Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7c3f362c-7cc2-38d4-8ed7-f6792873b8f3.roa
File:                     7c3f362c-7cc2-38d4-8ed7-f6792873b8f3.roa (raw, json)
Hash identifier:          zkWPIXLvYL1QiNdHcP3Dxvvm3DmuZy2CRu/q6R1FVTI=
Subject key identifier:   C8:8B:D9:EE:04:60:7A:78:AA:BA:AF:43:F6:54:D8:3C:86:54:B5:40
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE1970CBB30ADAB4EAF98A200
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7c3f362c-7cc2-38d4-8ed7-f6792873b8f3.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     398721
IP address blocks:        70.28.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:97:0c:bb:30:ad:ab:4e:af:98:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=f70d2342-45b4-4005-843b-b845f608ee7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:64:d2:b1:2d:68:e2:58:da:41:69:34:31:59:
                    30:5a:3e:8d:ab:50:88:cb:1b:da:83:59:a3:5c:a5:
                    0a:e6:33:ca:6a:a6:f1:78:d1:a2:1a:8a:58:34:03:
                    cf:1e:40:83:f1:d2:56:7d:31:e5:fa:1e:24:7f:76:
                    ee:66:e5:e1:c6:b6:80:08:c0:ba:f7:af:39:61:17:
                    e0:01:7d:b7:93:c1:d7:f4:cb:9d:3f:90:23:12:67:
                    38:8c:6d:0a:7a:f2:f2:a1:98:90:ad:42:76:a0:18:
                    3b:f4:59:b1:f3:04:d4:91:92:84:80:36:ea:e3:65:
                    69:65:a9:5f:c0:c2:ef:26:0e:7a:4f:53:e7:98:74:
                    fd:9b:a7:c9:85:cf:e8:04:cd:ba:5d:2c:56:58:7a:
                    bd:2f:b4:14:37:10:94:c0:e4:7a:cb:5b:c3:35:41:
                    2c:82:62:fd:0e:bb:bb:22:d4:17:87:79:d0:e1:fa:
                    03:10:7f:7c:68:e3:f0:94:c3:a8:40:98:d7:19:d7:
                    00:15:cc:14:1a:c0:4c:b8:9f:ba:94:bb:ea:6c:9a:
                    49:46:3d:1c:f0:6e:ac:d7:6e:2a:e2:97:85:10:ce:
                    fb:88:f6:62:ac:a6:4a:1d:9d:b6:13:d3:ef:31:38:
                    be:df:ce:a5:bc:0b:b4:0d:6b:c4:9e:3c:3b:06:bb:
                    36:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:8B:D9:EE:04:60:7A:78:AA:BA:AF:43:F6:54:D8:3C:86:54:B5:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7c3f362c-7cc2-38d4-8ed7-f6792873b8f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.28.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:a2:c7:8b:03:44:a1:8d:54:a1:de:27:ef:50:9c:3e:6f:7f:
         74:0f:b0:95:7a:82:ef:0f:f2:69:7a:f8:b7:24:9f:3e:0e:7a:
         11:e2:c1:0b:83:c2:1d:d1:10:2e:96:96:a7:08:51:95:2e:cc:
         0a:3d:3a:65:24:eb:47:19:6a:c9:e8:2f:20:2a:3d:16:fe:c5:
         a0:96:cf:45:99:3b:ed:fe:2f:76:8b:43:23:a6:02:8a:00:18:
         08:4d:27:8b:76:b8:d3:5a:d8:e4:6b:a3:bc:30:5c:b7:0a:43:
         8e:da:65:b2:34:71:17:d9:41:c3:f0:5a:d9:55:7c:39:b4:53:
         c6:75:9e:18:e0:72:72:39:8a:38:e0:a7:33:c4:b8:1d:9f:8a:
         03:dd:c6:11:fa:e7:eb:97:ea:49:95:c1:26:c2:39:10:b0:70:
         90:7b:6d:df:6e:48:18:f5:36:fb:ab:26:8b:e1:8d:cb:72:da:
         44:2f:b1:3d:07:da:b3:be:ca:13:ae:bc:aa:b7:58:79:83:dd:
         89:0a:6d:8f:03:61:b3:63:c5:16:79:d8:37:81:56:c0:e3:ff:
         79:47:fb:a4:d9:8e:0b:28:48:ac:e4:59:a0:c1:9e:0e:34:85:
         a3:9e:e4:ac:39:93:c5:c3:2e:c8:17:88:c5:11:a7:05:ad:9d:
         f7:19:51:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 08:58:16 2025 by rpki-client