Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d902b0fc-d046-326a-8911-3ba38f451be2.roa
File:                     d902b0fc-d046-326a-8911-3ba38f451be2.roa (raw, json)
Hash identifier:          UvOriRvnX+duiR0G0k0nmleBCZKZTrvErsuP7s1LkXA=
Subject key identifier:   5E:EF:5F:89:09:37:F7:93:4F:3C:79:76:6D:2C:04:A1:AC:1B:17:81
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE1965E9070B3E0AC37A39F80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d902b0fc-d046-326a-8911-3ba38f451be2.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     36522
IP address blocks:        207.164.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:5e:90:70:b3:e0:ac:37:a3:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=141dff26-8853-475f-86f1-efeec7732211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c5:8d:42:d6:32:e5:34:27:24:2d:f7:05:38:
                    85:47:7a:ab:d9:04:36:59:95:3d:a8:53:61:43:b8:
                    4a:7a:0b:01:03:73:8f:9a:2f:16:83:66:8c:cf:83:
                    55:26:de:9b:54:e5:d3:f8:6c:7e:9a:93:e4:84:5d:
                    76:c3:95:33:b3:39:f3:ac:68:81:d3:da:95:c4:58:
                    7b:45:48:c2:ad:81:d4:b1:f6:fa:ba:af:d9:37:f5:
                    78:bb:52:5b:57:85:e5:d2:5f:d5:b2:b9:71:5e:88:
                    39:7c:c2:98:23:28:2c:4a:4e:3f:56:8a:2e:92:e1:
                    ae:be:13:57:38:4f:09:04:58:11:84:25:dd:08:60:
                    4b:a4:84:ff:76:cc:c0:d8:3c:53:be:35:2e:98:b5:
                    1b:bf:58:e6:ff:86:32:7b:d2:40:22:ff:4e:2a:2c:
                    85:40:d7:42:01:c9:e7:54:83:2a:38:29:fc:18:10:
                    6b:9a:f4:06:c2:42:f8:bb:0d:c9:27:71:ba:11:77:
                    95:57:f5:d5:38:45:88:03:c1:b1:13:2a:97:02:84:
                    a9:28:02:ed:d8:eb:e0:80:59:a2:46:17:42:81:d1:
                    4d:e5:3a:0c:87:32:e3:bc:0e:3f:7c:72:04:98:32:
                    92:c9:b9:79:88:c8:29:b7:71:86:22:e2:b3:07:7d:
                    e9:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:EF:5F:89:09:37:F7:93:4F:3C:79:76:6D:2C:04:A1:AC:1B:17:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d902b0fc-d046-326a-8911-3ba38f451be2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.164.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:c0:8e:4c:82:c9:a8:55:b1:80:b4:e5:77:06:ab:26:54:cf:
         65:af:1c:25:23:c2:ac:7c:18:0d:4e:15:35:d8:1d:31:9e:a7:
         5f:35:e4:36:bb:4e:76:00:c4:07:3f:3c:82:d7:c1:d0:a7:82:
         8f:33:94:94:a9:cf:50:6a:ec:ce:ca:2d:94:37:31:3c:34:5d:
         6f:41:b7:68:a3:2b:e9:08:e1:39:73:1b:e1:52:be:a3:31:1d:
         9d:09:7c:b6:8e:7b:5b:45:f3:c4:d5:2c:5d:ac:0a:dc:fc:15:
         d5:3c:4a:c5:10:ea:c1:b2:1b:8e:78:33:30:29:97:9a:5d:cb:
         1f:13:25:1e:4b:05:d0:8d:01:09:b1:4c:f3:5c:42:4b:75:2b:
         aa:06:d9:6b:c6:3a:1f:ce:ac:32:3b:c8:77:24:3a:89:de:4d:
         9e:2c:79:a0:84:73:1d:e0:72:64:95:40:92:ca:80:ea:a3:ff:
         5e:87:46:46:09:2c:92:85:c5:7e:43:3d:e5:dd:0f:1e:45:c5:
         8d:73:8c:0e:47:50:43:a1:9c:36:79:7e:17:36:84:1f:49:de:
         78:08:93:8c:ca:55:7f:e6:6b:76:0c:73:ef:06:d3:49:b8:8a:
         d7:67:9f:af:ff:ad:08:8e:57:91:3a:37:ba:e7:bb:b4:cc:07:
         92:4c:24:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErhll6QcLPgrDejn4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk
MTQxZGZmMjYtODg1My00NzVmLTg2ZjEtZWZlZWM3NzMyMjExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMWNQtYy5TQnJC33BTiFR3qr2QQ2WZU9qFNh
Q7hKegsBA3OPmi8Wg2aMz4NVJt6bVOXT+Gx+mpPkhF12w5UzsznzrGiB09qVxFh7
RUjCrYHUsfb6uq/ZN/V4u1JbV4Xl0l/VsrlxXog5fMKYIygsSk4/VooukuGuvhNX
OE8JBFgRhCXdCGBLpIT/dszA2DxTvjUumLUbv1jm/4Yye9JAIv9OKiyFQNdCAcnn
VIMqOCn8GBBrmvQGwkL4uw3JJ3G6EXeVV/XVOEWIA8GxEyqXAoSpKALt2OvggFmi
RhdCgdFN5ToMhzLjvA4/fHIEmDKSybl5iMgpt3GGIuKzB33pbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF7vX4kJN/eTTzx5dm0sBKGsGxeBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvZDkwMmIwZmMtZDA0Ni0z
MjZhLTg5MTEtM2JhMzhmNDUxYmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz6SlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADbAjkyCyahVsYC05XcGqyZUz2WvHCUjwqx8GA1OFTXYHTGep1815Da7
TnYAxAc/PILXwdCngo8zlJSpz1Bq7M7KLZQ3MTw0XW9Bt2ijK+kI4TlzG+FSvqMx
HZ0JfLaOe1tF88TVLF2sCtz8FdU8SsUQ6sGyG454MzApl5pdyx8TJR5LBdCNAQmx
TPNcQkt1K6oG2WvGOh/OrDI7yHckOoneTZ4seaCEcx3gcmSVQJLKgOqj/16HRkYJ
LJKFxX5DPeXdDx5FxY1zjA5HUEOhnDZ5fhc2hB9J3ngIk4zKVX/ma3YMc+8G00m4
itdnn6//rQiOV5E6N7rnu7TMB5JMJN0=
-----END CERTIFICATE-----
Generated at Sun Aug 24 10:59:47 2025 by rpki-client