Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e30aa800-c136-3cd7-8490-20b207f2c9f4.roa
File:                     e30aa800-c136-3cd7-8490-20b207f2c9f4.roa (raw, json)
Hash identifier:          L4Nf4cvFlWqPmGGz6U0VT78iaYRkWGSDsx+XoMzsZu8=
Subject key identifier:   70:90:3A:2B:D9:6F:69:C6:80:96:FE:FD:7E:AC:17:C0:D3:D9:98:62
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DAAD81141CAB6E8BF44770
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e30aa800-c136-3cd7-8490-20b207f2c9f4.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     15321
IP address blocks:        207.236.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:ad:81:14:1c:ab:6e:8b:f4:47:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=eb9e1d12-515c-4db0-ab79-1e6138004b34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:81:af:76:f2:1d:46:2d:d2:60:74:05:af:8f:
                    b5:90:f2:ed:03:cb:e1:8f:75:a5:81:cb:99:15:b3:
                    56:03:e0:4d:bc:d0:fb:2c:5e:3c:55:f1:7e:bd:8c:
                    01:1e:91:3e:23:a0:ba:c6:9c:38:a9:73:8e:d2:51:
                    82:77:a3:42:a5:ce:20:cf:02:2a:7a:54:5b:66:bc:
                    50:71:c8:47:c4:58:59:65:59:4a:66:45:54:38:79:
                    b2:4a:89:20:14:a2:99:6a:5b:eb:ec:35:f3:15:76:
                    8f:ad:f2:e5:44:e6:95:ce:37:62:50:12:c5:89:da:
                    60:80:6c:fe:c3:24:ad:7b:09:3b:66:72:09:6c:23:
                    c8:af:10:87:91:9c:1b:38:96:5d:10:5c:60:09:ce:
                    1c:70:ff:f0:d3:52:99:0c:f4:1e:75:29:d3:7b:77:
                    5b:da:7b:ae:e1:d5:91:67:28:0e:70:35:2f:7c:21:
                    6f:74:75:70:cc:7c:72:1f:83:2f:b2:8d:65:f2:27:
                    38:35:85:14:db:38:81:01:1c:7e:07:2c:e4:7a:3b:
                    9f:d2:0e:02:22:93:9b:8c:d2:e8:2d:36:d4:f2:43:
                    58:04:f8:7d:2c:f3:c3:5e:36:b6:05:cb:fb:23:9d:
                    82:58:6e:61:c0:f3:d0:7a:c1:b1:0e:f2:d3:f0:7a:
                    98:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:90:3A:2B:D9:6F:69:C6:80:96:FE:FD:7E:AC:17:C0:D3:D9:98:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e30aa800-c136-3cd7-8490-20b207f2c9f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.236.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:91:d8:d5:4e:37:a3:09:ee:8c:50:5d:11:62:93:6e:8d:77:
         dc:79:80:3b:21:d2:5b:d2:88:e7:5b:a3:47:8f:7d:24:0b:b4:
         b0:7a:b9:32:7f:10:35:da:77:5d:4a:8c:15:e2:52:f8:46:9d:
         30:8b:07:d6:e5:b4:af:4a:d6:ed:65:99:b4:f0:dd:06:be:05:
         b7:d5:06:a6:91:61:86:8e:e1:86:fe:d7:d1:d7:d7:de:df:5c:
         1e:eb:82:cb:b5:82:e3:f4:e7:38:43:f5:6d:06:1c:47:d4:d1:
         8b:42:64:29:3e:f7:92:2e:e3:73:35:f9:a4:cb:38:b5:2f:2f:
         bf:2f:99:53:ea:3f:af:3d:e2:53:48:ae:01:d3:fc:db:14:01:
         80:0a:57:d2:d2:a7:cc:4b:65:bf:71:30:f9:33:17:7c:a1:eb:
         ca:b7:35:45:a2:5b:66:99:3a:d5:19:99:f2:d0:83:9a:17:b0:
         78:46:1a:b3:bc:23:94:bf:b0:6a:9d:cc:d3:9b:51:45:00:38:
         88:07:af:1f:9a:0c:90:77:ac:e9:fd:e5:62:99:7e:4c:0d:b2:
         b5:e7:74:2d:2b:30:72:23:74:d6:a7:d6:4e:a5:ab:8c:d9:b2:
         9c:a4:66:06:55:7a:a4:fb:8b:de:11:4f:84:e0:4b:99:c3:63:
         a5:67:18:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 08:00:54 2025 by rpki-client