Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d5c4ed68-831f-32c5-baa9-bb61a9db3132.roa
File:                     d5c4ed68-831f-32c5-baa9-bb61a9db3132.roa (raw, json)
Hash identifier:          Nej96ggWuFsMqlN8bQ5ZCdWeWfGXXGd1UzUgIUCgq2M=
Subject key identifier:   DA:74:91:16:20:88:EE:35:EA:34:4F:2F:37:02:DF:DF:73:4E:CF:3D
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DAB17E6EDE00F3C77AB280
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d5c4ed68-831f-32c5-baa9-bb61a9db3132.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     32463
IP address blocks:        209.226.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:b1:7e:6e:de:00:f3:c7:7a:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=64971f08-05fe-4e03-adfa-071a0f033d02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8a:ba:85:b9:db:0e:20:27:f7:df:39:5f:45:
                    33:da:f5:7e:14:3a:74:06:8d:e2:4f:dc:c2:cb:c9:
                    fa:5e:30:31:71:04:73:e6:7f:db:7a:09:27:37:61:
                    8d:4f:4e:a2:4f:74:87:d6:fd:38:07:b2:01:34:69:
                    4c:25:a2:c4:dc:7e:d4:ec:90:d9:4b:3b:34:a0:80:
                    5e:39:3d:0f:6e:15:11:d2:d8:c6:92:b7:cc:e2:af:
                    cc:f6:4f:09:00:fd:40:a3:27:90:c3:e1:9a:b7:15:
                    12:05:85:c0:70:9a:65:eb:37:01:65:ac:1f:56:d4:
                    94:82:9e:8c:6e:d9:65:2d:50:64:6b:18:01:88:49:
                    f0:3d:af:9c:6f:90:4e:d8:7d:91:a2:1b:19:3e:6e:
                    87:95:89:81:bd:40:1d:43:c0:da:8d:ec:44:32:30:
                    fe:18:b4:32:87:1a:e0:70:b2:c8:9f:95:da:c7:b3:
                    87:c1:82:92:50:21:04:21:34:be:5d:31:3c:a5:85:
                    6e:a4:16:d7:20:43:0e:06:d5:8f:3a:f5:af:e4:5a:
                    7c:e3:ef:24:9f:30:86:b4:30:2e:ce:20:bf:9e:03:
                    95:17:0c:6b:cb:3c:68:d9:4d:5d:df:04:c3:ea:09:
                    d5:b9:88:43:b8:a6:25:2d:91:74:21:ee:84:88:0e:
                    e5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:74:91:16:20:88:EE:35:EA:34:4F:2F:37:02:DF:DF:73:4E:CF:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d5c4ed68-831f-32c5-baa9-bb61a9db3132.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.226.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:f4:b0:24:4b:bf:ec:32:34:ed:2f:bf:e9:0c:03:ba:f6:a3:
         c2:08:2a:a4:8d:79:29:2a:df:32:7f:77:56:9c:77:67:ca:08:
         58:c3:81:e0:ed:87:d1:f8:6b:55:59:c9:95:4d:8c:e5:b2:a8:
         13:4b:3e:ac:b0:6b:4a:c7:13:1f:3c:3a:24:b1:92:b9:21:a3:
         2e:01:f8:03:b3:e8:98:4b:e9:3e:d1:4d:00:2e:1d:96:60:d7:
         5b:a4:48:87:32:74:86:c8:05:4f:7f:f7:4d:2b:b7:9d:5e:82:
         3c:56:7c:36:77:01:3a:14:27:32:69:a6:5c:17:6f:bb:29:74:
         b6:c9:94:3c:03:45:3b:0e:f5:82:2c:26:ed:b8:3f:61:5a:5b:
         5b:41:fc:29:b9:db:6b:7d:4d:0b:f2:64:24:15:37:db:2c:37:
         91:4a:bb:9e:80:0d:e6:d5:f9:eb:1f:46:eb:33:0b:93:46:a6:
         b0:e8:b9:4e:1f:76:9d:fa:c4:e7:25:98:93:8b:7e:4a:92:44:
         d8:94:ab:3e:8e:b4:70:2e:d5:ab:a4:28:ea:49:75:03:63:45:
         fb:b8:0d:f7:d1:ca:0d:2a:ff:d7:e4:0f:50:53:02:c6:1d:9a:
         77:c7:f7:82:cf:6e:2e:ea:95:0b:1f:4c:87:c2:5e:38:aa:a8:
         31:53:95:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:43:42 2025 by rpki-client