Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/458aa676-e15f-387e-993d-16f00f08f98c.roa
File:                     458aa676-e15f-387e-993d-16f00f08f98c.roa (raw, json)
Hash identifier:          BzuA4oPDp33i61Sqk0ckTWFO6Fb5VCQ/XPyP3SxeqLw=
Subject key identifier:   44:15:75:66:E7:46:9D:2D:A4:3F:1B:32:34:DD:B7:65:02:DA:96:CA
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE1971218DE4849825CB14B80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/458aa676-e15f-387e-993d-16f00f08f98c.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     15321
IP address blocks:        216.209.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:97:12:18:de:48:49:82:5c:b1:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=dff7b03b-146e-44ea-9a30-c37cd8d19678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:9c:39:ea:5c:57:9a:78:ef:a6:c8:fb:64:f7:
                    be:cc:ac:91:49:6d:05:22:fc:d2:b1:1d:cf:2b:28:
                    a9:58:45:74:da:ae:5f:56:64:63:2f:f8:1f:88:84:
                    cd:1d:61:df:91:4e:f1:70:5b:18:ab:f6:c8:dc:3d:
                    dd:cf:aa:af:d3:d5:36:74:70:fa:ea:ae:e7:49:86:
                    84:8a:d0:b2:98:b5:66:b3:cb:36:be:dc:a3:d1:5a:
                    20:d2:c0:91:7e:ea:a2:b7:00:b1:9c:97:c5:b9:0a:
                    2d:bc:1d:1e:3a:f4:0f:d5:ff:0a:24:44:0e:00:82:
                    6a:58:1a:c0:11:d3:ba:95:61:a7:1a:38:6b:c9:83:
                    db:13:f8:c8:e3:de:d1:d4:f0:15:6c:44:5d:a3:09:
                    e7:78:53:6c:20:52:5e:bf:f9:45:74:57:22:ab:a3:
                    9f:ab:91:eb:b8:bc:a3:4c:b8:ba:fb:ee:37:66:da:
                    6b:48:dc:fa:b7:4a:05:7d:41:ca:aa:24:9f:58:ec:
                    d1:5a:61:65:31:37:a7:9e:8e:ca:83:93:8f:2e:e5:
                    3a:24:28:85:1c:00:31:4c:ba:1c:ed:ff:f4:09:0b:
                    59:6c:1d:16:a9:02:a2:45:23:ee:05:03:35:39:f9:
                    e3:bd:c3:f0:d1:12:91:4d:73:19:37:f1:d3:16:0d:
                    69:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:15:75:66:E7:46:9D:2D:A4:3F:1B:32:34:DD:B7:65:02:DA:96:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/458aa676-e15f-387e-993d-16f00f08f98c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.209.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:f8:cf:78:a6:39:c3:62:d6:46:3c:70:19:1c:80:22:45:79:
         5a:9f:ce:41:69:84:94:ae:b3:44:9b:4b:f1:1f:de:6d:db:b3:
         f4:a2:bd:63:07:6b:cb:fa:5a:52:84:d2:27:f5:03:f5:8c:73:
         4f:99:e6:0e:e5:a1:2e:b1:76:eb:ab:73:f1:a5:44:af:46:10:
         4b:e0:ba:c5:93:fb:d1:c9:1a:d2:33:bc:56:03:f5:7c:f5:a5:
         67:ad:d8:0d:8a:95:3d:87:e4:15:74:c2:58:31:ae:b6:1d:58:
         f2:18:74:83:92:77:99:89:ce:77:93:c8:75:04:22:f1:f2:d7:
         7f:b3:2b:ce:43:4b:4d:7c:25:ef:8e:c9:b0:0c:a5:9e:29:d2:
         8d:a6:84:f2:c5:2f:bd:9b:9e:2a:a5:c2:36:56:3d:4c:07:32:
         37:2f:ae:ac:25:67:3a:0d:e4:cd:cd:78:96:f3:9c:21:cd:37:
         b3:e1:e8:6a:8b:4c:e7:f5:c5:07:d2:4d:17:ec:bb:1d:9a:16:
         9f:af:a6:bc:52:de:e5:4e:b2:72:a9:44:de:a7:4f:f5:7d:da:
         6d:85:db:e0:57:bf:14:5b:32:10:fa:94:d1:b9:53:8b:e9:d8:
         6a:6f:7d:ae:db:f2:bd:e6:33:5a:13:e4:06:7c:94:d1:d9:14:
         d4:92:5f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 08:58:18 2025 by rpki-client