Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a23fef3b-4c73-31a4-a39f-c1703d1dfb1d.roa
File:                     a23fef3b-4c73-31a4-a39f-c1703d1dfb1d.roa (raw, json)
Hash identifier:          5sxznyQGfJ8zBe89MWSNfpYIe3AGcLgib50kyYJ+aH0=
Subject key identifier:   F9:23:ED:09:9C:21:C0:A4:92:BD:20:75:E6:1F:42:36:C3:B7:47:FF
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE1970829DE382AC372ECD700
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a23fef3b-4c73-31a4-a39f-c1703d1dfb1d.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     36522
IP address blocks:        69.158.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:97:08:29:de:38:2a:c3:72:ec:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=2420acf3-27d0-4915-8537-24f754568963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:10:3e:fe:5a:86:11:d6:08:52:de:02:25:8f:
                    83:72:bb:99:c6:43:9e:f2:57:25:44:e9:a2:e2:80:
                    26:a9:f2:ec:ba:83:1e:21:cb:03:17:2d:4e:03:1a:
                    33:f1:18:99:27:89:34:46:1d:46:e5:9d:ad:ab:31:
                    7f:1b:c6:2e:17:7b:e4:e7:52:8f:80:db:74:97:31:
                    a3:66:f1:fb:f3:92:6f:92:36:fa:c2:b5:e8:d3:fa:
                    c3:e5:12:c4:dc:c6:fd:d8:22:4d:8e:9a:a8:ca:b5:
                    7a:69:a1:54:fe:9c:2a:61:55:98:84:7e:fa:e8:1b:
                    d4:18:db:cd:96:a3:a8:32:8e:77:1b:2d:42:a9:3b:
                    eb:b2:7a:80:4c:cc:6d:b4:ec:46:00:2d:ce:8a:73:
                    fb:7b:6a:e4:b9:ed:fb:b4:ba:fe:49:88:02:86:55:
                    23:44:23:d4:86:ae:96:69:3e:6d:ec:21:9a:e4:61:
                    c4:f6:b3:0e:15:59:15:99:af:66:00:db:7e:7e:e3:
                    a1:aa:89:05:a3:ae:f9:fd:45:16:ac:44:ec:40:2b:
                    55:8a:2a:d6:11:86:11:0c:91:11:cb:dd:ec:41:88:
                    64:d0:98:ec:82:f8:4d:83:e6:58:00:3d:b4:1f:73:
                    ac:fd:90:9e:a1:f4:61:d8:7b:b9:56:68:15:7d:3d:
                    bf:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:23:ED:09:9C:21:C0:A4:92:BD:20:75:E6:1F:42:36:C3:B7:47:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a23fef3b-4c73-31a4-a39f-c1703d1dfb1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.158.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:ab:59:84:ed:4c:8e:2d:20:3f:4a:cc:e8:24:d3:7b:3c:52:
         33:88:7f:28:c9:c1:40:0e:11:10:f6:9e:35:c8:8e:0e:49:10:
         f4:ca:0d:8e:43:6b:2b:1f:ae:56:06:e6:02:66:e6:96:27:c7:
         38:f1:c7:83:82:b5:26:47:a5:01:2a:4c:37:8b:15:77:52:eb:
         07:0e:92:8d:d1:7a:8f:d3:33:04:9f:29:20:e4:46:c5:22:7a:
         26:2a:a6:c9:ef:46:d9:66:79:e5:db:67:e6:7b:24:86:f5:b6:
         fc:b7:a5:c6:a3:25:f6:31:bc:b6:0e:c2:67:4f:89:f7:fa:4e:
         67:fd:04:11:0d:dc:96:f6:e9:18:bd:0b:ec:00:a7:c4:ae:2c:
         33:70:21:73:01:b1:c8:16:62:42:09:23:93:b6:d6:2c:ea:c4:
         ed:27:1a:85:44:77:7b:f8:d4:45:d7:57:84:9b:f5:d3:96:df:
         10:91:20:d2:d3:c5:bf:02:c9:6e:95:63:41:62:ba:e6:c1:f7:
         79:20:27:76:e6:3c:29:04:9e:94:81:db:2f:03:1d:00:41:f0:
         58:21:0c:dd:35:ee:6e:43:0b:79:9b:5a:73:22:24:30:92:cc:
         e1:70:47:24:f3:c0:e9:7a:ad:e5:eb:e0:ee:38:49:a4:63:14:
         a5:84:e3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 10:59:21 2025 by rpki-client