Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c25aeaea-e33a-35ca-b384-7085b16124c1.roa
File:                     c25aeaea-e33a-35ca-b384-7085b16124c1.roa (raw, json)
Hash identifier:          AVrWoVAuykrkxAf1YlWxpTgAA4Wz4bmDyUXC/+GVBJg=
Subject key identifier:   AC:4B:F5:5B:E3:3D:66:02:15:E5:DF:73:D5:D4:BA:7B:51:51:A2:16
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DAA3755FE0DE3E8BFCE4C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c25aeaea-e33a-35ca-b384-7085b16124c1.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     21724
IP address blocks:        206.47.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:a3:75:5f:e0:de:3e:8b:fc:e4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=8d14dee9-3e6a-445f-8e84-61a7e8878fec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c1:d5:0b:8e:84:26:09:9c:3e:1f:89:87:2f:
                    0a:a2:e9:6f:52:67:8b:e2:90:d0:e6:d8:03:89:ce:
                    0e:46:65:7a:1e:e7:62:e1:d8:48:79:95:a5:a1:a1:
                    f7:e9:f1:e2:75:87:0c:fd:4b:1b:d3:fe:44:2a:10:
                    ab:f4:87:1a:53:ad:02:7a:b3:c9:df:f7:6b:26:82:
                    7e:3e:8a:12:ad:f9:96:fb:44:a7:c6:f6:7f:8b:72:
                    66:b9:bc:c1:3f:da:42:f5:3d:69:ff:eb:3a:23:74:
                    00:af:22:50:f8:22:df:f4:d3:fc:98:fc:fe:12:5f:
                    2f:b1:98:f7:4b:8a:0d:9a:f2:1c:77:15:6b:de:bf:
                    d1:96:1a:63:cf:2d:8e:4a:c1:2b:75:2d:33:06:56:
                    8b:4a:3b:8c:45:4c:97:ae:1c:23:ec:0f:0a:26:83:
                    90:29:fc:de:00:f1:33:6e:84:0b:29:09:db:e2:2f:
                    15:74:a8:3c:4c:b1:b8:19:68:66:39:b1:33:62:91:
                    cc:af:38:de:d2:74:6d:5e:5a:7c:11:a5:c1:a8:f3:
                    94:f8:12:94:74:d4:a8:de:ef:2b:c2:d9:81:f6:a9:
                    5c:c1:15:0b:07:77:af:13:6b:87:ea:8e:22:a7:51:
                    50:9c:ea:1f:56:aa:0d:a5:de:2a:10:7c:2b:2b:68:
                    f5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:4B:F5:5B:E3:3D:66:02:15:E5:DF:73:D5:D4:BA:7B:51:51:A2:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c25aeaea-e33a-35ca-b384-7085b16124c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.47.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:c1:2c:b5:13:b0:83:91:3a:26:29:6e:19:eb:b8:95:f4:6e:
         f7:39:90:8d:4f:77:7a:8c:16:0c:4d:28:da:49:09:19:59:92:
         59:6d:f2:d0:d7:a4:26:3f:c5:80:f1:89:2f:90:db:f9:ea:ff:
         f9:e8:5f:32:59:36:35:2b:58:39:22:2d:33:12:95:7a:44:57:
         b9:78:08:05:a1:95:47:05:cf:05:ae:fc:12:24:56:94:78:80:
         bf:ca:7b:f5:5f:5d:9f:b2:57:cc:12:45:bd:29:c8:04:ef:bf:
         f7:b5:06:52:d2:65:03:c9:2b:0f:c7:b7:56:8e:84:1c:82:a4:
         83:a9:a4:fa:1d:2c:93:18:a3:33:53:7a:e9:e7:16:17:36:9e:
         85:a7:e4:86:b3:f2:fa:5c:c0:3a:ef:3b:f8:78:17:bc:fd:a4:
         90:91:6d:cf:d4:e8:ed:25:7e:5d:f9:8c:3e:e5:bf:e0:f6:8e:
         d9:88:63:09:80:e1:1b:6c:ef:5d:fe:51:66:45:4b:bc:1a:5e:
         b3:74:72:f7:07:e3:26:a0:8e:7f:3e:2f:1f:dd:19:70:08:a6:
         4c:19:94:9e:f1:15:53:91:c9:e8:80:47:03:3d:e3:83:fd:7d:
         cf:c1:df:94:10:77:80:b5:fc:9f:cb:9f:a7:57:52:41:6b:6f:
         e7:2f:ce:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 19:09:13 2025 by rpki-client