Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/26544f82-34d6-3b35-b91f-50a5263a153e.roa
File:                     26544f82-34d6-3b35-b91f-50a5263a153e.roa (raw, json)
Hash identifier:          rFucSL9g0ZNztF6EMFyHKFK8HTtQOI8UkG+KAhLh5ZY=
Subject key identifier:   29:E1:37:F8:EE:E9:7A:79:9E:CB:B7:0A:ED:B5:14:89:70:A9:30:87
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DA9FDCE8DABE5BD2367F00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/26544f82-34d6-3b35-b91f-50a5263a153e.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     36522
IP address blocks:        204.101.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:9f:dc:e8:da:be:5b:d2:36:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=5b8cd1e4-4493-4a12-8fc4-d9a069832f8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3b:b4:31:fc:83:38:7d:d6:83:15:fa:68:da:
                    07:ca:32:83:f9:94:cd:3c:21:36:06:70:d2:48:be:
                    bd:ab:28:17:c5:75:c2:61:da:a6:c7:39:32:60:3a:
                    a9:0c:7e:0e:d5:c1:50:e9:1e:68:ae:d3:ba:ec:45:
                    2d:3d:81:e6:f4:89:87:12:4c:c8:41:0a:b7:a4:73:
                    64:62:54:7e:da:76:13:d0:5f:bb:79:2e:b5:63:23:
                    97:63:07:e6:09:30:1c:cd:e8:dd:35:af:4b:a5:41:
                    53:1a:a7:f3:66:c7:5a:9d:85:8b:95:49:ae:5a:83:
                    f6:45:69:2e:12:9f:be:f5:3f:3d:66:94:4a:72:f9:
                    9b:6b:10:8e:72:82:e0:b4:e3:a6:84:72:e3:72:12:
                    97:1e:83:68:6a:98:f3:4c:3d:4b:f0:9d:3e:9b:7f:
                    19:96:64:f0:b5:e9:e8:5a:fb:40:d2:4f:e2:0d:d9:
                    60:8d:39:1d:44:e4:49:27:3a:e7:b5:7d:d0:2d:e8:
                    cc:84:d7:f0:a9:cc:0b:9d:bd:4a:1d:fd:d2:60:dd:
                    7f:51:94:95:f0:f5:fb:5f:e3:17:cf:2f:8a:d5:fd:
                    d7:67:06:29:37:85:37:7d:11:c1:b7:18:9e:01:2f:
                    3d:cb:55:3e:39:05:f0:c8:da:14:a8:ac:1a:44:5c:
                    83:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:E1:37:F8:EE:E9:7A:79:9E:CB:B7:0A:ED:B5:14:89:70:A9:30:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/26544f82-34d6-3b35-b91f-50a5263a153e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:dc:7f:a2:a5:00:2b:26:d7:31:51:e6:1d:f3:62:8a:48:e8:
         40:71:f2:aa:53:77:4e:bd:bd:da:3f:3f:96:0c:28:32:cd:1d:
         ca:ae:8b:c0:bb:1c:10:bf:a2:35:29:b9:82:2f:0b:87:ca:0d:
         50:2c:a6:7f:66:95:87:2b:01:8d:74:05:8c:5b:1f:77:22:5c:
         4c:9c:04:14:a4:db:04:f0:60:8d:d1:ce:71:76:e6:65:59:79:
         92:64:75:8d:f0:9d:27:04:0d:86:f5:78:c7:ad:de:62:d7:e8:
         3e:70:db:93:a0:62:5e:6b:69:fa:77:10:25:2c:ba:83:b4:12:
         61:54:b0:00:af:52:a2:0f:d3:0b:6f:78:22:47:c4:6b:54:7f:
         34:d8:6a:2b:1c:0f:8f:4f:3b:cf:ec:3d:dd:2f:06:20:1a:e6:
         ac:fc:f5:15:09:11:69:b0:ba:26:b6:4c:66:d9:eb:c5:a4:14:
         18:7f:b3:a5:79:41:68:52:e4:6e:90:dc:0e:b9:95:26:6b:14:
         62:90:04:e3:6e:64:7d:38:57:c8:03:95:4c:81:e7:6a:64:13:
         ad:d9:3f:82:01:68:fb:1e:64:6b:db:09:81:c2:c5:83:3c:c6:
         dc:ae:12:93:d9:86:7d:9f:0c:77:59:c0:e8:be:5a:e9:23:3c:
         d2:1a:d3:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 20:00:36 2025 by rpki-client