Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/76a84b3a-ef60-325c-8bd1-5a67366c2b6f.roa
File:                     76a84b3a-ef60-325c-8bd1-5a67366c2b6f.roa (raw, json)
Hash identifier:          GVLzJzgKTBMzKKCwruYZwbfyTT6lEHwi+mHq5bX29Ow=
Subject key identifier:   A8:9F:29:50:D7:92:7C:30:42:A5:AA:BA:83:D4:0C:3B:2A:87:00:39
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE197149F8D7F2A6B70CA6050
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/76a84b3a-ef60-325c-8bd1-5a67366c2b6f.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     36522
IP address blocks:        70.28.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:97:14:9f:8d:7f:2a:6b:70:ca:60:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=c1137ce1-89b6-4d07-a2fe-d108cc74c896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:35:9b:21:53:67:ee:5b:bb:ab:a6:f0:08:18:
                    ae:bc:68:5c:20:b3:73:f4:78:e6:90:24:0c:b8:ec:
                    0e:d1:34:1c:ea:2f:52:23:3d:97:ca:4e:ba:d2:e3:
                    5c:ac:b6:95:20:0f:22:a0:8f:5c:73:07:8d:b0:42:
                    57:8f:81:b8:1b:31:db:03:5a:df:0c:97:a3:ee:ee:
                    b3:8e:19:cd:57:9a:42:73:59:2a:66:e3:59:f1:80:
                    58:37:4b:f6:b4:d9:76:45:d6:9b:37:b3:bc:1c:c0:
                    f4:8d:45:b3:a6:f0:fc:80:81:45:83:2e:65:08:f3:
                    c0:52:0b:d1:98:46:78:c3:52:95:74:f1:7f:b3:c6:
                    38:e3:ed:42:ca:bf:f3:45:9f:bb:6c:3b:6e:e9:ba:
                    ca:3c:76:2b:d1:9d:a8:ec:0e:06:61:32:98:6c:d7:
                    60:15:46:8f:87:44:e2:d7:90:91:ec:4f:15:41:66:
                    97:4d:b7:18:97:70:57:54:a8:87:fb:51:9f:d7:f4:
                    98:e9:0a:d7:49:0e:3c:9c:2d:23:dc:ce:6d:3a:db:
                    d8:50:24:dc:3e:60:cc:59:01:8d:ee:d0:55:3a:89:
                    b6:5d:eb:65:43:c1:00:9b:2f:c0:ca:51:f5:aa:67:
                    a9:d0:5b:5f:51:d6:0f:a4:a9:7b:30:2d:57:b0:5e:
                    1f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:9F:29:50:D7:92:7C:30:42:A5:AA:BA:83:D4:0C:3B:2A:87:00:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/76a84b3a-ef60-325c-8bd1-5a67366c2b6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.28.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:b2:d8:f9:ce:82:67:de:19:bf:f6:34:66:42:9e:31:f1:cc:
         a8:a2:cd:d1:04:c1:b0:99:1f:39:6b:12:c9:b5:3d:b3:db:00:
         9f:4d:ec:61:19:50:1d:37:89:5d:06:73:fe:03:e8:6e:3a:ff:
         1c:ae:08:ed:10:05:31:a5:0a:47:10:93:9e:fe:37:4d:0c:f9:
         de:95:4f:36:49:6d:6d:ee:0e:3a:c5:2e:02:fe:7e:14:99:8d:
         82:54:4e:29:b9:55:7c:46:73:dd:12:27:d6:43:0c:25:e7:8c:
         dd:b2:84:07:56:75:bf:fb:ce:95:ff:36:57:09:cc:d0:d1:46:
         a2:7b:75:ac:9d:99:d2:28:dd:73:b3:7e:23:65:57:67:5a:5b:
         e0:89:79:c8:40:d2:f9:7d:5f:72:51:e1:b3:51:55:06:b8:10:
         49:f2:20:bd:ba:79:50:34:ad:24:1f:df:62:a0:1d:94:f6:32:
         15:c7:90:8d:2a:2a:20:c1:8a:3b:90:24:c7:85:bb:61:96:2d:
         41:a8:f5:c0:51:dc:0e:45:f1:93:3a:7a:a3:76:9e:37:d6:1b:
         91:41:a7:8a:b0:fd:12:dd:fa:67:57:aa:61:6d:84:00:91:2f:
         9e:4f:f6:f2:3d:28:96:a1:0f:2f:61:a4:51:04:c1:11:43:f0:
         58:da:9c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 08:59:59 2025 by rpki-client