:32:30:F0:5E:87:87:4F:36:8A:4B:FA:3B:56:B3:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3539c1b6-8269-3185-a0c2-cd1dc30305ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.236.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:bd:6c:bd:9f:0c:36:f9:01:42:31:36:e8:2e:7d:5f:0f:33:
         07:bf:a1:a2:ec:c8:3f:18:8e:03:e0:b6:4c:f5:69:07:1c:1b:
         58:ce:75:18:cc:e4:ef:c9:66:af:df:b7:fd:b5:80:d7:b1:3d:
         da:73:0d:19:03:5a:2d:d7:bc:20:b5:e6:b7:e7:7d:44:fd:4a:
         dc:79:e0:74:72:c6:d9:c8:93:0a:9c:aa:a9:26:4d:5e:f9:1e:
         11:4d:9c:aa:7c:29:1a:d6:9a:f5:be:75:3a:21:4e:ff:cf:da:
         fc:34:1c:af:31:9d:f1:eb:1c:bb:3b:6e:47:72:21:23:0f:6c:
         18:1f:a3:bc:1a:be:5e:c3:90:ce:7b:40:98:bd:ae:fc:9c:63:
         80:03:51:44:40:3d:17:1d:6f:cb:38:82:ef:e8:11:2d:2d:cc:
         6a:06:7e:3f:ba:6a:e9:62:90:c9:6a:d5:77:38:77:bf:e7:fa:
         ba:48:c0:f2:25:59:e2:d4:a7:80:8b:38:af:5b:0f:35:86:db:
         e5:32:b9:83:f6:be:70:8e:8f:da:b8:bb:79:3e:4c:3f:4b:f4:
         fd:53:a4:2d:00:7a:52:de:e5:a4:d1:30:9f:e1:3f:e0:79:0d:
         54:9e:20:bf:ab:52:e3:19:1b:b6:86:bf:d7:97:1b:62:80:6d:
         c3:81:60:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 10:59:41 2025 by rpki-client