Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d6ba5cdb-d70f-340b-9e5e-3433be9e6958.roa
File:                     d6ba5cdb-d70f-340b-9e5e-3433be9e6958.roa (raw, json)
Hash identifier:          xsgbmUWbAOTZIhfMC5IQrgJT0ncJ0PI5albG88uvE+8=
Subject key identifier:   41:B9:EB:66:41:AB:6F:E8:5E:46:D9:58:49:7D:E6:92:F1:5F:39:B6
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DAB1EC70D00BF05340ED60
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d6ba5cdb-d70f-340b-9e5e-3433be9e6958.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     30336
IP address blocks:        209.226.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:b1:ec:70:d0:0b:f0:53:40:ed:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=a7742b57-b1ad-4501-b096-199f79b2f40c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5d:d6:01:69:b9:fa:ab:61:58:c7:e8:da:eb:
                    c5:4a:c2:85:6d:87:80:23:9e:49:db:46:a3:04:7b:
                    60:42:62:d7:02:67:2a:31:00:bb:0e:56:59:b9:d2:
                    2c:5a:06:f1:ff:93:0d:95:f8:86:ad:38:10:17:bd:
                    18:d5:d2:e5:39:52:80:d0:c2:d9:9e:ce:c4:7a:89:
                    c9:a9:58:54:6c:41:3b:aa:a4:cc:b6:97:fd:4e:c5:
                    89:04:d8:85:98:8a:f2:b3:88:20:05:80:29:6d:fc:
                    19:07:a5:f2:e5:2f:4e:fe:22:e4:d0:bd:b1:8e:61:
                    96:24:c5:c0:48:91:13:72:62:30:85:af:90:b2:6f:
                    19:74:c0:5c:46:63:fc:c7:0f:2d:3c:fb:75:65:8c:
                    87:a6:1d:6a:93:a0:63:a4:cc:ed:c8:25:89:8e:6d:
                    77:89:96:b3:a2:b7:b1:6b:d4:aa:90:8f:97:d5:46:
                    f6:d9:c9:dc:21:3c:50:f6:0d:1e:32:91:a1:99:92:
                    37:9c:36:be:f8:6a:3b:c0:26:82:f2:8d:ba:1b:e5:
                    2c:eb:41:17:76:cb:32:de:23:e9:4e:70:1f:02:b1:
                    76:67:65:c0:da:2e:e7:56:09:00:81:26:dc:ac:db:
                    f6:e3:03:3b:65:60:60:f8:76:47:aa:07:59:d6:9b:
                    3c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:B9:EB:66:41:AB:6F:E8:5E:46:D9:58:49:7D:E6:92:F1:5F:39:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d6ba5cdb-d70f-340b-9e5e-3433be9e6958.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.226.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:8a:fb:68:00:55:f9:fc:55:6f:23:26:35:b9:27:97:fc:9a:
         f5:fd:d0:a5:f4:4d:82:be:56:5d:80:ed:71:03:32:fc:49:67:
         52:84:92:ee:bf:7f:14:14:8a:d9:fd:cd:3d:a5:e3:64:44:4f:
         a5:4d:1f:fb:67:ca:ba:fd:ad:ac:56:f4:38:8d:a4:12:a8:3e:
         de:63:51:c4:71:e6:af:ad:e6:7c:2c:18:47:f5:be:bd:05:a9:
         78:2b:91:ad:63:e4:ba:51:20:f6:8a:81:a9:15:fa:d8:18:9d:
         dc:31:bf:d6:9c:79:fb:2f:e9:69:be:7b:c6:da:71:97:6e:08:
         37:93:1c:6b:8a:e0:43:47:0a:1b:b8:55:c9:4c:7e:17:f3:d9:
         f8:df:74:31:c6:5f:c8:b8:11:66:2a:a8:d3:53:5c:1f:a9:2a:
         e1:c7:df:99:a5:37:99:56:d3:82:0e:05:d1:ca:0d:06:5e:66:
         75:01:74:0b:b5:e4:05:a3:d2:e3:4b:28:44:e6:ae:28:79:91:
         0d:8e:32:9c:ec:60:c7:ea:66:20:c1:48:fe:d0:6a:06:ad:1e:
         0f:a1:8c:7e:65:4f:29:07:e3:33:de:05:1d:ce:b1:f7:10:7f:
         f0:70:1c:dd:aa:77:db:09:65:2e:0c:4a:55:f8:bd:c1:5b:54:
         20:63:0f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:00:30 2025 by rpki-client