Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b43d0238-e7b9-37f5-ac28-4762ada32448.roa
File:                     b43d0238-e7b9-37f5-ac28-4762ada32448.roa (raw, json)
Hash identifier:          iftZaqybtPcC3MuVxJK38yy++vnIp0L4sqC6KnH2www=
Subject key identifier:   3C:D3:48:00:6F:5B:A8:81:BE:52:65:F5:CA:BB:17:0C:EC:10:9B:01
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE1970E05D1F04F19A373B096
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b43d0238-e7b9-37f5-ac28-4762ada32448.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     15321
IP address blocks:        209.226.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:97:0e:05:d1:f0:4f:19:a3:73:b0:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=7bed2ef8-54cb-4eec-8a83-861bb69ee06e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1f:5d:00:1c:79:76:29:db:10:d9:59:95:c2:
                    09:30:70:cd:df:f7:af:0d:ef:16:2a:33:a9:73:e4:
                    b1:c3:2f:b7:d9:f1:9c:65:55:48:d8:79:a0:91:f1:
                    ed:3f:2a:9e:f1:cf:79:91:33:e2:c3:9d:59:9e:ce:
                    a2:a3:19:be:fd:ba:dc:79:7a:9f:e3:70:85:ec:10:
                    81:a1:36:ef:bd:c0:a0:9c:e9:6b:8f:f4:b7:c4:54:
                    58:dc:17:31:ec:4e:67:71:2f:30:e8:f1:2e:6f:40:
                    ed:61:cd:6c:41:2b:55:ff:d5:77:8a:77:fe:39:23:
                    c6:c0:12:ea:64:e0:16:b0:87:9e:5c:ce:9c:59:02:
                    3f:48:07:ed:17:4f:65:ac:1d:53:9c:1e:04:aa:ba:
                    4b:68:7e:32:d6:5e:44:30:de:94:38:1c:64:42:b4:
                    e0:95:7d:1f:fd:50:cd:e0:b9:d8:fc:36:c2:4d:b9:
                    4a:cb:72:a7:2f:f7:9d:bf:e5:2a:e7:69:d7:70:b2:
                    02:2c:af:46:77:ed:25:c7:89:49:68:c2:ab:82:82:
                    50:1c:b3:1e:95:b0:88:91:94:12:1a:ba:fc:40:41:
                    72:63:1e:7a:07:98:6a:d3:73:af:39:a9:19:a9:40:
                    a4:23:41:24:f0:85:ea:78:f5:86:34:20:bf:d2:80:
                    af:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:D3:48:00:6F:5B:A8:81:BE:52:65:F5:CA:BB:17:0C:EC:10:9B:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b43d0238-e7b9-37f5-ac28-4762ada32448.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.226.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:32:dc:03:84:5d:b3:c7:6c:65:e7:fb:fe:de:91:52:31:2e:
         35:37:b6:b1:97:69:da:d9:3a:b2:bf:c0:60:51:48:d8:09:99:
         5c:3d:a6:7f:44:82:dc:f4:2a:37:c9:dc:bc:dd:7c:fe:be:94:
         01:19:db:f5:c3:03:c0:5a:88:6c:d7:57:0c:e4:af:da:66:e2:
         b9:69:c0:f6:ce:7d:4e:7a:21:8c:75:76:a4:ba:b3:15:05:d3:
         7c:4e:36:e4:dd:cf:72:be:38:e9:d0:45:78:66:c5:a0:7c:25:
         ae:fe:90:6e:32:d2:4d:9e:e2:a1:4d:54:60:3b:a0:93:34:13:
         86:6c:2f:a3:bd:aa:32:37:4b:8f:0e:a7:76:44:fa:9a:fc:46:
         c8:f5:5f:96:cc:07:48:92:2a:ef:08:16:95:eb:36:66:87:e3:
         2a:9a:27:4c:cd:a3:ed:71:81:39:f7:2c:90:51:f7:dd:7c:07:
         3e:41:4f:ca:34:3e:32:5d:60:ef:56:e7:f5:a3:55:96:79:22:
         b0:35:00:b3:81:63:cf:d3:55:ae:fc:cb:27:90:29:00:a4:e4:
         7d:c8:89:a0:5f:41:45:ff:16:86:d3:8b:e2:a1:38:af:7c:d5:
         d8:c2:76:14:93:17:41:f4:5f:82:82:9c:08:9a:9f:8c:bb:66:
         dd:72:31:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:01:32 2025 by rpki-client