Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/42932550-1a80-37dc-8ff9-f73b6c6cc379.roa
File:                     42932550-1a80-37dc-8ff9-f73b6c6cc379.roa (raw, json)
Hash identifier:          IK7jJotc5DdQAh7qUkncvZhAtzIsOOgCG98KFwKKe5g=
Subject key identifier:   1A:54:57:AD:EB:A4:A4:A4:70:90:F6:AA:2C:D1:66:03:02:1D:D5:0C
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DAAEA88BC8D50A758594C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/42932550-1a80-37dc-8ff9-f73b6c6cc379.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     30336
IP address blocks:        207.236.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:ae:a8:8b:c8:d5:0a:75:85:94:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=a196646b-e668-4784-b8b7-381368b6b46b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:38:40:0b:96:2d:9f:62:3f:6b:9c:00:7a:85:
                    ee:08:70:10:76:8c:f2:e5:bf:61:0d:1a:f8:7e:72:
                    1e:69:80:f6:b9:78:d7:99:a3:1a:4b:eb:4e:6c:fa:
                    ca:48:76:0f:af:9d:2f:02:ef:9d:cf:c5:aa:a5:66:
                    45:3d:63:aa:55:80:12:c6:99:b2:6a:9b:74:d5:b5:
                    c6:c8:a5:c0:b8:43:d9:01:5c:c1:1a:c3:96:33:3e:
                    99:b0:97:7d:2b:cb:65:36:bc:68:67:07:01:44:f9:
                    7f:ca:25:fc:42:17:bb:66:de:b7:3f:60:af:c6:9f:
                    81:12:0d:ec:13:06:39:9d:ce:80:32:89:74:84:61:
                    ce:d7:6d:f9:18:c0:88:11:9a:d1:06:46:04:05:80:
                    b3:df:59:f7:1b:d2:92:55:78:24:53:3a:53:d0:4e:
                    cd:96:cc:a0:1d:be:95:44:4e:6a:f9:1c:8c:68:d1:
                    d2:2c:73:0c:5f:94:9a:f1:a4:0a:9f:64:7e:4d:fd:
                    07:31:fd:4e:fd:2f:0f:93:26:5d:5c:7e:8c:e7:fa:
                    ba:01:44:de:f6:02:5b:e2:70:0d:86:f1:33:d9:77:
                    c1:24:e5:a0:39:17:fd:9e:03:f9:15:60:5d:c5:46:
                    d7:d0:eb:be:c1:db:80:7e:7f:22:05:3e:e7:7d:44:
                    cb:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:54:57:AD:EB:A4:A4:A4:70:90:F6:AA:2C:D1:66:03:02:1D:D5:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/42932550-1a80-37dc-8ff9-f73b6c6cc379.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.236.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:fa:da:6c:ac:71:18:bb:21:d2:ee:d5:fd:48:cb:0d:8c:a3:
         53:b1:a7:2e:37:bf:5f:23:14:0e:81:a4:df:97:d7:54:91:6e:
         78:5b:6c:14:27:3d:5b:9c:b8:b5:28:11:f8:32:e7:6f:64:5e:
         de:0e:de:c8:89:f1:12:68:cb:a4:f7:48:89:4a:63:2f:ce:59:
         97:5f:12:93:6b:43:3c:1e:65:31:40:c9:ed:5e:70:84:87:94:
         29:bc:d8:a6:36:5a:55:6a:4b:1c:fb:20:9f:59:df:b4:36:7c:
         e5:a2:8b:a6:e1:53:e7:0f:c0:86:0f:1c:b8:58:1e:a0:86:24:
         30:5f:e6:1b:47:48:14:4e:cf:0a:66:fd:5a:69:6d:a7:4a:42:
         8b:97:1f:10:3b:11:b7:61:bf:63:b5:0f:33:2e:2d:cd:da:a7:
         8b:0e:22:39:c8:72:8d:27:eb:8a:7c:1a:8a:38:46:71:c2:f2:
         ae:f1:88:0d:fa:c1:e1:3d:d5:d7:9f:23:fb:41:37:0b:f9:70:
         93:ae:31:c8:9a:55:fa:a5:29:00:28:78:36:73:0b:37:50:22:
         82:b7:9f:a0:6f:fd:e9:2d:8c:c0:85:48:21:31:89:32:09:d5:
         c1:25:4f:be:b8:9e:2c:1e:ff:ee:2a:42:a1:74:24:f7:fa:80:
         03:5e:18:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 00:46:21 2025 by rpki-client