Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/820b0b9d-0f2e-3cac-a460-ecfb3bb644ae.roa
File:                     820b0b9d-0f2e-3cac-a460-ecfb3bb644ae.roa (raw, json)
Hash identifier:          qJe7aEx4YV/p3xc3jNQoloUsSuCv3WQdiis6bOjh4NA=
Subject key identifier:   2D:DD:28:EC:19:77:B4:97:63:57:B4:25:93:14:5D:E1:6A:12:76:FE
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DAAB6D498879283CAD4FC0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/820b0b9d-0f2e-3cac-a460-ecfb3bb644ae.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     15321
IP address blocks:        207.164.228.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:ab:6d:49:88:79:28:3c:ad:4f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=78260c07-1ce6-473d-88da-31f921a3c552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:2c:60:2e:44:c9:8d:08:89:03:17:76:3d:e4:
                    7c:60:d2:92:67:92:d0:79:b1:d2:80:8f:e0:d5:01:
                    5a:dc:35:d3:6c:8b:40:d4:ac:3a:ee:51:c4:94:2c:
                    90:e7:c2:5b:79:08:c2:bd:b5:a0:d1:12:de:4d:50:
                    4e:be:39:2c:0d:81:64:a1:74:01:6d:72:a9:a1:73:
                    0c:39:b2:f2:e8:4d:d8:38:db:43:07:5c:80:63:f1:
                    aa:2b:e6:bf:ad:69:4d:db:d8:a5:07:c5:53:53:b3:
                    24:2f:b3:73:11:55:65:fd:f3:91:8a:38:1c:cf:88:
                    77:ff:7e:63:12:aa:d6:fd:11:73:b2:d0:c5:a4:59:
                    5c:25:06:88:95:72:7e:38:f6:64:c6:ab:aa:59:b9:
                    62:83:e8:86:47:ce:7e:a7:ac:08:26:83:17:b0:04:
                    e0:e1:f9:46:a4:a1:66:66:70:8d:f1:ed:75:8f:17:
                    32:d7:54:50:0a:f9:46:46:20:d9:09:3c:88:7c:1f:
                    2c:db:f0:87:fb:46:09:6a:3b:38:b3:8e:e1:e0:23:
                    63:c1:bf:77:e6:9a:43:c2:a7:d4:46:e2:bd:f6:2a:
                    e4:44:21:60:d7:70:87:3f:ff:8a:e6:56:c7:5b:36:
                    aa:5e:12:fa:29:38:1b:e1:47:6c:c7:ba:d8:16:39:
                    20:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:DD:28:EC:19:77:B4:97:63:57:B4:25:93:14:5D:E1:6A:12:76:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/820b0b9d-0f2e-3cac-a460-ecfb3bb644ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.164.228.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:34:9b:43:32:eb:20:fe:99:ed:3d:b4:27:83:9e:8d:c3:0f:
         85:db:6c:18:3c:17:90:5b:2e:69:fd:26:4d:a7:d1:72:9b:3f:
         29:e7:86:0f:74:cb:62:fb:f4:53:e5:d4:a9:f4:1b:a2:64:5d:
         e7:96:75:d9:fa:30:b2:ec:7f:54:ce:da:31:f6:73:bf:82:cc:
         dc:5e:85:3d:fc:66:02:2d:3e:9d:45:4b:ee:61:28:44:7f:53:
         82:6e:43:ab:85:a2:57:24:f3:71:77:aa:2f:e4:06:a9:34:36:
         fc:97:44:da:ef:f5:8f:2b:c7:73:92:d3:dc:53:1b:66:90:49:
         cf:7a:56:6d:15:16:71:f7:6b:e2:90:10:06:53:d2:0f:85:19:
         35:ab:f4:6b:df:6e:a5:de:8b:2a:74:a3:8a:13:54:e0:a7:82:
         a0:c7:ba:6a:e6:67:78:e0:91:3a:73:67:09:76:ad:08:40:4f:
         01:68:0c:62:b7:a3:33:62:bb:65:78:f4:0e:48:34:76:64:f9:
         5d:37:d4:0e:4e:1e:d4:37:53:c9:b4:50:42:de:a4:92:9b:8f:
         a6:33:b4:b0:cf:74:dc:22:25:b8:8e:15:aa:b4:ec:3e:5d:d9:
         fa:57:94:b9:c0:45:45:d5:86:d4:58:11:c9:d1:b3:51:2f:57:
         dc:8d:16:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 23:39:28 2025 by rpki-client