Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f82cd759-3e97-31b4-a41f-4b5b71cfd357.roa
File:                     f82cd759-3e97-31b4-a41f-4b5b71cfd357.roa (raw, json)
Hash identifier:          Wf1s7yrFAonfoh+yoycNTGDlTLWonmt8V1DukaSrRRs=
Subject key identifier:   38:68:08:30:6F:FF:A8:C7:39:28:EC:87:DF:57:57:0D:06:6A:B1:28
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DAA07CCAB8779EC6178860
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f82cd759-3e97-31b4-a41f-4b5b71cfd357.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     36522
IP address blocks:        204.101.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:a0:7c:ca:b8:77:9e:c6:17:88:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=1e4273c2-6655-4729-a4c3-55edef7de554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c7:c8:af:33:24:2c:5e:99:f5:8a:2a:84:39:
                    29:cd:a9:fc:f9:e1:1b:8f:3f:63:55:e8:72:38:f7:
                    d0:48:3c:75:c8:73:50:92:f1:25:cb:09:fd:fa:17:
                    c9:c6:58:4b:da:4a:25:8f:85:dd:83:51:83:de:f2:
                    29:23:ab:b9:91:d5:64:68:ea:7f:03:38:5a:be:25:
                    1d:1d:a5:64:f0:69:6a:3f:fe:0f:56:a4:4c:19:6f:
                    56:bd:71:38:09:55:31:c5:74:a0:1d:71:9b:29:cf:
                    26:19:dd:05:d5:c6:2d:c4:cb:83:25:1f:f5:ff:5f:
                    18:72:0e:7f:56:39:de:51:50:79:3e:ec:c6:f5:24:
                    ed:c0:b3:63:ff:60:51:5e:b1:d5:ec:f7:a9:e8:ae:
                    df:2b:98:8b:9d:aa:7a:8a:6e:d8:48:ec:f2:b7:89:
                    35:e4:42:88:dc:1e:11:99:b1:ab:c8:b9:aa:28:83:
                    ca:8b:74:e9:58:b5:51:ab:6e:f3:85:ff:44:e4:64:
                    ae:b5:3a:0c:d6:1f:07:fd:5f:13:46:8d:ea:e1:03:
                    29:e3:6c:aa:f5:34:8d:f7:50:af:b6:f0:ef:6e:ae:
                    9e:ff:98:37:74:91:59:7a:78:f8:0c:a9:0f:72:e0:
                    d0:0a:27:a6:ca:38:af:44:94:5a:42:73:74:a4:e6:
                    e9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:68:08:30:6F:FF:A8:C7:39:28:EC:87:DF:57:57:0D:06:6A:B1:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f82cd759-3e97-31b4-a41f-4b5b71cfd357.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:3e:5a:35:15:ba:c1:19:c4:74:2c:68:58:c9:35:cd:05:3a:
         17:33:c8:dc:39:ab:48:b5:82:c6:0b:e0:39:a6:c3:1c:85:9c:
         57:97:71:fc:d7:c7:c2:da:49:f9:8e:a8:cb:91:df:ba:11:40:
         e4:65:57:0a:0c:0f:fa:7d:48:f5:53:4f:92:4b:8a:ac:62:dd:
         04:a7:c2:59:fd:0d:ea:c3:af:ec:75:e5:18:53:f4:58:7f:13:
         2d:68:a5:24:56:70:19:e2:72:d3:89:21:76:80:a7:01:05:8b:
         f5:19:7c:43:ce:62:e6:61:4e:ca:6d:24:ec:0a:2b:3d:df:5c:
         66:95:9e:b2:61:e6:44:9c:42:4e:91:c2:90:77:84:e7:4c:de:
         4d:8e:11:84:74:b6:ad:d8:e2:56:3e:3f:0a:29:9f:48:8d:37:
         4e:14:b2:21:85:f3:2f:41:4d:e2:6b:bd:3d:4c:01:e8:36:d3:
         dd:d3:a0:46:1b:8f:25:9c:2b:49:85:b5:39:19:fd:34:cb:3c:
         a0:4e:f6:e7:25:01:07:4b:b4:47:f3:18:0a:51:d0:63:bf:92:
         90:8d:f6:36:32:b6:28:12:d6:a5:80:a5:bb:15:5a:88:9e:95:
         50:1c:4c:56:53:86:ac:fd:87:fb:69:78:af:99:52:52:be:d1:
         c5:cf:51:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:43:56 2025 by rpki-client