Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3c98b7b4-6cda-3852-b836-1c90185d9db6.roa
File:                     3c98b7b4-6cda-3852-b836-1c90185d9db6.roa (raw, json)
Hash identifier:          Ro8VsW2zko/beBDM1/N03CzeV1Z56dg352krQRezXhQ=
Subject key identifier:   13:90:67:5F:07:6A:E1:1D:16:9A:10:9D:8D:2E:9D:61:51:4D:BA:91
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DAA01C50ABC88F18E90600
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3c98b7b4-6cda-3852-b836-1c90185d9db6.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     36522
IP address blocks:        204.101.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:a0:1c:50:ab:c8:8f:18:e9:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=e65888a6-1ffb-4dab-8e0d-707151202085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e6:ad:ee:e8:75:5f:38:10:b4:78:f6:bf:d4:
                    84:fa:41:7b:a2:63:31:3f:68:dd:1b:fe:93:01:ad:
                    76:42:bc:74:b3:03:90:74:88:9b:a7:c4:e8:82:33:
                    e5:06:08:44:38:67:ba:0d:e5:5c:89:f9:f3:81:c1:
                    3a:a3:4d:79:3b:ee:fd:93:08:15:0c:5f:79:04:0a:
                    1d:ef:7d:3f:6d:c9:7c:66:a5:2e:4c:5c:e2:dc:64:
                    ca:a6:b5:54:26:48:53:c2:ec:82:ad:c0:b1:5a:65:
                    06:c3:e2:45:1d:15:df:35:47:f1:f8:06:24:40:db:
                    be:f3:05:49:92:7c:a9:90:89:94:3e:57:dc:fc:22:
                    74:81:c7:38:cc:3e:98:d2:9b:2d:28:bc:3e:bf:36:
                    81:bb:51:d8:23:80:70:0b:e9:3b:08:4f:4c:88:eb:
                    1d:86:5c:c9:a7:34:c4:79:93:d7:b9:a2:22:52:ed:
                    67:f8:9d:d2:50:6c:eb:77:88:80:4c:b6:41:a7:29:
                    83:26:1b:30:35:ea:b1:2c:58:d7:38:8b:9c:d0:ae:
                    54:e6:03:d4:22:06:45:5b:87:e7:ee:5d:de:c7:f9:
                    47:60:c2:54:0f:ff:af:41:50:58:49:f2:bc:4b:68:
                    d3:f7:0f:4f:5e:df:21:06:cf:f9:c9:da:39:8f:75:
                    3a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:90:67:5F:07:6A:E1:1D:16:9A:10:9D:8D:2E:9D:61:51:4D:BA:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3c98b7b4-6cda-3852-b836-1c90185d9db6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:b2:27:c5:f7:a0:fa:b1:fb:f6:69:c9:93:64:88:34:ca:7a:
         3a:ca:f5:a2:6e:ff:31:1a:69:0e:af:dd:60:88:34:f7:27:3f:
         8e:47:df:43:c0:3f:7a:37:b1:e3:ca:de:56:62:02:34:9f:18:
         07:e1:b8:dc:ab:de:0b:fe:1d:da:3e:1a:5d:33:df:92:20:79:
         2c:94:3c:01:c0:3a:e6:7f:6e:1d:03:ef:86:96:02:13:3d:6f:
         72:6c:95:90:b2:94:5f:b9:6b:3f:d4:16:2e:7e:55:55:b7:d0:
         32:e7:c4:a6:68:22:40:65:1f:da:2a:12:16:9e:52:fd:a0:0b:
         c9:49:1b:70:01:3e:91:db:be:4a:ed:50:69:68:b1:08:05:69:
         b2:7a:6d:87:d2:3b:37:c9:cf:26:dc:49:0a:fb:9e:b4:63:de:
         d0:14:3f:8f:0c:7f:ce:63:df:2b:09:e8:94:ff:13:d7:7d:8a:
         5a:db:30:1a:a2:7a:2b:ce:a2:f0:9f:a5:4b:65:2a:ed:2c:f2:
         bb:3f:80:d0:43:8e:3e:4f:94:11:c0:0e:1f:26:56:36:e0:d5:
         4d:07:b3:1f:4e:c7:f6:4c:5e:9e:2b:20:11:7b:47:4d:c3:86:
         e5:c4:a3:46:80:ca:6e:23:63:71:2d:f1:0d:73:e3:a0:15:9d:
         50:45:2d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:14:32 2025 by rpki-client