Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c014a5e1-49aa-3da1-8625-c7341f66831b.roa
File:                     c014a5e1-49aa-3da1-8625-c7341f66831b.roa (raw, json)
Hash identifier:          uVmdexFet6w+RR7Vq0YgpxttEoDOTXyIrE0xvBEL8io=
Subject key identifier:   01:D2:E4:89:11:37:86:B1:5A:79:D8:94:4B:02:BB:4F:F9:59:B1:D1
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE196664D46E33D78A091C800
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c014a5e1-49aa-3da1-8625-c7341f66831b.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     15321
IP address blocks:        209.226.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:66:4d:46:e3:3d:78:a0:91:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=6034127d-6fd8-4f76-b5e0-2871f1842f3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:90:9a:9c:90:d0:eb:3b:06:e9:9c:be:e1:9a:
                    38:3d:90:c6:8b:99:38:9c:29:6d:96:d1:f1:d3:1a:
                    dc:37:64:a7:1a:f2:35:de:5d:9d:fd:06:be:c5:a1:
                    8b:75:87:83:41:33:b9:ed:b7:b7:d1:f7:70:c6:ac:
                    c4:39:0a:53:02:07:87:6e:66:1f:20:80:1b:2a:9f:
                    a4:10:38:79:27:70:68:42:23:c3:ef:fe:e7:64:39:
                    73:5d:37:19:8f:38:6a:1b:8b:3a:04:c9:57:50:7f:
                    cd:a9:10:7e:b6:c3:0e:ca:62:66:15:a2:96:ec:6c:
                    6c:ba:9b:f6:11:d2:49:ce:b1:66:a0:d7:63:e5:20:
                    93:07:f2:d7:69:96:77:46:b5:3a:34:da:5b:08:60:
                    c3:d8:f0:ea:9e:02:0c:a8:8d:3d:f4:02:f2:e8:cb:
                    b3:fe:6c:82:4e:8a:4b:48:ef:be:ac:9c:29:db:a2:
                    2b:14:6f:8e:6c:46:67:4d:f3:9c:67:77:66:28:48:
                    f5:b0:71:51:c6:bc:58:68:37:82:cb:7d:0c:79:30:
                    9c:02:7f:9b:df:6c:81:dd:43:11:32:52:91:23:0d:
                    fe:5e:4d:33:7f:ec:64:fc:43:5d:db:c6:d4:d6:72:
                    05:1a:4b:67:73:37:6e:bd:f4:ba:e9:b4:41:82:47:
                    ea:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:D2:E4:89:11:37:86:B1:5A:79:D8:94:4B:02:BB:4F:F9:59:B1:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c014a5e1-49aa-3da1-8625-c7341f66831b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.226.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:41:d5:f7:33:3f:13:2c:69:95:db:ea:19:90:de:d6:81:24:
         30:cc:42:1a:70:e6:29:e4:fc:23:88:22:bf:de:ae:66:31:a4:
         73:29:6a:89:b0:bb:1b:ed:5d:f6:19:31:fa:16:68:07:dc:39:
         14:e4:3d:e3:a4:c3:98:a4:bb:de:8c:2c:e4:90:1d:79:d0:34:
         e4:15:94:32:e9:3b:4c:77:1d:57:ee:9d:6e:23:8e:16:7a:d8:
         86:3d:e0:74:67:97:af:2e:d1:30:92:11:ce:5a:55:da:08:21:
         4a:be:55:23:bf:25:b2:1f:17:ef:59:d8:04:58:8d:64:48:8b:
         c0:d4:60:54:99:53:7e:ae:6e:45:fe:08:ea:55:b4:ed:44:8b:
         8a:ee:49:f3:83:b3:74:db:92:de:72:15:a4:63:9e:4c:a4:1a:
         31:98:37:44:51:cf:5b:1b:8d:ab:e3:13:f2:4c:4c:55:46:75:
         dc:43:c4:c4:45:3f:4a:03:a2:9b:77:cf:be:8d:77:3f:75:f5:
         3a:a8:3a:79:44:a9:a5:c6:ee:cd:54:fe:db:bf:88:1c:03:a6:
         91:89:b5:9e:9f:e2:b7:c8:e3:06:bd:b3:93:a0:a1:46:91:3f:
         c2:ad:0f:d5:54:3a:1c:c5:1b:4f:fd:23:7a:57:2d:36:a4:67:
         2c:2b:22:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 08:58:46 2025 by rpki-client