Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/699073e1-929f-33b1-9e3c-ae50457d9761.roa
File:                     699073e1-929f-33b1-9e3c-ae50457d9761.roa (raw, json)
Hash identifier:          5jX48DD7l5qZKUQUtj1ZKp0F995Bc5/vVyRfxHIIKDc=
Subject key identifier:   5F:BD:E4:01:56:58:26:88:F7:6F:79:9A:1D:36:96:78:87:A1:49:B7
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE1970C930B4BCBF7D99889C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/699073e1-929f-33b1-9e3c-ae50457d9761.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     15321
IP address blocks:        216.209.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:97:0c:93:0b:4b:cb:f7:d9:98:89:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=70a97ea5-f071-4f18-aa44-9aac7aeebc05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f9:0c:27:3f:7a:8d:b8:51:2f:b6:c2:b3:c1:
                    b3:bf:bd:c1:3b:76:da:f4:52:5a:59:c6:ff:a9:bc:
                    fb:2a:38:45:a6:03:c2:f7:79:56:33:4d:b0:65:b9:
                    91:a4:14:20:45:22:80:41:f5:d5:8a:c4:45:f2:f4:
                    fd:05:75:bd:4b:f2:5f:2c:8f:1b:d7:a7:02:e2:16:
                    d4:58:de:c8:06:41:eb:a5:5c:71:b5:ee:94:d0:89:
                    c1:b8:5e:46:2c:1b:9a:c9:5e:5b:24:d8:1a:85:dc:
                    46:c6:e0:dd:74:d6:3b:d6:a0:d7:fd:21:73:5d:1d:
                    9a:5a:b8:49:1d:2b:7e:a5:61:c7:52:8e:37:0e:ef:
                    58:92:31:61:ef:eb:28:2b:4c:73:6c:86:a0:ae:a1:
                    68:7d:95:af:ba:a4:a4:f2:94:e5:fa:f6:2e:1b:2b:
                    62:1b:c2:42:d6:ab:c3:0f:20:c7:0d:3c:ad:37:67:
                    5c:bd:50:ac:5d:70:78:bd:2f:58:de:50:47:8b:ab:
                    38:6c:5d:6d:01:61:30:6d:23:83:72:11:03:3f:40:
                    98:01:70:8d:c4:8a:ff:1f:39:33:62:16:06:c1:11:
                    0e:9c:2e:17:78:09:31:de:7d:93:8f:ac:34:8a:92:
                    19:46:6d:07:c1:5c:67:b3:8a:06:f8:9d:a9:e2:67:
                    44:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:BD:E4:01:56:58:26:88:F7:6F:79:9A:1D:36:96:78:87:A1:49:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/699073e1-929f-33b1-9e3c-ae50457d9761.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.209.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:cc:3e:a2:3c:c5:31:a2:be:39:ae:2b:2f:4f:5f:aa:f1:6c:
         df:8c:74:c1:b2:6e:d5:4e:a0:0b:df:d6:a9:15:4f:d9:ff:4a:
         e3:cd:51:72:4c:4c:c7:c8:cd:b1:3d:63:1b:c3:39:fa:da:9b:
         06:3c:c5:73:6d:90:fa:87:be:5c:9a:f6:c9:d1:5c:91:87:65:
         7f:d0:5b:e9:ac:37:96:14:88:00:b6:13:f4:d3:e3:b7:bf:99:
         f8:e9:bb:05:cd:ae:af:64:a5:3d:bd:5f:37:b7:37:3d:2a:98:
         9b:fa:87:05:d2:1f:bf:d3:a4:87:14:10:96:f3:b9:f0:84:c2:
         fd:8f:51:f2:5a:f5:cb:fa:46:89:67:9b:be:b5:79:ac:18:59:
         2a:c5:be:d3:3c:b9:22:77:19:0b:c2:c3:b9:29:6c:58:ff:31:
         dc:3f:95:6c:d4:ab:0b:44:07:79:e2:45:3c:e8:9a:aa:84:25:
         a5:45:fd:1b:b4:e4:d7:3d:48:bd:2f:f6:ff:ff:17:bd:4c:3e:
         44:55:05:cc:81:2e:95:91:e1:68:23:01:a2:6b:c2:07:c4:0e:
         7d:cd:4a:0f:62:2f:dc:63:5f:48:91:d1:21:45:7f:0e:83:ac:
         68:d8:7e:1f:5b:ba:72:67:71:e0:0e:9d:e9:68:ff:a9:51:ce:
         c7:7e:32:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 08:59:34 2025 by rpki-client