Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ac31399c-753e-3088-9c42-084ddd41da1f.roa
File:                     ac31399c-753e-3088-9c42-084ddd41da1f.roa (raw, json)
Hash identifier:          IAC6Ss2H5eNpXYslX1A+83hmzbd7O5y5lruwcm5LIxM=
Subject key identifier:   9F:89:EE:70:89:1A:10:C9:4C:9E:EC:BF:32:11:EB:30:6E:CB:5D:25
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE19707602A900B067D4B19B0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ac31399c-753e-3088-9c42-084ddd41da1f.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     15321
IP address blocks:        209.226.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:97:07:60:2a:90:0b:06:7d:4b:19:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=4772d94a-0ee1-4b93-ad5a-31dfe73a4310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:6c:28:4d:e4:9c:4d:49:49:50:ef:83:e2:1f:
                    15:8c:e7:08:18:cc:d3:70:86:37:4f:d5:fb:49:53:
                    7a:40:35:7c:36:33:7a:d5:96:3f:ef:c2:21:97:b2:
                    ae:48:d5:4a:a4:01:88:11:27:cf:99:55:a5:0d:df:
                    e1:69:96:79:19:b0:71:22:92:8b:4c:16:72:11:fd:
                    40:92:d3:e5:3a:2e:74:c8:13:65:20:14:4a:06:ef:
                    cf:af:fc:49:4c:3e:45:c6:d0:87:7c:e8:98:c7:59:
                    af:d5:4f:7d:cf:cc:78:33:ff:51:5e:4b:8e:02:9b:
                    79:6d:94:eb:75:0f:91:7a:2d:ef:32:0b:50:5d:1f:
                    8c:42:87:66:06:ac:9b:c2:7e:3d:f7:ab:35:42:21:
                    b2:65:22:31:ce:72:e1:9f:23:7c:77:c8:30:81:66:
                    1c:cd:01:e2:6e:25:02:c6:dd:d0:09:3e:18:93:ba:
                    1b:19:03:b9:76:ed:dc:6e:a8:fe:fc:a2:75:23:41:
                    40:f3:65:b2:9b:36:33:be:f6:97:9e:2c:bc:25:c7:
                    d8:83:cd:1a:90:2b:88:a9:3c:a3:ac:e1:32:6e:a0:
                    e2:6c:f6:2c:6b:ba:60:9e:1c:7a:85:50:0b:23:01:
                    d8:a7:84:66:44:c3:04:20:1d:fa:19:be:1d:f9:ec:
                    bb:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:89:EE:70:89:1A:10:C9:4C:9E:EC:BF:32:11:EB:30:6E:CB:5D:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ac31399c-753e-3088-9c42-084ddd41da1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.226.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:21:04:8b:f9:61:cd:56:25:25:87:1d:93:1c:f5:96:36:05:
         5c:26:19:10:4d:df:1f:fa:6e:f7:13:f2:ff:0a:99:65:d3:7a:
         74:d3:8d:03:45:4d:a0:3c:36:63:6f:c5:0d:72:23:17:ee:90:
         0b:01:ff:a0:f6:8b:a6:e3:d4:33:2e:79:18:af:63:50:51:f0:
         6f:91:ca:ed:9a:da:0d:2d:b4:fa:68:3e:8f:c0:34:90:38:51:
         9a:0e:ea:7b:02:8e:c7:79:fe:7a:ac:2f:68:c6:9f:42:05:c5:
         cf:4b:e7:f8:f5:cd:90:7d:25:b7:03:6f:c2:da:cc:de:6b:c2:
         d6:07:9d:4d:4f:cc:bc:0f:59:9a:c4:ea:e7:33:e3:92:d5:a5:
         e4:03:56:39:ea:f6:3c:3e:67:6a:ff:50:0e:ba:70:a4:17:aa:
         5d:9a:47:ae:32:3e:b8:a9:17:30:fd:99:b5:14:1d:ce:e7:f1:
         3d:22:9e:78:6d:a3:d9:64:f3:36:af:5a:50:6a:46:f7:c7:7b:
         ff:b9:f1:91:db:96:cc:e8:d9:f2:8b:f6:9e:ed:ac:f8:9c:0f:
         79:53:38:60:77:5c:43:b5:ca:c1:5e:1c:4a:e9:65:59:f0:bf:
         d0:d1:fb:99:e9:3b:b4:83:eb:64:f8:56:e4:33:51:70:39:e0:
         98:ff:ba:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 08:58:47 2025 by rpki-client