Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9cf53ef8-4636-3a86-b234-8d81db9e7435.roa
File:                     9cf53ef8-4636-3a86-b234-8d81db9e7435.roa (raw, json)
Hash identifier:          Ok6+B7IuvHLR3Cd86MeYsyJjdVs+tvXqqPxu+gCBtAw=
Subject key identifier:   BB:E6:FD:B6:EE:18:E1:25:90:D2:99:AD:60:31:91:12:8C:5C:4F:C6
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE196778E4DAB0630C2F62500
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9cf53ef8-4636-3a86-b234-8d81db9e7435.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     36522
IP address blocks:        207.164.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:77:8e:4d:ab:06:30:c2:f6:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=8f027cb0-cdfa-47ed-a4e4-55fa7abecfcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:3a:58:a5:53:a7:35:d7:89:bd:88:cf:24:e3:
                    5a:5f:cb:3e:0c:79:20:15:9c:ec:4a:dd:fb:a4:31:
                    ac:38:91:29:11:bd:a2:2e:4f:5a:f0:19:ef:fc:6b:
                    d4:2d:03:6d:db:7a:32:7c:50:b1:1d:87:ab:98:0b:
                    62:dc:6d:1a:f1:13:ba:9b:7f:6a:69:8d:15:3c:76:
                    b8:22:ed:43:8d:74:b8:2c:2d:a6:9f:9a:79:1d:ea:
                    e1:9f:2d:c0:86:c9:e6:f9:41:99:95:e2:52:fc:ea:
                    e9:b9:af:f2:ad:28:26:84:5a:2d:41:00:65:e0:30:
                    f0:5b:7c:c5:85:02:cf:04:94:2a:b4:f8:17:74:7a:
                    fe:60:5f:5b:9c:ee:90:74:68:9b:2d:20:a2:60:68:
                    0f:ff:6d:4c:21:1c:2a:c1:f9:aa:47:a1:2e:0d:32:
                    76:a5:a9:fb:c8:c4:9f:1c:76:cd:51:70:a5:5c:e3:
                    40:46:70:46:29:a7:2c:c0:7e:59:76:66:74:7f:fa:
                    d5:16:f3:11:f5:42:14:49:07:7e:28:67:c8:0a:cc:
                    b4:af:60:57:59:29:30:54:67:ba:22:4b:40:7f:54:
                    1b:64:fa:0f:6f:a3:94:e5:21:aa:5c:f0:10:7c:45:
                    10:84:87:ec:09:f1:0e:b9:07:48:7c:7b:99:24:7d:
                    f6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:E6:FD:B6:EE:18:E1:25:90:D2:99:AD:60:31:91:12:8C:5C:4F:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9cf53ef8-4636-3a86-b234-8d81db9e7435.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.164.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:8c:21:34:f2:1b:74:b5:1c:ae:04:ba:07:49:9c:5a:1c:6a:
         ac:31:d6:e0:71:04:65:93:b8:e1:19:ca:c9:3a:e2:6f:b7:47:
         c3:99:1d:23:a4:e8:b9:dd:20:1c:0f:fe:8b:7b:2c:8d:cb:46:
         ec:94:cf:05:44:91:66:dc:ab:d2:3a:c4:51:4b:81:91:9c:bd:
         df:83:5b:48:e2:09:93:08:9f:b8:6b:66:b4:a1:86:5d:eb:9d:
         01:de:cb:4b:da:b9:a5:19:8c:64:cc:fe:a9:49:9a:42:09:4b:
         eb:03:06:05:e6:fb:05:81:a3:0d:6e:b9:e8:65:e9:0d:ca:02:
         9f:5a:f0:95:4e:91:3f:55:2f:68:43:76:71:e3:c8:a5:d6:f4:
         c5:28:fe:42:ee:4f:20:da:24:75:f7:0d:41:6a:a7:8d:8c:42:
         a3:9b:59:d5:63:ee:7a:25:98:68:c7:68:51:c7:fa:1b:f9:16:
         81:6a:67:64:da:84:ad:0c:eb:be:aa:21:8a:57:03:43:4b:c8:
         22:99:95:0e:34:98:a9:8a:03:33:3b:9e:13:e0:af:21:a9:99:
         00:0d:46:ec:0c:d4:98:a5:29:0f:1b:56:a7:41:ce:47:93:71:
         3b:20:26:68:cb:e5:f6:7c:e4:59:78:e4:e5:5b:f9:2e:60:dc:
         cb:3b:42:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 08:59:25 2025 by rpki-client