Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e47352c3-61d8-341f-827b-c1162aa6bac8.roa
File:                     e47352c3-61d8-341f-827b-c1162aa6bac8.roa (raw, json)
Hash identifier:          +vaGp+zVMalSuRVJ/bmv3GTYX8WVmmKFTY+oGDuhndg=
Subject key identifier:   A4:E5:9E:C7:C3:92:FB:A5:5D:1A:E0:67:18:E9:C3:6F:83:62:D6:01
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE19665E3943CB0CBB2D95400
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e47352c3-61d8-341f-827b-c1162aa6bac8.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     21723
IP address blocks:        209.226.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:65:e3:94:3c:b0:cb:b2:d9:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=039087de-d53a-476c-a918-c2dc484c7802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:59:0b:71:d7:9e:0c:8c:3e:7f:43:39:e6:19:
                    4d:d6:b8:c2:be:45:78:52:80:3d:2f:15:e6:12:2e:
                    6e:85:9e:0d:7b:b6:b3:15:d1:ab:76:51:88:c4:a8:
                    b3:f8:7d:82:b0:3e:5b:e4:39:74:7f:a2:be:19:cf:
                    44:7d:7b:ca:d5:0f:82:b7:67:16:a5:4d:b1:8a:8e:
                    59:37:9c:e2:cb:c1:ef:ae:ec:46:09:18:4f:b9:c2:
                    da:6c:29:c7:66:ba:49:cc:b4:1c:23:c7:b6:61:55:
                    b4:5d:db:08:97:d6:0e:40:ac:27:6d:04:47:70:4f:
                    85:46:9c:e8:01:36:34:6a:a5:8c:ff:dd:65:b1:cd:
                    19:ed:55:06:72:30:c6:9a:58:98:dc:20:5d:05:0c:
                    c4:ad:73:0f:1a:e7:aa:5b:d1:56:8c:11:f0:e3:6a:
                    4b:ec:1d:15:c9:63:60:08:00:8d:e0:1c:73:cf:3b:
                    10:fb:41:e9:1e:85:ef:d6:a2:8d:30:32:65:5c:f4:
                    df:22:5a:cf:d7:4b:76:e8:05:29:64:bb:64:df:15:
                    91:f4:8e:1a:42:58:e8:7b:7a:11:7a:92:4b:f0:3a:
                    b2:05:65:19:ac:a2:1b:70:a8:e0:96:dd:8c:f4:e0:
                    6b:47:ed:08:dd:f2:22:c4:f0:d1:da:4a:56:63:67:
                    6d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E5:9E:C7:C3:92:FB:A5:5D:1A:E0:67:18:E9:C3:6F:83:62:D6:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e47352c3-61d8-341f-827b-c1162aa6bac8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.226.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:e0:f7:2f:e7:aa:18:3e:1b:ef:61:5b:29:d7:aa:5b:0f:24:
         7a:f4:64:d4:18:ae:af:f0:66:e0:6d:6a:b6:fe:65:f9:b5:43:
         68:c1:17:9d:45:f2:7b:eb:2f:6e:f7:7c:1c:d4:69:e9:3e:62:
         78:99:ae:77:7f:a6:aa:d9:a7:bf:ad:07:dc:b4:42:67:a4:8f:
         9d:b7:96:52:7a:3c:c7:aa:16:c5:af:cd:da:df:f5:22:ac:c7:
         9f:5c:44:58:4b:ec:2a:46:d7:42:7a:81:8d:53:53:a1:13:08:
         9d:17:c3:a6:65:2c:23:58:4c:94:a3:51:9c:4b:41:a6:13:c3:
         1d:18:6d:d9:06:a3:5a:ba:76:41:e4:67:c9:d2:09:71:1a:80:
         22:3d:eb:fc:7b:ea:2b:6f:2e:19:79:af:21:aa:8b:ea:d7:90:
         3e:53:4f:38:49:78:16:c2:7a:6f:34:b1:0a:36:bf:8c:5f:a2:
         13:35:a4:58:4c:1e:62:0c:43:4c:89:3e:dd:2b:40:1b:20:4a:
         ff:c4:70:40:b8:ac:e1:61:9c:0c:cd:74:cf:5d:c2:f3:e1:2a:
         9d:5a:1f:b9:13:e0:a5:a4:9a:3b:e7:28:42:bf:a3:c2:2d:5c:
         b6:45:3b:b8:8a:a9:1d:82:15:66:64:e3:36:be:0a:c2:80:dc:
         15:b4:21:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:09:14 2025 by rpki-client