Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/46368781-2e5d-3d24-857d-55cb715e6dcd.roa
File:                     46368781-2e5d-3d24-857d-55cb715e6dcd.roa (raw, json)
Hash identifier:          cIs7+dZNC3tu5jLG+Ivu5e/o5wi89pCxcM90TP9mFTg=
Subject key identifier:   28:82:35:17:CF:31:68:63:6D:8A:08:B4:33:BE:16:45:8A:04:05:6E
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE1970FD43DECB70B4EC48400
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/46368781-2e5d-3d24-857d-55cb715e6dcd.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     36522
IP address blocks:        184.151.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:97:0f:d4:3d:ec:b7:0b:4e:c4:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=24021b27-52a0-4424-a689-73b4709d9d55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:41:de:79:9b:d6:9c:18:06:b6:18:0f:32:e0:
                    11:c1:e6:24:53:fa:1c:2b:ad:65:6f:9f:e3:ad:9b:
                    1d:95:50:0b:c4:45:05:0e:6d:62:74:05:71:83:ed:
                    13:93:40:88:d5:ee:12:80:2a:ea:66:ed:e4:a9:57:
                    60:22:15:37:42:cc:b5:63:4b:9b:ba:8c:2f:63:02:
                    8a:9e:59:4d:94:de:56:0b:a8:40:8d:15:64:e5:55:
                    16:ef:7c:87:39:00:31:13:9a:61:fa:20:0b:d2:36:
                    73:b5:09:95:86:cf:b1:c7:f4:d1:21:b9:f9:c4:a4:
                    e5:bb:4a:cc:45:42:4a:b6:a1:d8:0f:22:07:a3:15:
                    8d:fa:c5:49:1a:c3:7f:0b:e9:3b:7e:19:ef:d1:f5:
                    ec:ac:09:df:be:15:7b:0e:a0:fc:da:b6:b8:f2:2e:
                    c8:70:a6:78:42:02:48:09:02:0f:f0:cd:85:0a:8b:
                    2c:a5:12:90:ab:02:77:23:8a:79:3b:0e:83:ff:82:
                    86:f8:d9:95:f1:75:29:eb:e0:e7:10:22:b9:2b:e7:
                    99:fc:83:46:08:54:df:3c:73:a4:4d:96:a9:a7:75:
                    fd:74:fe:88:64:b8:db:53:0c:47:81:99:ba:fd:22:
                    df:3e:e3:9f:cd:e0:ef:34:10:c5:d7:59:ce:72:ad:
                    ca:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:82:35:17:CF:31:68:63:6D:8A:08:B4:33:BE:16:45:8A:04:05:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/46368781-2e5d-3d24-857d-55cb715e6dcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.151.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:e3:cc:80:ed:92:d5:a5:03:53:e1:3a:59:3b:2e:84:d8:fa:
         71:9e:76:36:0f:37:72:7f:ef:41:bd:e1:78:21:82:95:d9:d3:
         04:d5:9e:83:9a:27:2f:7f:4b:d5:7e:5e:0a:d9:91:5e:c8:fc:
         e0:aa:80:61:03:a2:22:e8:e3:42:52:5a:23:35:46:61:40:c6:
         ca:39:4f:f2:12:09:f5:0b:2e:85:0b:3d:9a:24:2b:8a:56:84:
         18:30:a4:7a:3c:5e:f7:45:d9:4d:fa:7b:2f:36:28:13:d1:9b:
         90:f3:30:0b:99:59:af:e6:ac:eb:76:6f:c6:e1:85:8e:ec:fd:
         68:49:1e:23:b9:49:cb:d3:1e:f2:0c:e8:ba:65:b7:19:d4:2b:
         33:29:66:58:ac:8a:a6:54:be:68:3a:18:7e:58:11:4b:95:18:
         64:e3:17:f8:f1:13:8b:ff:11:2f:32:e1:71:03:55:f9:da:c0:
         c4:21:b9:1b:cc:a5:e1:d6:3b:ec:51:4d:ef:f0:93:d5:9d:3a:
         a9:ae:95:76:67:ab:a4:a4:98:c5:35:c1:9e:02:f2:45:ad:ed:
         13:90:c8:7d:cb:03:7c:02:1d:b7:a5:15:a4:4f:fa:b8:68:04:
         8b:f9:1f:94:f5:d6:23:9a:bc:13:73:5a:87:ff:c9:4e:e6:50:
         42:18:3c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:01:28 2025 by rpki-client