Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/eb66f839-42e1-35db-8d0e-0328018c0700.roa
File:                     eb66f839-42e1-35db-8d0e-0328018c0700.roa (raw, json)
Hash identifier:          EA2nCGHKreVS6+jFGwuNCPoF0a76d4zspxIAKuAJdTU=
Subject key identifier:   11:74:03:44:47:C6:B2:A2:06:96:26:BB:E4:2C:ED:34:61:56:C1:44
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE197065A5A7AE827CF47BB40
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/eb66f839-42e1-35db-8d0e-0328018c0700.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     36522
IP address blocks:        207.236.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:97:06:5a:5a:7a:e8:27:cf:47:bb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=8abfce0e-3fb2-4d99-a4be-a3323f92ead3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:07:4d:0b:2e:b1:bc:70:b6:ba:a3:a0:03:e4:
                    24:d3:34:e1:76:16:50:2c:fa:44:ed:58:de:94:64:
                    aa:c8:36:9a:55:52:b2:fa:33:67:a0:f3:d9:b9:52:
                    56:b2:01:a5:88:cb:31:34:85:b3:00:40:0e:90:8d:
                    4f:09:aa:63:e9:38:8e:50:4a:96:3f:5c:7a:89:79:
                    75:fd:4b:35:ae:bf:dd:c5:f7:67:9b:cd:8e:f9:8a:
                    27:9a:c6:74:38:88:43:c0:82:7e:c0:a0:f9:91:56:
                    c0:ef:58:35:88:38:e2:57:ed:f9:8a:12:c7:98:d1:
                    09:fd:99:f2:13:f4:e0:bc:8b:85:24:b9:5c:3f:88:
                    70:f6:fa:3c:f6:43:4b:7c:ff:f9:68:41:57:6d:12:
                    4a:40:14:33:26:47:59:4a:b1:be:f7:f7:3d:34:ec:
                    0b:67:53:1b:6f:11:88:3b:76:72:ca:2e:25:3a:38:
                    65:9f:ee:26:c4:7f:55:35:ba:60:a5:ae:a9:df:28:
                    f4:74:a5:78:9d:57:31:44:7f:16:f0:df:54:1e:36:
                    b2:1a:65:98:df:d4:34:0f:b6:af:8c:f8:7c:4f:f9:
                    6f:75:d9:ac:44:e1:ea:dd:20:81:42:20:46:be:69:
                    b5:c6:45:a5:b3:b1:aa:aa:d9:77:bc:ec:2e:7a:d0:
                    e7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:74:03:44:47:C6:B2:A2:06:96:26:BB:E4:2C:ED:34:61:56:C1:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/eb66f839-42e1-35db-8d0e-0328018c0700.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.236.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:5b:81:3a:1b:07:5a:03:9d:a6:5e:d9:67:db:b1:0c:70:02:
         df:f2:5a:f6:d8:73:0c:ee:bc:83:48:b7:8a:6a:18:f8:7c:86:
         f5:36:d1:d6:b2:52:72:8f:56:df:fe:12:e4:13:d6:4c:17:f8:
         3d:78:95:a2:42:a5:8b:eb:10:2c:26:44:28:48:c3:81:73:37:
         57:25:a9:15:01:08:03:38:1d:2d:b5:20:d9:3f:a1:23:13:bf:
         1a:6e:12:38:8a:62:5b:07:8f:32:40:80:40:cb:19:7d:0b:a0:
         9d:66:d3:b5:57:66:48:4a:c5:c1:13:48:4a:ca:b5:43:25:e0:
         84:cd:24:9d:36:a2:27:6a:45:e0:3e:6e:b0:c2:91:8b:01:44:
         fd:34:00:55:3c:e2:10:2a:d8:8a:87:a8:69:eb:eb:64:e8:81:
         a0:30:56:c0:2f:ab:53:03:0a:f4:cf:ec:67:cb:65:a3:70:8e:
         a6:3c:2c:4b:ec:7b:3a:94:cf:a3:3d:b4:8c:9f:a5:ad:8e:a1:
         7c:dd:cb:e6:70:c5:bd:44:50:99:b3:55:e4:2e:35:be:25:13:
         fc:68:69:c1:13:80:59:cf:de:b2:74:45:19:6e:3e:a5:9d:65:
         df:69:ed:9c:a1:5b:dc:e3:b5:f2:12:95:80:47:a1:9e:96:bc:
         82:82:2f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 08:58:25 2025 by rpki-client