Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/53a4c87c-5186-3ee2-b77e-b0470c4136e3.roa
File:                     53a4c87c-5186-3ee2-b77e-b0470c4136e3.roa (raw, json)
Hash identifier:          8F0vHlSpPl6n2BVW8hCVpx4ly2BPjXUgMAqdNFKsass=
Subject key identifier:   95:BC:21:76:25:6E:63:44:93:59:6C:75:73:7D:BA:F5:5F:AE:45:76
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE1971A04D302050A519CDDC8
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/53a4c87c-5186-3ee2-b77e-b0470c4136e3.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     29974
IP address blocks:        207.236.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:97:1a:04:d3:02:05:0a:51:9c:dd:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=7760e1c1-797e-409f-a130-416ec3ab7656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e3:6d:5e:3d:c2:a7:16:14:bb:9f:39:7c:fb:
                    e8:23:aa:4e:63:bc:3c:e4:fa:59:7c:73:b5:43:fb:
                    8b:d8:b8:b1:b0:da:86:75:7f:d7:de:2e:e0:39:f1:
                    4f:e6:ca:1e:74:4c:65:4c:62:54:12:14:05:19:7a:
                    28:1d:27:7b:3b:1e:24:5a:09:9e:ae:16:25:c6:54:
                    76:8f:f1:66:5c:d5:84:36:65:4e:5f:62:26:3f:ac:
                    e4:bc:27:ba:67:83:41:fd:4c:32:eb:d7:29:09:77:
                    97:c6:6e:ea:7e:b1:30:c7:46:5c:a0:90:e3:f1:6b:
                    1f:47:02:73:40:39:c9:76:97:d6:3b:fc:0e:c0:8b:
                    e8:cf:1d:9b:13:12:7b:ad:3f:a0:19:ea:1d:cd:bb:
                    6b:6e:d9:df:f8:3c:9e:7c:17:68:cc:eb:37:bf:55:
                    18:c6:85:46:1a:2d:87:e1:d2:d3:69:36:7b:dc:d4:
                    71:64:6e:e5:f4:1f:73:7d:6f:c1:16:a2:9f:97:35:
                    c1:34:a3:03:6c:bb:7b:a7:2f:a1:95:0a:77:df:7e:
                    e1:04:8a:c3:1b:a4:e6:99:1d:d5:88:78:38:c5:78:
                    c7:5d:f3:57:ab:f7:5e:15:32:ff:08:c5:8a:d5:8f:
                    c5:da:10:4c:b5:ab:86:f7:bf:4f:21:fc:aa:38:29:
                    36:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:BC:21:76:25:6E:63:44:93:59:6C:75:73:7D:BA:F5:5F:AE:45:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/53a4c87c-5186-3ee2-b77e-b0470c4136e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.236.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:3e:a4:5b:b9:31:14:32:7d:9c:d6:d2:9d:6d:2a:0b:81:05:
         f7:a2:c2:1d:8f:96:f9:5f:d9:98:0a:d0:56:d8:ab:53:ff:1d:
         e7:9f:4f:cb:f7:ba:7f:d0:56:cb:61:b2:46:94:67:2f:be:e0:
         74:d7:5b:e0:b1:86:13:e8:b2:59:8e:29:2f:1e:cf:d9:02:08:
         06:b0:aa:88:76:d3:f6:df:c0:86:bb:fa:35:cf:9c:cc:01:9f:
         4d:b2:61:3b:bf:6a:17:69:c3:1d:d5:48:3f:2d:fc:dc:13:2f:
         28:d5:f7:f4:02:25:2b:f4:26:80:31:09:3a:f0:87:85:c0:9f:
         ce:f4:5d:45:b0:2a:0e:2d:98:ac:c9:17:c6:dd:1d:6f:92:a3:
         43:be:c7:80:0c:85:47:ef:33:7a:77:1a:14:13:20:01:1c:d8:
         51:5f:4d:d6:d6:14:22:db:db:59:8a:72:72:c5:03:1d:0e:51:
         45:6e:63:49:6a:36:2b:97:0b:44:98:71:97:61:d5:bb:19:a8:
         96:b5:b0:91:ac:dd:7d:cd:b2:be:57:d2:96:d3:cb:5c:38:42:
         3c:11:b8:0c:ed:78:40:00:59:19:3c:7a:ef:ac:89:61:b6:54:
         af:ae:19:a4:16:fd:e2:82:61:b7:fa:49:92:58:6a:f6:95:a6:
         b8:db:1a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 10:59:49 2025 by rpki-client