Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fd52c6ce-4e3e-33f2-9036-0a0dc55cfa92.roa
File:                     fd52c6ce-4e3e-33f2-9036-0a0dc55cfa92.roa (raw, json)
Hash identifier:          ECQusGMNkffMLIEWvrxu7835eV8yaKqIeiFZvkCOMjI=
Subject key identifier:   2B:CF:2E:29:85:02:AD:5B:CF:EE:0F:7E:25:7A:30:3B:03:2D:74:76
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE19716E6DDA0C5BEE03EEB00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fd52c6ce-4e3e-33f2-9036-0a0dc55cfa92.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     30336
IP address blocks:        207.236.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:97:16:e6:dd:a0:c5:be:e0:3e:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=54212255-5df0-4320-bd0f-218e2a110496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ce:7d:be:bf:73:82:ad:36:fe:57:ab:f3:62:
                    fe:ce:10:01:57:d8:ce:9c:12:d4:c6:5c:01:a8:a4:
                    64:9a:86:e5:56:7d:d4:6d:27:7c:67:7b:8c:d5:9d:
                    7f:04:5a:3b:16:99:0c:1b:24:2f:a7:9f:33:89:59:
                    be:a2:1a:27:d7:3b:75:01:51:83:dd:ba:14:94:93:
                    ba:d0:14:54:61:cb:30:53:f8:1a:fd:b6:2c:af:18:
                    a6:d6:2b:d9:17:35:0b:2b:41:2f:38:c4:68:b0:47:
                    59:11:21:4c:98:15:f2:47:0a:09:98:87:9c:04:e7:
                    45:34:78:61:d1:34:45:0f:c5:5a:27:5d:ab:9a:b0:
                    1c:04:0f:68:2c:50:a4:4e:6e:4f:57:b4:6b:b9:e8:
                    19:6d:2e:2b:1d:eb:81:1d:10:4e:c9:1c:33:3d:f8:
                    14:d7:e4:42:77:76:a8:10:f5:93:65:0d:85:61:f8:
                    65:bb:fa:87:68:07:15:1a:91:d3:ba:10:28:8d:ed:
                    aa:c2:86:3b:28:2f:62:2b:98:ee:f8:f7:54:9a:75:
                    9f:ff:b7:c5:2e:8c:8b:2c:d3:17:c1:d5:11:28:5c:
                    3f:a0:f5:fd:fd:a1:06:c3:23:81:43:98:05:d9:a7:
                    3d:cd:8d:98:be:63:3a:e1:f3:41:b2:36:e4:3b:aa:
                    6c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:CF:2E:29:85:02:AD:5B:CF:EE:0F:7E:25:7A:30:3B:03:2D:74:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fd52c6ce-4e3e-33f2-9036-0a0dc55cfa92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.236.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:9a:22:28:06:5b:8d:c6:6e:c5:46:a9:ba:09:71:6f:81:cb:
         28:f9:1f:3a:04:cb:67:74:fd:f8:0e:89:b4:3e:af:bf:8b:48:
         ee:af:26:e6:65:5c:1c:0c:e7:36:2c:d5:68:0b:0c:ad:ac:1e:
         d1:d0:8d:73:62:1f:b5:42:48:1b:46:f8:d2:77:6a:de:56:60:
         49:57:62:9b:70:b4:0b:2a:9b:6a:3b:30:86:be:14:45:66:b0:
         b4:64:73:e6:3d:25:99:7f:2e:88:0d:ba:f5:c9:ae:ee:5f:8d:
         28:d9:86:8b:e1:82:91:57:b2:33:b9:ab:f0:74:7b:a4:ce:05:
         32:57:43:4e:d5:d6:1c:12:59:91:ac:85:1d:f2:bc:2a:42:63:
         60:27:f4:44:81:d6:c6:e5:4f:48:16:cc:4e:10:1e:bb:ea:01:
         fd:8f:33:cb:a3:20:54:dc:39:1a:6e:a6:5f:a6:ba:ae:99:d1:
         28:26:75:12:53:0e:31:1d:37:72:14:c9:86:97:79:87:00:30:
         9d:a6:62:04:20:cc:60:94:4a:43:81:89:15:f0:5a:0c:ed:d6:
         b5:b6:5f:6c:48:5c:0c:19:06:dd:bb:91:06:c0:eb:0b:1d:b5:
         b3:3c:6e:eb:6a:bb:9e:ce:86:7b:b9:52:8e:e7:a4:17:8e:00:
         71:e6:65:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:01:30 2025 by rpki-client