Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ed854f7a-85fd-3a85-bceb-6c2d41e036bc.roa
File:                     ed854f7a-85fd-3a85-bceb-6c2d41e036bc.roa (raw, json)
Hash identifier:          b7S20FBZh3xEpEo/dJHt6KYq2HQPi6py2ATV9DGF0NU=
Subject key identifier:   DC:DE:28:0F:C0:21:8F:4F:5A:52:9C:FB:91:64:51:10:23:64:14:A3
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE1967B7A4C36968E8DB28000
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ed854f7a-85fd-3a85-bceb-6c2d41e036bc.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     30336
IP address blocks:        207.236.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:7b:7a:4c:36:96:8e:8d:b2:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=9a14ef49-5cb0-4970-840c-a64854222a7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a0:47:2d:32:26:a7:15:bb:b2:79:f7:b1:71:
                    c4:97:08:a1:41:57:dd:43:6b:4f:98:05:ac:35:24:
                    ae:24:85:17:99:14:95:aa:4e:91:47:72:57:bf:e0:
                    e1:86:b5:fe:a4:6a:f5:f4:c3:e4:56:88:bc:f8:4a:
                    36:57:33:24:f6:19:de:d3:57:a4:5d:86:98:ad:6c:
                    89:93:bb:85:02:ab:b3:6e:68:c5:bc:94:9a:c2:d8:
                    3f:3d:08:1d:d2:bf:6c:24:12:64:1a:4b:91:de:0d:
                    60:5f:26:aa:58:55:23:c4:80:e4:3f:f3:87:59:82:
                    59:9c:35:be:4a:3c:05:70:dc:30:ff:23:3b:3e:bb:
                    b4:8e:3a:51:db:9a:5f:7f:5f:9a:d9:bc:dc:dd:44:
                    6e:10:1e:97:db:8f:c9:ec:b2:3d:45:09:1e:10:32:
                    a1:0e:09:24:ee:a3:87:e1:38:d1:64:f9:cd:fd:64:
                    52:df:71:f4:c8:b1:a7:c4:e7:0f:83:e2:ed:36:0e:
                    a5:34:f8:ee:be:80:09:08:12:d9:c2:2f:93:29:c3:
                    1c:b8:53:17:6e:f9:5e:03:52:3a:12:c0:09:1e:93:
                    51:7f:f9:04:24:5b:19:eb:7a:83:15:b0:99:82:e7:
                    3e:bd:97:39:f8:6a:e0:99:2b:7c:f0:8a:11:a0:89:
                    58:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:DE:28:0F:C0:21:8F:4F:5A:52:9C:FB:91:64:51:10:23:64:14:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ed854f7a-85fd-3a85-bceb-6c2d41e036bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.236.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:ab:85:ee:44:b8:0a:d6:08:84:d4:9e:4a:09:53:dc:8a:f6:
         2a:a4:72:63:ab:48:14:78:4d:da:e8:29:ca:30:1d:9c:f6:81:
         0e:34:24:71:61:ba:7e:3d:3a:0d:52:f4:66:33:e3:28:df:72:
         47:c5:3b:49:44:b4:a3:1e:99:df:81:f3:aa:1d:ed:aa:8a:62:
         3b:e5:3c:3a:d3:4e:37:bf:63:37:a4:e9:9c:bc:af:af:11:e8:
         a4:b0:90:58:01:8d:3f:5f:8f:e5:2d:e2:12:02:4b:b5:df:de:
         1e:4e:33:c4:99:5d:2a:e6:66:cc:ac:7f:ee:32:5f:04:e2:e8:
         49:50:85:d6:e4:5e:34:e7:27:2e:7b:de:6f:a7:97:4a:af:5b:
         49:59:0f:21:f0:3e:f2:c8:aa:5c:fd:b7:fd:c2:a3:13:bd:1a:
         c7:59:3e:0f:9b:c5:58:b8:a9:ef:49:f6:37:f8:2c:1a:7f:9b:
         f1:eb:a9:bb:5e:ab:da:7c:f5:a6:0c:d9:50:40:27:b8:d5:47:
         68:a0:17:b1:ef:a1:9b:31:d0:c1:84:3e:05:b9:36:36:a2:09:
         a3:72:61:a0:82:67:57:1d:f3:84:46:1d:4b:aa:ac:fb:a1:bc:
         40:73:d1:c0:1c:aa:cf:5c:fc:e7:51:9b:e6:89:44:f6:cf:df:
         f8:af:d2:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:01:37 2025 by rpki-client