Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/41d05922-8047-3448-916f-23c9508ef27b.roa
File:                     41d05922-8047-3448-916f-23c9508ef27b.roa (raw, json)
Hash identifier:          XpyLZ7ErLpEFwcFRBwFopkFakp3GiAw1kWjBr+wkE/0=
Subject key identifier:   E6:EF:10:FA:96:00:94:E8:7E:90:93:A1:E9:5B:2E:95:DF:56:D2:1B
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE19716C6E9DC6B1D5A989300
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/41d05922-8047-3448-916f-23c9508ef27b.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     30048
IP address blocks:        209.226.78.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:97:16:c6:e9:dc:6b:1d:5a:98:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=e0da9875-74d1-4553-aee0-5d571a3d6db9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2b:60:a5:a9:6c:b9:ff:aa:32:e6:7c:8e:63:
                    83:b6:2e:f8:0d:82:66:73:98:bf:56:d3:82:b7:32:
                    97:fe:10:7f:94:bb:83:3c:c5:e4:f6:da:ec:57:58:
                    4b:6a:02:c7:5b:fd:49:0d:c3:c3:24:b2:1e:e7:f7:
                    8d:d9:f6:65:60:12:a2:8c:47:17:99:f0:d7:a3:71:
                    a6:40:f5:4c:90:20:4d:c4:f9:84:5a:d9:32:85:23:
                    75:aa:71:07:cf:b0:da:3a:49:a9:79:5f:2e:f8:53:
                    a5:f9:03:de:ff:e1:60:d2:af:a6:be:af:dc:d0:b6:
                    1d:33:9e:d1:14:4c:e7:56:d5:76:d4:ad:4f:51:c3:
                    7b:14:67:4c:f8:b5:c6:60:d0:21:99:70:90:70:6b:
                    d0:2d:7e:ef:ac:f9:8d:be:b3:5f:37:71:c6:11:22:
                    fc:de:09:46:d1:e9:fc:43:44:ad:06:82:fc:0a:8c:
                    6e:97:ba:2b:3e:19:bf:96:66:57:f6:b0:ed:37:9c:
                    0a:87:ef:54:42:f8:52:81:e6:c0:f1:a2:54:ad:85:
                    5e:ba:6b:e9:00:f5:ef:f9:df:98:6a:89:ff:08:76:
                    44:89:b9:21:28:d2:6d:26:3d:e4:15:ce:8c:93:a2:
                    a4:c5:0f:6f:00:10:16:2a:fc:27:91:62:f5:55:f3:
                    31:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:EF:10:FA:96:00:94:E8:7E:90:93:A1:E9:5B:2E:95:DF:56:D2:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/41d05922-8047-3448-916f-23c9508ef27b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.226.78.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:c7:3c:a0:96:9f:42:02:43:e9:a2:b9:7c:84:f0:c6:c2:bf:
         a6:13:af:62:7f:13:02:a9:e1:d3:49:10:f2:88:09:8f:46:d5:
         57:3e:b0:e2:e7:f8:6b:f2:d3:49:bd:1b:da:cf:0b:be:d5:a7:
         b2:c1:ec:30:2c:e6:18:6f:26:9f:dc:5e:5e:fd:46:53:9b:5e:
         9c:91:97:c3:45:59:80:00:23:61:59:7a:2c:37:0c:f4:ce:a2:
         b4:c7:54:5b:76:84:3e:48:0a:3b:d6:cc:f8:65:3a:12:07:e3:
         b3:ab:66:63:74:36:ea:e6:75:96:bc:a0:9f:42:59:a6:31:52:
         09:0c:4b:d6:0e:62:20:4c:4d:07:ed:b3:9f:6e:2a:53:9d:e0:
         88:0e:42:c6:26:ae:8e:d5:e2:84:08:22:30:8c:1d:6f:52:f6:
         35:8f:e6:3f:ac:9c:43:d0:d3:7f:7d:fd:74:4e:98:40:58:b6:
         73:5e:32:71:eb:8a:50:7a:4a:83:8d:aa:22:c5:d5:f8:ab:df:
         95:c3:d8:c9:d5:9d:c6:0d:fb:f5:65:2d:82:84:5d:61:0b:15:
         a9:03:6c:ac:b9:66:92:52:3a:b7:cb:df:97:55:a5:f9:85:e9:
         87:f3:d5:a1:b9:a2:1d:3f:1f:d8:29:14:ef:9b:54:4a:1e:5e:
         1e:3d:b3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 08:58:48 2025 by rpki-client