Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/231abfb2-5658-3780-a87a-0c4d60ce4f88.roa
File:                     231abfb2-5658-3780-a87a-0c4d60ce4f88.roa (raw, json)
Hash identifier:          0MVzLKfFTp8xZm8vl+JCBIG6ol0mo0PPlL+cod9glc0=
Subject key identifier:   7D:19:F7:1D:D4:04:58:35:8D:C2:5A:00:AD:15:51:7A:61:FA:8F:63
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DAAE4A39F284CCAB0EDE80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/231abfb2-5658-3780-a87a-0c4d60ce4f88.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     30336
IP address blocks:        207.236.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:ae:4a:39:f2:84:cc:ab:0e:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=b3cb0889-3b78-4624-8d14-69a8c13f7f91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:62:34:be:a3:06:95:91:f5:2c:27:06:94:8c:
                    87:67:8f:fe:49:f6:94:ad:be:dc:35:ac:2c:42:7b:
                    6d:4d:60:7e:30:9a:2d:98:62:f1:3d:01:9f:8a:08:
                    5a:38:3c:9e:ea:f6:cb:56:5b:8e:f0:e9:ff:fc:4c:
                    9b:33:ab:ed:3b:f7:66:da:33:6d:83:43:17:25:c5:
                    cf:3f:18:da:a1:e0:08:4d:a7:32:28:ce:a8:63:e8:
                    f5:b4:e3:7d:8a:84:ff:25:eb:83:b8:d5:e8:36:b9:
                    50:f2:91:d4:a8:1d:a2:1c:9c:f3:16:7c:1e:92:ec:
                    98:05:9b:bc:b2:ea:26:6a:16:a7:e6:11:bb:e4:d0:
                    cb:09:e3:91:1b:e5:21:4c:ec:dd:10:2e:2d:8b:61:
                    6c:fd:97:95:a5:77:e7:11:50:ec:13:c0:49:63:ae:
                    3f:71:57:12:d2:9f:d9:26:68:3e:1b:66:80:2d:0a:
                    3d:df:23:a2:62:cd:6c:cb:24:1b:39:2a:23:90:b3:
                    4b:60:57:7f:a9:fd:1c:ce:f9:35:88:93:78:3e:12:
                    67:b5:1b:18:11:cd:50:f1:04:29:24:41:2d:9c:7e:
                    cb:b7:9a:e0:01:45:0e:ca:3c:cc:30:09:d7:fb:a9:
                    d4:7b:10:a4:d5:3c:79:f8:e9:51:4d:29:a1:02:f6:
                    81:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:19:F7:1D:D4:04:58:35:8D:C2:5A:00:AD:15:51:7A:61:FA:8F:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/231abfb2-5658-3780-a87a-0c4d60ce4f88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.236.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:23:03:a4:1b:4c:c2:21:bf:e1:d4:a5:e5:9e:a4:16:8c:b7:
         b1:46:17:40:1f:b2:24:3c:5f:9b:7a:f1:7c:f9:fc:3d:ae:d3:
         09:bd:1a:ca:1f:f0:5a:aa:42:a2:4e:f0:e5:b3:07:a9:94:0b:
         41:c3:e4:68:b0:69:6c:bc:d7:d4:67:7e:28:36:69:5d:0f:f8:
         bc:f4:96:20:81:c7:e2:77:c4:81:78:6e:53:de:a0:67:16:6e:
         e9:7f:72:b0:4b:0c:16:ec:b2:4d:0a:99:2d:c8:c7:56:97:a0:
         58:86:18:55:4c:7c:99:3d:71:92:14:2c:e8:27:8a:73:ab:72:
         8b:2f:e7:9b:4c:f9:45:43:6b:26:94:d8:04:3f:43:a5:26:8b:
         ad:fc:25:57:81:e9:42:19:d3:7e:7f:e7:e3:b4:12:ba:fc:51:
         48:ea:3f:47:87:cf:be:f9:41:f6:97:58:1c:2a:f7:f1:6c:d9:
         93:4b:e6:dc:8b:a3:d6:fe:03:b4:0a:b5:96:af:1a:17:f7:be:
         6a:ec:eb:c0:bf:f1:50:4e:e7:b8:2a:c4:e5:03:73:b5:b8:a6:
         5b:99:d0:e6:2b:f5:c1:37:16:2e:ed:48:0d:1a:39:fd:e9:50:
         ec:73:f4:82:ae:ba:7d:fc:3e:ec:cf:72:0b:65:55:ea:15:d1:
         89:0f:39:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:31:38 2025 by rpki-client