Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1d5e754d-d0a4-3a64-bde9-c622bdfd5b0e.roa
File:                     1d5e754d-d0a4-3a64-bde9-c622bdfd5b0e.roa (raw, json)
Hash identifier:          jg2tAkcqd5mTrv2O8GeElU1RPKP6nBbK5SLkqoTWgxE=
Subject key identifier:   7E:D5:5A:A4:C3:74:5E:72:C7:D8:FB:87:FD:6B:60:31:E3:83:EC:AD
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DA9CFD3FCA7F4865D87DC0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1d5e754d-d0a4-3a64-bde9-c622bdfd5b0e.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     36522
IP address blocks:        204.101.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:9c:fd:3f:ca:7f:48:65:d8:7d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=e9d689a4-f619-4eab-9dc0-2eca75dd24b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:11:1c:fe:26:89:de:b9:53:c1:eb:69:6c:44:
                    27:ca:d9:a9:e9:c1:5a:76:44:f4:f2:49:18:15:b8:
                    38:c3:54:33:05:22:d1:1c:f4:59:87:c4:38:83:c8:
                    92:56:46:92:9c:33:23:0c:e4:2e:f4:da:d9:36:f4:
                    34:49:78:ba:f8:e8:6a:0d:4d:81:9d:e2:8c:03:15:
                    03:97:f5:dc:c4:10:b5:c9:dc:45:3b:27:02:10:f8:
                    d8:6f:a3:59:39:47:c1:94:d6:27:44:10:fc:25:d3:
                    2a:9e:1c:6e:b6:83:d2:30:22:bf:ed:b7:58:ee:a4:
                    3f:9b:b5:f0:86:8a:07:5f:7c:c3:71:a4:19:f3:e5:
                    5c:7b:da:a8:ac:8f:ef:18:a4:ac:6d:1c:52:0e:26:
                    a7:1c:27:9b:1b:31:c7:64:5f:40:c7:c5:79:92:39:
                    de:4b:65:df:0d:c6:dc:76:28:c1:8c:4d:d3:c5:5d:
                    b4:a4:41:34:af:9a:01:97:7b:eb:4d:e9:fd:80:ca:
                    3b:6f:bd:59:c9:ee:ec:8b:6d:df:ed:b0:51:3a:d3:
                    ac:dc:fe:de:94:3f:ab:d2:ad:d8:0e:fc:76:e8:39:
                    5a:55:be:48:a1:d5:e8:8e:7f:74:40:c9:1e:d9:b1:
                    54:c5:80:14:80:29:09:34:b7:03:ae:23:67:bb:e9:
                    6e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:D5:5A:A4:C3:74:5E:72:C7:D8:FB:87:FD:6B:60:31:E3:83:EC:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1d5e754d-d0a4-3a64-bde9-c622bdfd5b0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:27:b6:2d:6e:66:5a:46:03:9b:17:a7:fa:44:62:12:15:ec:
         e4:18:8a:39:8e:4f:e6:2d:27:7c:ad:4d:1f:b9:2d:8f:c4:e5:
         5d:12:59:61:99:dc:51:43:a0:36:6b:85:63:6a:84:ab:27:c8:
         76:e9:f9:88:5d:31:ce:4b:fd:4e:a1:0c:12:8b:1c:6c:6f:60:
         de:38:3d:d9:5c:6b:49:99:6a:22:2c:a7:8f:59:67:89:77:74:
         22:6e:de:77:da:c8:2f:ea:52:f5:63:d5:50:cf:85:a1:6f:fc:
         24:55:d4:8a:e5:65:ec:ec:13:0e:5e:df:f2:59:91:90:02:7f:
         2a:9f:b0:cf:6e:62:2e:43:65:b9:08:60:33:1c:ad:46:e4:42:
         e2:bf:e4:c9:ff:15:c4:95:3e:52:d2:25:9b:77:6a:b8:cc:2b:
         90:10:38:b6:e5:e7:4a:07:d6:9e:2b:da:31:f8:a9:26:3c:40:
         6a:06:bd:62:e0:2c:bf:f7:af:a9:0d:50:15:92:5e:b7:e0:98:
         5a:50:df:64:05:91:67:12:05:b7:33:11:61:05:6a:a1:94:81:
         95:e8:51:f3:25:1f:e8:4a:ae:4c:12:01:dd:21:e6:fc:df:21:
         79:5a:a0:dd:ab:c4:bb:36:b0:67:9d:71:02:c4:18:0e:bf:5d:
         a9:5d:41:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:21:38 2025 by rpki-client