Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ae0b4b25-8e63-3a56-a042-28828efa6c63.roa
File:                     ae0b4b25-8e63-3a56-a042-28828efa6c63.roa (raw, json)
Hash identifier:          nw3lEDaPSzHld4qAdGRH7eA3M90cxUGNEDECaPpO1oY=
Subject key identifier:   55:05:B5:76:32:42:5B:9C:49:81:A9:AE:E4:C2:8C:B2:81:36:DD:C1
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE1965F69CCA4DD0A7CA55900
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ae0b4b25-8e63-3a56-a042-28828efa6c63.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     36522
IP address blocks:        206.172.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:5f:69:cc:a4:dd:0a:7c:a5:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=f752cbf9-ed72-4fe4-80d0-c73d578e269f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2a:3c:8a:d4:1d:24:9e:b4:e6:60:c0:19:e5:
                    ef:23:33:29:2e:35:24:b1:73:03:11:5a:3c:a1:4a:
                    cc:70:41:eb:01:4a:eb:0c:6e:ac:03:d2:d0:32:cf:
                    3e:e4:b4:d3:60:80:6f:fb:3c:39:6c:4e:da:a9:47:
                    f0:e1:b0:29:0e:39:b0:6d:f5:3b:39:4a:64:69:42:
                    de:bd:83:5f:5f:70:0f:6d:cd:04:67:a5:b3:6e:2f:
                    cb:98:39:50:d2:e6:d1:01:4a:c3:b6:8f:0a:5b:7d:
                    8b:f9:20:a4:21:92:8c:b3:4f:f7:90:88:4d:76:8b:
                    30:e5:d9:46:ca:5b:85:ca:13:2e:d3:cf:d7:64:97:
                    ce:20:8d:95:c5:99:cb:e2:b6:74:2a:48:ad:3e:9d:
                    2a:df:01:19:65:e7:21:ca:52:57:b5:8b:23:e3:54:
                    07:85:3e:27:33:a2:85:7e:e3:51:c4:08:8d:53:31:
                    21:06:fb:25:65:a6:91:cf:cb:c7:69:6d:ce:50:2f:
                    c6:67:08:20:01:d0:67:f3:43:c9:93:da:6a:95:19:
                    eb:78:82:05:bb:e5:42:61:f6:6e:5d:fe:ee:50:ef:
                    e9:5c:ad:a6:e0:d2:d8:0f:82:3e:97:37:37:4f:71:
                    ab:96:4f:42:e3:9b:df:78:92:d4:f2:d7:76:ad:79:
                    c2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:05:B5:76:32:42:5B:9C:49:81:A9:AE:E4:C2:8C:B2:81:36:DD:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ae0b4b25-8e63-3a56-a042-28828efa6c63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.172.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:78:d1:8b:f6:cf:5e:89:8f:61:55:a5:ae:c4:95:9c:20:e0:
         de:e8:e9:63:55:fb:67:4c:12:c2:f2:70:69:fa:c4:07:20:eb:
         cf:f8:5d:2c:44:aa:a1:4b:d2:3f:8d:c1:38:28:ec:03:22:5e:
         2a:03:a9:c4:98:a7:a5:39:42:13:d1:db:66:84:ed:e6:45:b4:
         b5:e5:37:f9:73:f7:bd:26:7b:9f:36:e5:3c:1d:91:5a:75:e6:
         d7:ad:e1:fd:fa:8a:c6:33:fb:6e:78:90:20:98:56:fb:42:ee:
         dd:9a:0c:8f:47:0d:0d:e9:4d:31:60:87:b9:3c:7d:f9:85:ec:
         2d:1f:2b:d6:fb:bc:4f:e5:c5:ad:43:66:09:ed:ba:31:5d:81:
         45:f7:2b:b7:c0:f1:1b:23:f3:e9:29:a9:57:5b:e3:09:23:64:
         3c:25:a5:dd:0b:db:8b:9b:f3:fb:91:56:98:fa:fb:a2:27:44:
         57:c9:9c:2b:73:3d:0a:b9:41:fe:03:da:51:e0:5b:28:0c:75:
         c5:37:7e:26:37:b1:93:b5:65:44:df:2f:d2:55:aa:49:35:9d:
         39:c5:41:c6:9f:39:ba:54:7b:7a:8a:fc:18:0c:06:19:39:1f:
         3d:d3:13:1e:fc:1e:47:4f:66:19:bc:56:f6:90:3e:67:a1:0f:
         64:6c:af:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 08:58:15 2025 by rpki-client