Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cb32cc3e-fc39-3cde-8d45-3fb009baf0c2.roa
File:                     cb32cc3e-fc39-3cde-8d45-3fb009baf0c2.roa (raw, json)
Hash identifier:          os/kFnX+TcuFBLje2aDx2zMoljP7ttOiG2Xl4cyNk0Q=
Subject key identifier:   AB:F3:AA:01:29:FB:9D:2B:28:9E:91:62:A1:14:9C:E9:6D:0D:41:80
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE197069FC1BDC663EE9EDD80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cb32cc3e-fc39-3cde-8d45-3fb009baf0c2.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     36522
IP address blocks:        204.101.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:97:06:9f:c1:bd:c6:63:ee:9e:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=e94b7c8b-069e-4925-9a9b-80a438b8e9c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:08:ed:bf:8d:20:40:30:8e:56:bc:8a:3a:81:
                    80:50:96:c8:74:2d:7e:fd:fc:2f:1f:11:af:50:d5:
                    51:47:f3:3b:cb:92:e4:98:8d:ec:90:ba:ad:62:b6:
                    b6:ba:ec:11:1a:5f:04:2d:92:b2:90:06:68:12:e5:
                    4e:b7:10:4a:90:aa:e0:1b:4b:fa:70:46:4f:bf:d0:
                    a9:a3:60:70:9c:b8:ab:5c:e0:f1:83:70:9e:e6:e1:
                    b3:a9:0d:2d:6f:23:92:e3:13:c6:7d:9a:32:15:cd:
                    b1:58:86:02:51:a5:08:26:e4:d2:87:2d:05:1d:58:
                    04:ab:29:80:1b:c1:85:a6:fa:73:69:91:d0:90:09:
                    03:1e:e8:ae:c0:5f:0c:6d:61:5c:38:c6:07:0e:ad:
                    41:4b:3c:22:db:95:b2:74:de:2f:f2:7f:16:be:9d:
                    d7:e4:7a:46:13:a5:7b:e0:bf:bd:f2:80:28:8b:0e:
                    3e:29:89:a9:ef:38:5f:e1:00:9a:b9:36:5c:89:e7:
                    cc:4e:88:bc:2a:9c:7c:6e:9b:b8:1c:e0:24:6b:30:
                    07:0f:b6:63:0d:f6:d7:45:3e:28:21:f7:79:e7:cc:
                    cc:bc:81:1d:66:10:d3:25:14:e0:d2:00:e4:b5:11:
                    49:9a:82:f2:ed:57:1d:63:4c:ae:ff:83:d8:f8:28:
                    1d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:F3:AA:01:29:FB:9D:2B:28:9E:91:62:A1:14:9C:E9:6D:0D:41:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cb32cc3e-fc39-3cde-8d45-3fb009baf0c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:b9:1e:a1:bc:7d:7c:ae:e4:47:20:74:61:33:20:fd:91:a4:
         59:b2:14:39:4e:26:ee:7a:ef:af:5e:34:a6:2a:f2:ae:b6:01:
         c0:3e:88:aa:ec:ac:38:90:89:e5:06:0e:e4:0f:e6:8f:bf:e4:
         bf:2e:0c:44:a2:d7:58:15:5c:81:77:13:06:b2:74:25:6f:c6:
         c4:f2:96:8a:50:eb:d5:38:2d:b6:6d:d4:c3:04:69:8a:d5:a8:
         03:7c:7f:06:9c:0a:d2:3f:12:df:08:d1:b2:8b:f3:b5:94:d2:
         41:a9:f4:3e:ac:10:f4:cf:ca:f7:c3:52:37:25:c0:ab:b3:2e:
         b2:02:92:5d:a4:85:ec:a5:3d:ef:0e:23:5b:30:fa:68:0e:f2:
         a7:64:03:4b:8d:5c:5a:2c:6e:c8:fb:9f:5f:0d:02:59:14:1e:
         26:e0:62:7d:2c:13:76:a4:53:2f:bf:9d:25:2b:4c:af:18:09:
         fe:c3:75:1d:49:4b:fc:c5:57:32:d6:b0:cc:d4:36:da:65:4c:
         a6:bc:59:5b:54:8e:5f:d0:47:7b:24:ad:b1:fe:ed:6c:f4:4a:
         27:d7:a3:8b:92:9c:cf:62:a4:a8:76:fa:05:8e:1a:da:2e:15:
         88:9e:23:55:15:43:3c:52:ef:f9:a7:6a:db:f9:a9:a7:dc:fc:
         f9:66:7d:f5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErhlwafwb3GY+6e3YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk
ZTk0YjdjOGItMDY5ZS00OTI1LTlhOWItODBhNDM4YjhlOWM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQjtv40gQDCOVryKOoGAUJbIdC1+/fwvHxGv
UNVRR/M7y5LkmI3skLqtYra2uuwRGl8ELZKykAZoEuVOtxBKkKrgG0v6cEZPv9Cp
o2BwnLirXODxg3Ce5uGzqQ0tbyOS4xPGfZoyFc2xWIYCUaUIJuTShy0FHVgEqymA
G8GFpvpzaZHQkAkDHuiuwF8MbWFcOMYHDq1BSzwi25WydN4v8n8Wvp3X5HpGE6V7
4L+98oAoiw4+KYmp7zhf4QCauTZciefMToi8Kpx8bpu4HOAkazAHD7ZjDfbXRT4o
Ifd558zMvIEdZhDTJRTg0gDktRFJmoLy7VcdY0yu/4PY+CgdEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKvzqgEp+50rKJ6RYqEUnOltDUGAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvY2IzMmNjM2UtZmMzOS0z
Y2RlLThkNDUtM2ZiMDA5YmFmMGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGXvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG65HqG8fXyu5EcgdGEzIP2RpFmyFDlOJu56769eNKYq8q62AcA+iKrs
rDiQieUGDuQP5o+/5L8uDESi11gVXIF3EwaydCVvxsTylopQ69U4LbZt1MMEaYrV
qAN8fwacCtI/Et8I0bKL87WU0kGp9D6sEPTPyvfDUjclwKuzLrICkl2kheylPe8O
I1sw+mgO8qdkA0uNXFosbsj7n18NAlkUHibgYn0sE3akUy+/nSUrTK8YCf7DdR1J
S/zFVzLWsMzUNtplTKa8WVtUjl/QR3skrbH+7Wz0SifXo4uSnM9ipKh2+gWOGtou
FYieI1UVQzxS7/mnatv5qafc/PlmffU=
-----END CERTIFICATE-----
Generated at Sun Aug 24 08:58:19 2025 by rpki-client