Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/721331c0-323f-3d28-902f-a48d9bdfe971.roa
File:                     721331c0-323f-3d28-902f-a48d9bdfe971.roa (raw, json)
Hash identifier:          ygfpmdkOQzxk6qg+i5eoaMpAAsMBXHA+vmBgyh3b63s=
Subject key identifier:   06:B5:39:3E:26:8A:DC:3A:C3:AE:61:BA:D9:92:29:42:22:E4:5C:89
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE1971429632130AE7E5027C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/721331c0-323f-3d28-902f-a48d9bdfe971.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     3848
IP address blocks:        2001:4958:a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:97:14:29:63:21:30:ae:7e:50:27:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=62a18a69-2c09-460a-a36c-10005f66ff4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:08:0a:5f:fe:8e:28:da:3d:53:ae:97:59:f7:
                    73:51:14:ff:da:9e:07:6a:7f:cd:4f:2b:39:f1:86:
                    17:3a:a0:e3:a6:d7:4f:d3:03:56:6a:5e:85:c4:61:
                    d0:2c:aa:32:f9:46:48:c7:e5:02:68:0f:85:2c:7b:
                    7b:c7:3f:10:ec:57:5a:3d:df:34:e5:c9:61:14:a4:
                    e7:33:7b:45:f5:55:dd:d9:ab:08:55:41:c1:71:83:
                    ad:6f:ed:a6:00:a1:aa:61:83:1b:fd:fc:f0:92:e1:
                    0e:eb:51:7e:70:ee:12:bd:4c:9b:32:d7:24:09:34:
                    d9:73:5f:3a:98:d4:f7:98:ec:1c:d2:a4:c1:4a:70:
                    2d:49:ba:48:49:d1:fe:9f:47:33:7e:15:d6:1d:98:
                    ba:eb:d6:fa:49:d8:1d:a9:65:ea:9d:6e:bb:60:0d:
                    69:72:30:05:cf:a7:cb:4f:b4:b3:53:52:2a:b6:e6:
                    0a:c3:59:7f:e5:1a:8d:51:f8:bd:f2:d6:cc:28:2a:
                    9c:d2:62:8b:84:8a:d7:08:3e:70:f5:ca:a8:fa:e7:
                    2d:a9:04:2e:e6:fd:50:08:c8:4e:a8:ca:c8:7b:59:
                    f3:78:0f:dc:b0:d6:98:a5:0e:48:c4:f6:92:cd:21:
                    7d:82:08:2b:24:df:f0:78:26:16:dd:92:88:0a:c0:
                    a9:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:B5:39:3E:26:8A:DC:3A:C3:AE:61:BA:D9:92:29:42:22:E4:5C:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/721331c0-323f-3d28-902f-a48d9bdfe971.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4958:a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:58:15:06:de:b2:be:d2:b0:5a:2d:e1:72:3a:4e:b0:2c:cd:
         fa:8c:9e:cc:dc:2a:5c:73:1f:4f:13:8a:cc:a0:64:ec:92:c9:
         6c:8a:8d:6f:a3:6c:58:95:2e:f4:2f:d9:20:bc:12:91:64:00:
         7b:1d:a8:aa:d4:5f:f2:1a:a0:b0:93:bc:09:25:b9:92:f1:8e:
         e0:11:13:ed:58:46:46:f4:c5:df:24:6c:ce:07:4f:70:55:f0:
         08:0a:d6:db:b2:1e:2e:6d:53:df:c0:e7:00:f6:d8:86:22:6c:
         38:be:70:ab:9f:fd:4d:34:8a:e9:95:6e:30:91:ec:85:f2:3f:
         a4:0f:b3:fb:3d:ca:04:97:66:bf:a5:8d:dc:ad:fa:8a:08:cf:
         e1:e7:c0:f5:a6:b7:bd:c5:15:07:d3:23:af:3c:f1:5d:b3:7b:
         78:fa:03:20:63:6f:7e:4b:54:79:dc:f6:ca:76:3c:1d:b9:c8:
         83:31:65:62:7c:6b:d0:45:ce:96:71:57:74:5d:14:40:04:b0:
         9c:5a:cf:c0:df:c5:4e:91:05:d2:f7:9a:2f:83:78:93:e5:31:
         99:48:be:5d:40:0e:dc:3f:f4:9a:2a:dc:4b:7b:2e:ec:15:23:
         d4:65:ac:1b:c3:e4:fd:5e:ba:fc:fe:10:d2:c9:af:95:3b:12:
         ee:04:5b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 08:58:14 2025 by rpki-client