Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3d5e6c37-d97a-30a2-bfcd-b824afd55a3a.roa
File:                     3d5e6c37-d97a-30a2-bfcd-b824afd55a3a.roa (raw, json)
Hash identifier:          KthdJSSwwl7d3LQuirmnanhe6Y5f3XFrLyhokpcZhm8=
Subject key identifier:   EF:7F:A8:15:38:AC:D2:FD:2D:59:5F:25:A1:DB:67:A6:AF:F8:7E:D8
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DAA508B6FB29B3A1497F80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3d5e6c37-d97a-30a2-bfcd-b824afd55a3a.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     36522
IP address blocks:        206.47.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:a5:08:b6:fb:29:b3:a1:49:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=6485f036-2f82-4e1f-8014-a9cfb29a4138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:52:f6:73:e6:b1:e7:24:49:55:f0:0b:03:ba:
                    46:68:6d:d4:fb:0a:3f:f7:b0:32:5d:ab:a3:ba:2b:
                    44:1c:ce:7f:0f:60:b7:19:2d:35:09:cb:5a:30:43:
                    68:c2:7e:24:27:2b:b6:b7:5f:63:1d:94:1a:b4:33:
                    14:8f:b8:6c:e2:cc:34:7e:a2:56:3f:71:95:82:21:
                    69:7f:1a:ae:52:2f:3d:51:35:76:36:72:1a:0c:0a:
                    af:36:9c:d6:de:ef:ab:96:bb:6b:80:8f:54:3e:a2:
                    22:1b:ec:34:a2:ff:17:c8:f3:38:09:c3:fd:57:72:
                    18:5f:97:54:0c:be:58:95:2e:7f:69:78:da:f7:20:
                    2a:81:ec:1a:a8:e1:4e:1a:bb:c6:cd:15:74:c0:b6:
                    54:16:ed:f9:dd:ff:30:b7:5c:c1:99:92:c3:31:b1:
                    a4:b7:1c:bb:4a:d6:e0:05:97:3f:19:9a:84:4e:be:
                    0d:b3:42:d8:34:61:33:cf:5a:29:f3:3e:a1:15:d0:
                    ad:10:19:64:70:18:f0:89:21:98:77:86:fe:52:2c:
                    e0:60:4e:4e:85:78:4b:4f:bb:71:cb:85:e1:de:6a:
                    15:5c:f0:8f:c9:fa:c8:6c:86:63:65:11:c3:de:9d:
                    db:38:cb:fd:1a:43:43:9f:6d:b3:d9:3f:fc:01:81:
                    39:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:7F:A8:15:38:AC:D2:FD:2D:59:5F:25:A1:DB:67:A6:AF:F8:7E:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3d5e6c37-d97a-30a2-bfcd-b824afd55a3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.47.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:01:da:8f:06:40:e8:ee:e2:d2:65:61:86:a2:0b:ff:07:59:
         6d:c6:51:cb:31:66:1f:5f:25:f0:57:ec:53:ae:53:e3:6c:a9:
         5b:22:82:bb:19:38:9c:5e:5f:1e:5f:6c:58:75:8a:33:75:0a:
         f7:c4:84:e7:4f:4c:c8:eb:49:ff:1d:f4:22:9b:e2:da:f6:c5:
         f2:34:fb:b5:af:13:cb:67:bd:c6:64:21:54:7f:26:c6:62:d3:
         75:2b:24:b8:72:30:61:d0:c5:75:9d:c0:5d:13:6c:a8:77:95:
         c2:dd:b2:91:2c:85:ac:25:ea:66:03:a7:6e:f2:b9:ea:a5:67:
         4f:84:fe:73:0c:f8:4a:b3:87:1a:00:d1:f0:47:45:e1:d4:dd:
         fc:dd:3e:ed:cc:9f:c7:f0:72:3b:39:23:b0:01:4b:0b:ad:42:
         52:e4:de:de:d5:32:95:b3:b8:1c:cf:60:d8:b9:67:3c:82:84:
         cb:a6:97:8e:88:1f:58:42:f6:50:42:bf:fa:e6:75:5d:68:d0:
         a4:b2:7d:6b:6b:f2:8e:cd:15:86:bf:ae:fc:bb:6e:6b:39:de:
         e9:61:d6:d1:00:f4:8a:55:dd:38:c8:73:38:76:ec:0b:bc:51:
         db:09:f9:08:fd:f6:73:73:7b:b9:6a:12:1e:d7:e7:ad:29:cb:
         d6:cd:48:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:04:23 2025 by rpki-client