Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3dca4cec-f290-3bcf-88c1-c85173ac8724.roa
File:                     3dca4cec-f290-3bcf-88c1-c85173ac8724.roa (raw, json)
Hash identifier:          T8Tsjg9mrWTSEYcAS3GSTQwqzV+FOLwdF9jWFAeXK4Y=
Subject key identifier:   4F:5D:1A:18:F7:DF:2B:6F:B8:59:72:BE:AC:3F:30:49:A1:23:C0:7E
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE1970BA0BC61E10563CA3B80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3dca4cec-f290-3bcf-88c1-c85173ac8724.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     3848
IP address blocks:        216.208.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:97:0b:a0:bc:61:e1:05:63:ca:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=9a33683c-0175-431d-9a4c-c6bf82ca1441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:82:91:d5:ee:85:fd:d4:8a:ab:68:75:74:8b:
                    05:4e:f2:22:aa:d1:dc:f9:10:a1:62:99:ff:9f:24:
                    eb:8b:73:ee:94:6a:0a:54:c7:b5:73:0f:fa:7c:b1:
                    83:68:3b:c2:c1:39:f4:ca:76:d7:49:02:4e:25:2d:
                    a3:c4:fd:64:42:8a:ca:3c:6e:ca:1d:d6:1f:f5:f9:
                    fb:7d:00:b6:39:6e:a6:34:96:24:07:eb:77:1e:20:
                    c5:9a:3f:3b:45:43:bd:08:92:4f:c5:e9:10:53:4e:
                    72:aa:8e:63:ec:ba:66:64:d9:af:28:7b:65:f1:79:
                    28:5e:3f:02:e8:9c:f7:50:65:e3:1f:d2:2d:f1:65:
                    40:c8:1e:ce:95:c0:5a:a9:fb:cb:3d:ca:3f:42:d1:
                    59:1a:36:fd:a5:fc:3f:71:de:a6:f3:73:3c:5c:f4:
                    b7:37:4e:c4:3e:71:cb:a9:25:5a:56:8b:bc:52:01:
                    55:56:c2:0c:da:c5:22:77:f5:45:3c:26:d6:cc:57:
                    f7:63:4d:60:17:e5:15:53:b9:81:c2:92:ba:fb:dc:
                    59:a9:5c:26:9d:33:2f:d7:9b:b5:e4:6a:b5:68:65:
                    1a:13:ec:75:12:50:0d:e6:6e:dc:34:80:8e:49:ac:
                    ab:fa:fb:2b:3d:6f:57:9f:1f:fe:da:69:22:ee:d2:
                    ca:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:5D:1A:18:F7:DF:2B:6F:B8:59:72:BE:AC:3F:30:49:A1:23:C0:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3dca4cec-f290-3bcf-88c1-c85173ac8724.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.208.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:18:c7:dc:2a:44:24:b8:56:44:64:5a:49:fc:b4:8e:ae:83:
         85:8a:b6:0d:b5:dc:43:ed:9c:ff:03:bb:05:be:52:86:8b:d9:
         ea:f2:1e:51:8b:8f:c5:20:3c:11:66:ed:83:e6:17:f1:41:99:
         b6:74:4f:16:74:6d:46:b1:28:db:14:a8:ca:ed:4f:dd:4e:03:
         04:e2:be:a7:11:05:bc:8c:03:d3:59:61:3e:df:5d:68:44:c2:
         13:9d:36:9b:bb:e6:63:15:b8:37:11:79:ae:b8:b2:c7:3c:98:
         60:5a:24:9d:3a:a3:3b:fe:0b:a7:56:7d:47:42:2e:cd:ae:4f:
         9c:20:05:9d:17:29:9e:36:6e:48:4f:0f:e6:17:56:2a:ec:21:
         9b:47:e3:b0:89:f4:2d:26:61:bf:71:14:1e:c8:0f:c4:08:21:
         67:b9:88:e2:18:a5:03:d4:43:ad:30:aa:54:66:2e:43:17:4a:
         fb:4a:88:4b:a5:a7:14:4f:44:fc:80:2d:50:68:62:4b:01:5c:
         5b:db:e8:75:a6:93:28:01:20:87:99:31:06:45:20:9f:a3:88:
         8e:cb:f0:be:4c:c5:d6:7d:b5:bb:82:5f:05:f7:5e:87:72:54:
         9b:7e:15:e8:05:65:a4:75:17:46:81:29:e9:0c:b9:31:63:88:
         bf:56:da:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 10:59:38 2025 by rpki-client