Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/17d07a43-7b69-3b2e-a219-4b07aa82c3f7.roa
File:                     17d07a43-7b69-3b2e-a219-4b07aa82c3f7.roa (raw, json)
Hash identifier:          kAZFpzw3FveqIKUGD8OFvK7mcfzsNwMlxwXxmhqI7IY=
Subject key identifier:   87:FA:6D:80:C8:29:F6:6C:F1:A8:86:80:23:10:F7:27:03:E6:CC:C1
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DAA0E091F7D9DE11856B80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/17d07a43-7b69-3b2e-a219-4b07aa82c3f7.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     54937
IP address blocks:        205.200.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:a0:e0:91:f7:d9:de:11:85:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=ee0930da-2a5d-4069-a669-3903883a6cc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a3:c4:e1:e2:c3:91:f7:da:d9:91:3d:35:5c:
                    6c:68:54:db:58:2e:91:2b:13:9c:dd:ff:ee:8a:b7:
                    3c:e3:e9:84:cc:55:cd:f5:3f:67:06:c8:8f:b1:29:
                    d2:3a:d5:87:92:38:bf:ad:db:7b:74:98:4d:9a:28:
                    b1:dc:38:fd:f5:d0:08:fb:7f:3b:de:4c:4a:48:25:
                    5f:d8:e9:b3:28:32:a9:90:a9:48:36:d7:d5:0f:fb:
                    6e:9e:38:1c:55:75:15:fc:03:9c:31:be:32:36:06:
                    69:2d:95:89:fa:bb:01:4d:14:8f:e4:ea:cd:69:34:
                    ef:3c:e9:01:41:62:fd:51:e2:75:b6:e8:8b:6b:99:
                    af:4f:8a:b7:3b:eb:60:7c:5f:a1:63:15:df:6d:2c:
                    dd:f6:da:04:68:da:b9:22:6a:45:5a:a0:dc:5a:44:
                    61:ef:25:60:88:a4:5d:99:b6:09:bc:6d:c6:58:9c:
                    43:47:9b:47:6d:8b:53:9b:8c:1d:85:c6:25:3c:a0:
                    90:0c:c0:38:8e:85:76:ca:a3:4a:a1:73:19:6a:4f:
                    bf:e2:ab:7a:11:44:46:0a:43:c3:d0:56:8d:31:27:
                    5d:c3:bf:65:99:5b:52:4a:ce:cb:97:1e:ca:3b:c4:
                    dd:c8:db:10:94:cd:03:36:75:65:f3:23:bb:a7:a3:
                    0a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:FA:6D:80:C8:29:F6:6C:F1:A8:86:80:23:10:F7:27:03:E6:CC:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/17d07a43-7b69-3b2e-a219-4b07aa82c3f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.200.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:d6:6b:ab:9a:0f:3b:e4:25:a8:1e:ee:67:bb:3e:46:76:e6:
         78:f8:b0:c9:69:b0:3e:04:cc:6a:45:36:e9:9c:d7:4e:4b:8a:
         76:21:e7:84:7b:6e:74:77:47:a0:46:ad:b1:5b:db:3d:8f:32:
         28:ff:3b:71:33:0f:51:7e:a0:75:f1:5e:37:21:c2:e8:74:11:
         e5:1d:18:d8:7e:7a:f3:68:9e:22:70:c2:c4:11:7c:55:67:dc:
         00:54:3f:11:5f:cc:d5:14:f9:4c:4e:d1:56:f9:0a:39:8d:8e:
         cc:84:ec:88:14:01:df:dd:71:b1:d8:1f:fc:9e:a2:55:41:fa:
         c5:8c:21:b1:18:3c:e8:f7:32:0d:60:1f:4c:83:36:b8:42:dc:
         fe:41:2c:1d:b4:d2:ea:e5:6f:23:51:99:b9:a5:d0:44:f4:28:
         0e:66:c4:bb:b5:6b:52:e7:9d:1a:4e:dd:48:42:b0:6d:98:a7:
         c5:0c:75:bd:9c:06:c3:0b:e6:58:55:14:c1:52:80:d4:3a:cf:
         a5:a4:01:8a:74:94:32:3e:65:e5:e5:c9:6b:16:2c:47:09:31:
         ad:5b:67:f6:63:dd:69:0b:91:f6:77:56:ae:95:6c:94:46:b2:
         6e:9c:6f:72:d7:2c:65:ee:ec:6b:18:4c:d9:eb:a4:d8:d6:dd:
         68:07:ba:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:21:28 2025 by rpki-client