Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bfaf2710-5dfa-3042-91cd-c89232d6d754.roa
File:                     bfaf2710-5dfa-3042-91cd-c89232d6d754.roa (raw, json)
Hash identifier:          irdlRvQHhIE3oatktpTtA5Lf+Bw8bvNXIuL6/UrHvk0=
Subject key identifier:   16:D3:57:27:83:12:34:0F:86:41:79:47:4D:51:6A:C1:19:CD:B3:2D
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DAADE9B35A15E6258241B8
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bfaf2710-5dfa-3042-91cd-c89232d6d754.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     21552
IP address blocks:        207.236.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:ad:e9:b3:5a:15:e6:25:82:41:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=a9572dbf-1536-440e-8c4d-caeda3326403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f7:db:f1:25:d3:4b:6e:d5:3f:3a:b4:a2:c4:
                    01:2d:7f:4f:36:bc:be:f9:3f:ae:12:fc:b1:72:19:
                    b7:17:20:db:83:12:33:db:bb:5c:b3:26:f1:c6:59:
                    20:3e:2e:68:d5:fe:b1:19:59:3f:25:ff:2a:d7:3d:
                    13:1a:b0:dd:b7:07:a6:99:dd:3f:91:2e:76:63:d5:
                    94:fc:64:9c:e0:1e:d5:e9:b1:fc:64:db:0d:b8:46:
                    10:48:fb:57:91:cb:a2:0f:3e:45:a4:0a:ee:2f:94:
                    da:77:7b:c0:7c:ed:96:36:ef:76:11:2c:d9:65:e6:
                    fc:1f:9b:1f:f3:6b:8f:fc:0d:47:fc:19:ec:88:47:
                    98:f4:ad:75:ac:43:b2:46:94:e6:c3:4d:ae:3a:31:
                    c0:59:ac:b5:e7:7f:9e:99:54:9c:95:c8:73:a6:75:
                    6d:d5:3c:b7:92:be:09:ae:dc:79:ac:6e:36:89:b3:
                    2e:65:07:6b:29:61:80:a1:33:6a:89:03:e7:1a:af:
                    a5:48:2f:45:12:2f:6d:2f:e0:19:a0:4a:91:5d:e5:
                    2c:d9:5b:5d:6b:33:23:7a:38:06:78:ac:08:86:70:
                    bb:7f:3b:ac:83:43:69:76:a7:bf:4d:14:8b:6c:75:
                    12:8f:0c:4f:06:1c:62:ca:2e:ee:e9:bc:4e:d5:18:
                    25:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:D3:57:27:83:12:34:0F:86:41:79:47:4D:51:6A:C1:19:CD:B3:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bfaf2710-5dfa-3042-91cd-c89232d6d754.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.236.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:a0:01:7c:32:84:a0:b4:70:4e:7f:fd:14:ba:eb:0c:f4:79:
         73:00:92:70:7b:1b:07:d3:51:29:57:cd:26:27:84:38:51:5c:
         41:59:5d:40:29:02:35:34:ae:eb:1e:68:00:e5:2a:b3:20:47:
         06:f9:c4:88:b5:12:17:9b:56:f2:a9:e8:d7:87:01:c0:cb:f0:
         c0:11:21:b6:b4:19:af:84:7f:0b:4d:7b:78:4f:a4:47:e2:fe:
         fb:e8:69:0d:81:b3:e7:82:5d:37:f4:dc:28:15:af:59:8b:6a:
         4f:b4:88:77:f0:00:a4:b0:ba:ec:24:a9:18:05:06:61:3b:b3:
         9e:77:b6:3c:30:5a:7d:20:a2:17:62:57:6f:99:79:9a:93:54:
         c1:2f:a5:0c:56:ac:44:65:a7:0f:75:eb:3b:58:64:cf:76:72:
         ed:a0:47:91:ba:2c:bf:e7:fa:ba:6d:a4:9d:b8:e7:55:3b:80:
         4b:c3:f4:83:c8:95:a5:0b:12:5b:09:42:7e:36:c2:8a:a0:cd:
         11:30:7d:a7:ba:f3:3e:6c:21:2e:95:8c:0b:b5:f8:b7:b6:59:
         f4:3a:88:c7:cc:be:66:34:f2:1f:5a:a8:d0:57:c3:a7:0e:fd:
         c8:55:11:ea:6e:2d:44:08:db:41:62:da:66:7d:e1:e0:ee:01:
         11:6f:dc:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 16:02:30 2025 by rpki-client