Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/574a2081-ba27-3a68-a33d-47587302a332.roa
File:                     574a2081-ba27-3a68-a33d-47587302a332.roa (raw, json)
Hash identifier:          V5fw48AW9CazyTKuNf0qqjVYCOsOVKfmrtYjceDRhsQ=
Subject key identifier:   58:29:00:6A:AF:95:21:BF:E6:8F:9D:E3:BD:3E:A9:0C:28:DD:CF:B2
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE197098E8B63BCC6B99939C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/574a2081-ba27-3a68-a33d-47587302a332.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     25946
IP address blocks:        206.47.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:97:09:8e:8b:63:bc:c6:b9:99:39:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=a4860896-d3ed-41b8-89a3-5dbadfefb41e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:66:db:3c:34:3f:a4:eb:f7:28:a8:51:21:dc:
                    01:9a:ea:ef:24:f6:df:12:40:96:7e:23:9f:f3:36:
                    6f:ac:1f:25:a2:e1:85:d9:70:a0:a1:a3:db:3d:38:
                    a0:48:cb:3a:5a:31:32:97:46:93:12:b4:a2:61:ea:
                    80:f5:1a:26:a7:11:71:be:e7:ca:65:60:14:9a:5e:
                    a3:6c:b7:5f:ee:c7:9f:ca:be:62:34:cc:0e:cf:72:
                    95:60:f3:0f:6f:70:92:b5:71:b7:a4:ff:70:76:96:
                    e8:2a:83:39:4c:f2:17:6a:da:73:ff:b4:3e:47:31:
                    d6:8c:95:95:cf:49:19:6d:b7:c2:9d:eb:ad:8b:c6:
                    ae:6b:3c:d7:7c:25:29:b9:ba:91:c8:df:14:b0:67:
                    2f:99:ba:55:e4:2d:0a:69:ff:27:f3:e6:da:ba:5f:
                    6c:d3:c8:73:09:a5:f1:2c:2a:75:3b:17:c0:76:a1:
                    42:ef:49:84:96:57:74:22:5c:87:5d:ef:76:4c:b4:
                    30:92:a7:3a:9f:ee:24:52:14:a1:12:91:5a:47:f8:
                    cf:81:7b:b3:63:20:9c:32:91:8b:75:65:8f:ff:c3:
                    67:72:13:f0:f0:ee:cd:9c:4f:dc:6d:e7:57:48:de:
                    43:dc:7a:db:dc:f6:87:fc:d6:01:04:b0:df:34:be:
                    98:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:29:00:6A:AF:95:21:BF:E6:8F:9D:E3:BD:3E:A9:0C:28:DD:CF:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/574a2081-ba27-3a68-a33d-47587302a332.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.47.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:63:c0:d6:bf:66:8d:10:3e:b3:d7:7c:ac:3b:e2:76:29:bc:
         37:14:16:f2:7e:82:f6:18:d1:cd:0d:de:73:76:55:9a:2d:c8:
         da:97:a4:fd:bd:8f:1f:08:63:dd:b9:d5:c9:95:ec:d8:d2:2b:
         13:1d:51:ff:18:9a:6a:6e:1f:70:de:2a:53:38:28:13:76:0e:
         74:66:4a:6f:57:31:4e:66:12:ba:60:2b:0b:fa:5f:20:e3:bc:
         7b:4e:7e:5c:2c:3a:c7:05:0a:33:ff:d2:90:c7:fe:04:9f:50:
         1b:c6:42:5f:8d:f4:00:88:ac:c2:f0:2b:ad:43:5b:e9:6d:c2:
         a3:e4:a6:6d:8d:c8:a3:b9:d7:e2:4d:4f:bb:27:44:7b:ad:09:
         ac:cb:98:51:6c:0f:ee:65:11:18:9f:ed:95:a6:dd:93:06:e9:
         35:39:60:0b:05:5f:54:e3:aa:6e:07:4b:8b:68:a9:da:b3:fb:
         d2:41:bd:7b:94:ab:10:91:90:bc:32:3c:91:c1:30:25:66:c9:
         d6:22:44:4f:e2:d6:45:5a:88:81:4f:bb:98:c5:d8:4f:97:a1:
         50:c6:1b:80:f9:22:3b:b6:31:ad:99:c3:61:9d:c3:ba:fa:ce:
         de:39:1e:2d:e1:bb:86:b8:ba:82:84:d7:d6:eb:08:a1:34:58:
         59:e5:85:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 08:58:52 2025 by rpki-client