Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e0b30df3-d354-3ddb-95be-1856921dd146.roa
File:                     e0b30df3-d354-3ddb-95be-1856921dd146.roa (raw, json)
Hash identifier:          J7LbRtFhcU2Q+sYF0+JJLDffNLkB2FY2lKgNZe5nd3g=
Subject key identifier:   A7:33:A0:27:46:26:ED:F8:E7:DE:C2:73:0A:20:45:04:82:AA:FB:FA
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DAA26A1D93C2A770D79440
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e0b30df3-d354-3ddb-95be-1856921dd146.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     21723
IP address blocks:        206.47.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:a2:6a:1d:93:c2:a7:70:d7:94:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=c282f925-05c5-4deb-bc15-cd8f9e6e1932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a6:7b:30:f4:5e:38:e3:09:55:d4:ad:c6:a4:
                    93:66:06:ab:28:ca:a5:bd:91:19:be:38:e2:c9:a3:
                    6d:2d:e7:eb:8a:c2:b0:c3:30:a3:b7:13:9d:70:18:
                    90:d0:c9:96:a5:4b:a6:73:2a:63:99:e3:23:29:b6:
                    18:fb:05:a5:58:78:bf:b6:ba:6d:16:2d:3b:e7:f9:
                    e7:6e:5f:13:d5:bd:78:c1:ca:3a:fb:44:76:bd:ba:
                    08:7f:f5:99:3c:f6:71:47:7a:71:08:c0:ba:c8:e4:
                    8a:24:7c:7f:3a:92:d3:7d:72:fd:ea:78:bd:06:2b:
                    18:a4:18:4f:16:0e:ca:d2:b4:59:11:c2:8e:c1:f1:
                    20:dc:41:b7:d3:39:c4:02:54:4c:46:6e:39:9c:47:
                    ee:24:8c:cd:da:f4:19:97:50:0c:c3:08:87:c0:5b:
                    26:ff:59:58:4e:62:16:67:df:9d:92:02:36:5f:3b:
                    8e:06:c3:7b:c2:a5:9c:9e:53:f4:2b:12:28:79:1e:
                    09:d8:85:1b:c9:0f:88:b0:5b:e5:44:2e:09:f2:a7:
                    d2:c5:28:8e:f6:02:7e:b3:d5:d5:89:ce:90:33:fa:
                    83:04:37:a1:63:d2:9b:26:9a:f7:28:a0:0e:65:56:
                    b2:af:0f:30:aa:69:b4:80:c2:8c:1f:3b:48:15:3f:
                    0e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:33:A0:27:46:26:ED:F8:E7:DE:C2:73:0A:20:45:04:82:AA:FB:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e0b30df3-d354-3ddb-95be-1856921dd146.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.47.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:d6:d2:c7:45:79:9a:b9:1b:58:76:18:96:33:a5:46:85:53:
         45:ae:b7:45:47:e5:47:3b:a5:34:f0:97:0c:c0:fa:32:5d:82:
         c5:bc:a6:e8:e7:2d:dd:b2:3f:cd:09:f3:96:51:1a:ba:dc:81:
         d8:18:13:bd:7d:6b:43:9c:bf:44:dd:55:9c:29:ad:06:bb:cf:
         84:f9:0d:cc:78:c6:bd:74:c4:fb:12:9b:5e:ee:55:5e:55:15:
         61:3c:73:3c:7e:67:d3:b6:4a:28:19:09:61:67:ea:98:26:14:
         0f:00:ca:a6:80:31:64:61:0f:82:33:11:f7:d5:2a:83:b2:50:
         67:e6:fe:11:39:a6:9b:b7:47:99:e1:94:54:79:74:1e:b7:5d:
         6b:c5:dd:62:a8:c8:30:07:09:08:80:15:ca:a9:4b:8a:17:70:
         84:4e:3e:3e:0b:9d:8f:16:55:02:5a:aa:a1:8a:78:3d:d1:75:
         b2:9c:7e:76:fb:c1:02:39:37:68:bc:30:35:1d:33:cf:b3:92:
         e6:9c:d8:b5:89:5d:4b:de:b9:13:ce:e7:ca:5e:ea:42:b5:32:
         09:ba:9f:0b:d2:3b:6e:2f:d1:df:4b:e4:57:2f:99:78:fa:8b:
         de:8f:6b:16:ce:1e:99:eb:45:62:8d:28:03:9a:c8:74:a2:d7:
         b0:e1:7b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 22:02:31 2025 by rpki-client