Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e4ebc1b0-de6d-3b89-92ae-7e9adc83132f.roa
File:                     e4ebc1b0-de6d-3b89-92ae-7e9adc83132f.roa (raw, json)
Hash identifier:          nIX/Ws4Gw97x8V4pgD5WEy988zNjLDUPdPm6622t1TE=
Subject key identifier:   66:6E:4F:E7:2B:53:67:18:92:80:11:EE:EF:07:AC:19:6C:A0:D7:8D
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE1965D9345BE40BFDDFF7C40
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e4ebc1b0-de6d-3b89-92ae-7e9adc83132f.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     10965
IP address blocks:        207.161.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:5d:93:45:be:40:bf:dd:ff:7c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=98ee5e6d-f599-4b0a-b886-08f717dcf5fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c1:97:75:c2:11:38:e9:cb:f6:ea:b8:95:12:
                    b9:ac:94:97:0b:e5:b1:4d:a7:3b:05:fe:7e:44:e2:
                    28:5f:0f:2e:a6:a0:a4:3f:2f:b5:97:2d:3d:41:26:
                    1c:8b:71:c9:b0:f3:82:b2:e1:56:d9:54:66:09:45:
                    95:64:79:2d:5b:4e:88:5c:91:cb:4a:18:4b:f8:7e:
                    44:b0:76:d1:3e:20:6e:22:d4:67:23:1c:88:5a:aa:
                    8f:aa:60:f2:ab:eb:19:bb:62:f6:c9:2a:5c:f5:81:
                    95:fd:b9:97:a2:f9:18:3b:b0:ad:28:a5:f6:f4:d8:
                    a9:93:3d:1f:8e:d2:59:81:26:31:15:98:7d:63:13:
                    53:7c:df:b3:f9:2f:e8:1d:ba:36:72:3c:3d:1b:6c:
                    d8:53:48:d5:82:46:5f:2e:2f:3a:2c:77:39:59:66:
                    2b:d9:98:86:10:01:82:5c:db:05:b5:6c:b9:16:66:
                    61:cb:65:63:9e:8e:82:d2:24:8d:70:f2:eb:f7:63:
                    72:23:80:97:88:a1:c8:d3:2c:b2:ad:bf:22:34:f5:
                    5b:c0:94:08:dd:1a:6b:41:d4:f4:43:46:7f:e2:9d:
                    02:45:77:a8:b9:be:4f:2e:f1:c4:ff:18:e9:75:ef:
                    97:f1:76:8f:4f:73:78:ac:13:75:2b:46:75:e5:e0:
                    10:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:6E:4F:E7:2B:53:67:18:92:80:11:EE:EF:07:AC:19:6C:A0:D7:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e4ebc1b0-de6d-3b89-92ae-7e9adc83132f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.161.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:87:ab:8a:52:e3:8d:c6:bf:9c:e3:c1:86:dd:4f:21:08:27:
         c3:74:77:db:f0:c8:6a:64:ae:1c:1b:9c:0d:9c:da:45:30:e3:
         1a:55:ad:0a:67:41:83:50:51:89:0d:04:cf:3e:31:af:07:20:
         88:22:06:c5:cd:e0:17:d9:6f:4d:58:c5:87:e7:10:0e:bd:64:
         8a:65:87:50:ec:48:de:bc:36:7a:0a:f5:ca:ec:63:81:f5:a7:
         c5:2d:4b:4e:c7:34:3f:d4:0d:65:3b:ad:70:9a:25:c2:74:4a:
         ad:b8:a6:56:85:7b:0d:ac:e4:e1:cb:89:0a:33:b4:40:47:d4:
         d8:41:ee:26:41:f4:c9:84:8a:d3:d0:f3:65:b6:a7:16:be:6f:
         d2:ce:13:84:58:1e:56:08:65:7a:a2:ff:28:4a:42:f1:fb:ea:
         0f:56:0c:b3:4e:da:20:d9:54:5d:b6:e1:e6:6a:18:3e:cb:fa:
         4b:3d:86:f3:4d:a2:b3:89:c6:fd:d2:0b:a7:fd:57:72:31:1c:
         7d:f6:e0:18:a0:24:d5:0e:71:5f:4b:68:89:9d:ba:ed:5a:26:
         96:b1:76:30:1f:fd:d2:01:06:43:35:b8:bc:e5:93:54:13:0b:
         4a:c7:f3:42:27:72:60:85:a5:8d:35:44:73:37:8c:62:6e:b4:
         47:2c:22:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 08:21:26 2025 by rpki-client