Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/38c177cf-a7b9-38bf-883a-d8d09a2cde19.roa
File:                     38c177cf-a7b9-38bf-883a-d8d09a2cde19.roa (raw, json)
Hash identifier:          huo+u8woVhYan8qEofoi0znbocXz6/jqLI9ViKRG/lY=
Subject key identifier:   3A:3F:F5:6C:2E:6F:F2:E5:A4:B8:D4:D0:E3:96:22:C8:E7:BA:BE:07
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DA9D1F62546149E834C170
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/38c177cf-a7b9-38bf-883a-d8d09a2cde19.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     10264
IP address blocks:        204.101.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:9d:1f:62:54:61:49:e8:34:c1:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=1ef1290e-fa27-4684-8151-b610ec9e94c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:0e:8c:2e:29:9c:6d:f5:78:db:2e:59:67:47:
                    9e:73:6b:f9:bc:3d:f5:37:53:96:47:b9:cc:a7:b8:
                    d7:95:13:f5:da:45:4d:21:b8:40:ea:a3:46:e1:69:
                    80:3a:78:37:23:a4:b3:e9:4d:20:b5:af:b3:3f:82:
                    e5:9b:44:39:58:7d:d4:86:47:6c:c3:f7:14:27:4f:
                    80:df:41:62:a7:36:e3:0c:38:4c:cc:67:a1:f8:7c:
                    49:10:18:3e:46:ef:d7:c1:38:32:35:13:3e:06:ae:
                    76:90:d0:0f:b8:83:ef:cb:b0:31:7a:4e:e8:c0:1d:
                    ce:93:be:d2:01:2c:7a:48:a8:f8:b9:73:83:78:f1:
                    c9:26:54:97:65:7b:c5:0d:f0:5b:88:e4:9e:d6:bc:
                    cc:77:bb:b2:83:db:a4:da:ee:c8:62:74:d9:14:6d:
                    83:15:ba:e6:07:23:a5:bc:a0:7a:50:e0:aa:f5:45:
                    1f:f9:e0:13:fb:cd:03:d7:ae:cc:99:77:1b:8c:08:
                    4b:b9:32:3b:d5:a6:c6:03:3e:54:cf:eb:3b:8f:28:
                    f5:29:fd:f9:47:b5:93:e2:d9:98:a7:07:41:4d:8d:
                    d7:2b:8a:ed:5f:f2:bd:5e:91:95:31:68:df:9c:7c:
                    85:46:58:fc:56:74:25:5a:12:ed:fc:21:b5:8a:40:
                    40:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:3F:F5:6C:2E:6F:F2:E5:A4:B8:D4:D0:E3:96:22:C8:E7:BA:BE:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/38c177cf-a7b9-38bf-883a-d8d09a2cde19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:26:63:37:63:01:f0:7c:25:86:39:d8:24:fa:7c:fa:6b:28:
         82:6c:87:e9:6d:1c:06:02:28:73:1d:75:ae:e0:16:fc:f2:20:
         84:3c:c4:a6:29:03:e5:89:fb:5e:56:8c:65:b0:86:88:8b:41:
         93:5a:97:d7:5a:ba:14:fe:89:1f:db:97:44:5e:3a:b1:2a:2c:
         90:19:91:de:98:20:ef:dc:db:2c:69:4e:6b:69:36:25:5b:25:
         66:45:d5:c1:7f:29:10:2e:e4:d2:f2:a3:b2:23:ff:cb:46:b0:
         27:50:3b:3c:5a:e2:67:37:31:bb:ca:76:ba:5f:9e:c8:09:bd:
         13:9d:cb:71:4f:e8:84:01:40:b5:c2:e2:12:ef:7b:35:70:c6:
         34:e7:a4:1c:af:65:73:da:1e:9a:bf:61:6c:41:1c:85:7d:23:
         47:d8:47:37:c2:d5:25:de:3c:84:37:63:c6:89:94:8a:ac:2b:
         53:f8:90:88:c6:11:97:16:01:f9:12:f2:be:8a:34:fe:ca:ea:
         28:35:09:06:11:5c:cd:37:ed:55:17:66:4c:36:c7:59:b5:2a:
         8b:c7:38:d4:d5:73:63:9f:4f:42:47:22:63:b0:50:8b:f1:5c:
         02:5f:bb:90:ed:fc:de:cf:de:40:4f:d9:01:50:83:33:0e:c2:
         84:83:43:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:51:23 2025 by rpki-client