Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9ec9a59c-d201-35fa-9692-838d0108531f.roa
File:                     9ec9a59c-d201-35fa-9692-838d0108531f.roa (raw, json)
Hash identifier:          xkADXn6R4bPPAjFL4yC4EhE9/FtwNqpV4HYzeRM22ZA=
Subject key identifier:   75:5D:1F:68:EA:47:B6:17:D2:57:A3:1B:4B:58:36:4F:50:78:C5:B4
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE1965D5E222BDE901EF33740
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9ec9a59c-d201-35fa-9692-838d0108531f.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     21723
IP address blocks:        209.226.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:5d:5e:22:2b:de:90:1e:f3:37:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=bd892b70-926c-4dcb-b6a7-f23e17877741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e2:70:b2:2a:df:99:e7:b1:8a:1d:99:a1:c3:
                    68:f2:43:24:1c:8f:ad:1d:fb:57:30:84:65:57:a4:
                    e2:c9:ef:ad:53:7f:d4:e5:8e:2e:05:2d:10:c8:3f:
                    a3:e8:86:2b:34:e7:e7:e3:88:c4:17:e7:c9:a5:7b:
                    0b:31:cb:30:ec:e0:8b:37:ae:b5:1f:3b:4f:b2:a4:
                    3e:04:38:9a:e2:21:ab:7e:72:e5:5e:18:2b:6f:39:
                    2f:53:41:a8:68:c3:c6:e9:9d:ce:eb:ae:5d:54:e0:
                    b8:98:63:0e:19:20:b2:55:68:9f:e5:5a:57:d2:35:
                    11:4d:fb:e7:7e:43:87:ef:ff:58:1b:3d:c3:e9:30:
                    cd:45:31:c5:42:42:a7:e5:26:d8:45:94:a7:1e:28:
                    d6:25:d4:4a:79:2a:88:bc:fb:5d:5b:c3:03:cb:75:
                    b6:f3:9b:e9:52:4e:9c:57:47:2b:aa:97:48:c1:70:
                    5a:a9:53:30:fd:7d:64:4b:d8:02:a3:d3:8c:73:23:
                    26:d1:3b:02:a7:6a:ff:65:5b:f3:71:cb:93:dd:15:
                    df:10:0a:4e:5f:b7:ad:76:04:4c:41:9c:81:82:9b:
                    9e:a2:ff:82:3d:06:e9:18:ab:b4:25:49:ec:b2:cc:
                    d9:4a:65:49:4f:92:89:71:a2:92:60:3e:28:2e:90:
                    0e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:5D:1F:68:EA:47:B6:17:D2:57:A3:1B:4B:58:36:4F:50:78:C5:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9ec9a59c-d201-35fa-9692-838d0108531f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.226.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:fa:4c:db:06:76:a7:69:2d:cc:ac:a0:62:8e:42:20:8c:20:
         29:3a:5b:21:ee:4e:6a:f7:13:54:c9:2b:9b:1b:4c:a3:eb:13:
         5c:2f:a2:d9:7d:c3:d3:41:27:9c:57:84:32:71:97:25:15:ed:
         bb:3e:ad:b2:87:0e:ef:b9:56:47:04:ee:9a:c3:5b:4b:b3:84:
         7f:08:2f:b6:29:bc:73:42:c8:98:82:bd:40:98:af:64:6d:57:
         75:a6:04:a4:77:ef:6f:96:ff:a7:87:0c:ca:6e:c4:2f:01:d4:
         95:95:95:bc:ee:46:db:2f:a5:cd:4d:89:da:ce:f1:00:cc:d3:
         0d:ca:9c:67:4d:54:6e:77:1b:8f:b8:f3:ae:26:fc:12:22:8b:
         ba:48:57:e7:b2:48:a2:e7:ac:ee:37:70:da:51:5e:1b:c2:24:
         cc:71:a1:7c:1d:ad:cf:6d:29:5c:b5:fa:2b:52:42:0b:ba:bd:
         20:3e:25:d1:00:b9:df:7e:d0:f2:f2:ff:29:e9:44:98:03:da:
         b8:92:fc:ec:6d:c2:bf:dd:d5:ed:05:91:27:7f:cd:3e:27:64:
         db:3a:3f:58:ea:fc:d1:87:18:29:8a:8e:5e:64:8f:47:61:a4:
         a6:58:5d:72:22:aa:a0:a1:9e:5c:c4:86:6f:74:0f:10:7f:db:
         5a:06:b6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:26:07 2025 by rpki-client