Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/957939e4-7416-3306-905b-31bb5a17ac0e.roa
File:                     957939e4-7416-3306-905b-31bb5a17ac0e.roa (raw, json)
Hash identifier:          oPsEeVin6+GdExFFaDEGFfmUbjq9hoGERrK9vnOvhQQ=
Subject key identifier:   03:8B:EE:CA:8C:D8:29:C5:5D:C1:21:15:5E:57:DF:03:03:BB:CE:3C
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE19717DA43EE618789DA88C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/957939e4-7416-3306-905b-31bb5a17ac0e.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     36522
IP address blocks:        207.61.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:97:17:da:43:ee:61:87:89:da:88:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=448bf790-faaa-4aec-87f1-b17a9f9afb81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a1:89:41:79:e8:0d:db:eb:9a:39:6e:83:b3:
                    7a:e9:82:81:37:97:8e:cb:1f:db:19:36:75:f2:c0:
                    f0:75:8b:b4:ed:bc:5c:ef:4e:94:50:cc:dd:76:fc:
                    39:aa:71:c6:62:70:ff:b5:27:35:d5:a3:1a:86:a0:
                    f6:0e:b7:c3:e0:1f:21:f1:36:03:39:a2:18:c5:07:
                    32:df:d1:14:43:92:a6:d4:b3:7b:be:eb:f9:35:7b:
                    a0:c5:fe:a7:51:ae:92:50:06:9f:27:fe:9b:ac:5f:
                    d6:af:b1:8e:c7:bd:16:8f:bb:85:f1:33:e3:dd:f5:
                    f9:62:88:cf:9f:f7:da:6d:a3:66:36:a7:cc:b3:0a:
                    13:4c:6d:e8:27:dc:8a:00:04:0f:ff:8b:1d:eb:99:
                    9b:f2:ca:7a:ee:dc:9f:50:9a:38:76:19:8f:cd:dd:
                    1c:80:5a:3b:ee:11:29:96:6e:c7:e0:df:c6:b6:86:
                    91:24:81:31:bc:b1:76:91:8f:9f:c2:c0:0d:e6:8b:
                    57:11:b1:dc:a0:37:d0:b2:00:dc:f4:ea:f9:28:71:
                    41:69:e0:c8:e6:c1:f8:50:da:9d:91:01:15:3b:ed:
                    aa:1a:17:94:64:37:25:95:94:e3:7f:ae:43:6e:a7:
                    69:df:ce:22:c5:6d:fc:06:83:a3:c0:8c:5b:6c:c4:
                    c8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:8B:EE:CA:8C:D8:29:C5:5D:C1:21:15:5E:57:DF:03:03:BB:CE:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/957939e4-7416-3306-905b-31bb5a17ac0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.61.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:9b:0d:db:b5:2b:9d:d1:fc:45:6f:e9:0c:df:6b:a3:76:34:
         9b:61:75:88:90:52:9c:cd:9c:42:11:bd:bc:ed:9b:0e:1c:d9:
         c1:6e:b4:9b:53:61:57:e6:66:bb:1d:60:48:3d:2a:71:cd:a2:
         c4:ea:27:f6:66:54:56:ab:3d:53:2e:96:fc:2f:ab:d5:48:2d:
         5d:f8:87:db:da:d9:2f:17:f9:a8:ee:45:bf:5e:cc:9a:11:1b:
         89:55:ae:a7:0b:43:51:7f:66:0b:a5:f6:6a:73:3e:9f:3c:48:
         a8:98:5f:92:e4:be:dd:7e:5b:49:a4:bf:3e:3c:46:fe:80:ee:
         d3:b9:1b:37:6c:c9:6f:00:4a:0c:13:40:3f:b8:8b:82:9b:fe:
         f6:e8:87:54:80:0d:05:39:71:46:d2:ba:ad:6c:2c:8d:e7:6f:
         e4:25:6d:76:97:49:c8:db:f9:be:b0:69:03:21:e4:60:13:b6:
         c0:1c:64:f1:c9:a5:13:cf:66:d3:77:d9:36:f6:c1:1c:69:14:
         24:78:bc:0b:71:12:9f:85:dd:ec:95:41:f1:b9:25:01:6a:f1:
         6a:f2:9e:14:a9:c8:76:6a:f7:21:8b:cb:d9:f3:af:b3:cb:71:
         92:a5:5b:65:23:6e:19:68:61:7f:76:0a:fc:5c:fe:3e:18:09:
         93:ca:a3:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 08:59:45 2025 by rpki-client