Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/391e8f61-201e-3631-a3f5-756f871d22bd.roa
File:                     391e8f61-201e-3631-a3f5-756f871d22bd.roa (raw, json)
Hash identifier:          SC+xTzb08HAdU61OLDMMUXVAvXRZWAzaQVHmuSWouRk=
Subject key identifier:   83:F5:60:2D:89:45:71:20:CD:D3:0B:49:B0:C6:79:7A:BC:3B:8E:AA
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DAAFC38588CBC82CF22840
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/391e8f61-201e-3631-a3f5-756f871d22bd.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     11831
IP address blocks:        209.139.208.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:af:c3:85:88:cb:c8:2c:f2:28:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=3d760d37-5538-476d-aceb-48de3a42a3c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7d:e5:a6:f9:00:41:63:be:ea:e2:a1:80:fd:
                    13:22:b3:a0:e2:75:01:07:03:16:9a:44:51:5e:9b:
                    e4:f4:ce:f4:e9:4b:1c:f9:52:37:52:3b:32:f1:65:
                    93:57:70:b6:27:e9:af:1d:99:36:df:ef:90:00:09:
                    fe:78:71:67:30:99:90:c7:3e:86:78:5b:3d:22:3e:
                    85:c1:ef:5f:75:e1:28:2d:9d:b3:b0:91:9e:73:9b:
                    0d:eb:36:ee:0e:26:9d:c5:93:3e:d2:b0:62:c4:1a:
                    4b:36:19:49:1d:47:5b:ee:3a:f7:f9:01:83:ca:9f:
                    20:59:08:53:38:77:83:3c:ba:20:cf:f8:3c:cc:0f:
                    36:41:ae:c3:d0:ef:8a:55:7d:e2:b4:da:68:c6:a9:
                    08:fb:e8:23:95:87:80:d2:73:d7:ee:f1:e5:de:0e:
                    b9:a1:bb:53:c0:03:a7:b0:2d:cd:54:94:27:54:63:
                    8c:ad:80:2e:79:57:44:bb:68:f5:8a:1e:8a:1f:d1:
                    65:9c:82:0a:f7:80:64:db:76:b2:98:7c:cf:e8:39:
                    f1:c1:78:c8:f8:77:c1:9f:f8:b2:12:88:b2:de:74:
                    ea:bd:6e:b4:00:45:34:70:07:35:3a:11:c6:86:6b:
                    c8:e4:18:f9:2d:b0:0a:c6:0a:4e:5b:f5:84:7a:c6:
                    1e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:F5:60:2D:89:45:71:20:CD:D3:0B:49:B0:C6:79:7A:BC:3B:8E:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/391e8f61-201e-3631-a3f5-756f871d22bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.139.208.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:3e:13:b5:71:ca:6f:1c:42:d1:41:46:bb:7b:a1:21:44:16:
         58:f6:d9:1b:3f:de:eb:34:82:1a:c9:ba:ff:3d:b1:a9:45:0a:
         90:fa:60:b3:e2:a5:3b:1a:61:7c:5b:9c:4d:55:5a:c1:1d:06:
         35:4c:b7:67:82:b1:fb:2b:f9:51:90:3d:00:81:40:c2:02:1e:
         16:bf:11:31:4f:e3:db:f6:ff:c0:86:c9:75:72:ef:3e:d9:00:
         be:8b:44:7f:07:a4:31:99:98:8f:62:6e:71:8f:f6:46:fe:a3:
         d2:04:c3:38:92:84:7b:60:72:b0:15:56:21:97:3f:a4:44:d4:
         f3:9f:af:52:12:dc:22:fe:42:74:a1:2d:d6:19:74:e9:c6:47:
         a4:3e:11:a3:ac:ac:ef:12:33:6b:8f:05:75:43:a4:d4:ce:e9:
         e7:01:a3:fe:5f:1b:fb:8c:5a:a1:04:45:84:12:47:a0:a7:22:
         b8:8f:24:09:55:d0:c4:37:73:25:c3:32:8a:b8:c7:d3:12:21:
         14:ce:39:78:3b:0c:12:34:a1:67:48:78:1a:0e:90:98:02:ae:
         f8:d9:e0:0e:e9:fa:ef:6c:71:1e:a6:63:36:89:13:9f:40:0f:
         63:e1:a1:04:02:ce:b5:52:ae:5a:7e:ee:1a:83:8e:c1:9b:af:
         a7:27:1e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:19:33 2025 by rpki-client