Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fd52c6ce-4e3e-33f2-9036-0a0dc55cfa92.roa
File:                     fd52c6ce-4e3e-33f2-9036-0a0dc55cfa92.roa (raw, json)
Hash identifier:          izQlFfzYUMtnqXpouZYCwLhoBs5dOiMvPNOyKumHUfE=
Subject key identifier:   00:20:3A:78:75:77:2A:85:FA:A7:65:AF:61:67:4B:60:36:F3:D7:93
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DAAE2920F50AF53A2960F0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fd52c6ce-4e3e-33f2-9036-0a0dc55cfa92.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     30336
IP address blocks:        207.236.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:ae:29:20:f5:0a:f5:3a:29:60:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=92acb21d-7297-433c-8f64-c35e06a886e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:50:4c:80:52:17:e7:70:b0:11:f6:50:fc:43:
                    20:a2:d6:d1:5d:6b:2c:21:13:9d:7f:26:6d:a5:2a:
                    5c:61:00:01:c5:88:d2:a6:94:5d:96:a7:f3:a0:b2:
                    45:85:ab:60:80:85:1b:5f:8a:21:18:fc:08:58:66:
                    b1:7d:3f:68:0c:13:9c:bc:fe:3c:8a:c8:90:4f:92:
                    97:aa:aa:98:9b:fa:d9:b8:91:dc:c5:b9:6c:c3:ef:
                    e0:b0:2e:a6:45:dd:e0:fe:29:dd:5a:2f:b6:5a:3b:
                    51:a8:ff:32:4c:1a:d7:54:06:66:17:4a:f3:7d:29:
                    38:f1:63:f3:04:f4:20:d5:d5:74:48:f7:5d:fb:29:
                    67:fe:c1:2f:9f:d3:dc:73:e2:e2:ca:56:d3:b7:cc:
                    78:89:87:04:83:d1:f5:3f:3d:0a:93:55:fa:23:7d:
                    af:70:5e:12:82:f9:b8:c4:ab:7c:1c:17:16:69:c6:
                    9f:34:78:f8:67:11:54:07:22:72:4a:5b:6b:43:b4:
                    e8:8f:b0:c5:25:63:40:77:92:d9:d6:ac:a5:0a:42:
                    7b:25:73:36:55:25:a6:61:9f:e0:90:20:c0:25:36:
                    aa:3f:2e:15:f9:2e:f6:bb:fe:95:29:35:59:27:b6:
                    30:6b:be:a8:3e:04:6e:59:6a:e3:35:17:68:15:27:
                    bf:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:20:3A:78:75:77:2A:85:FA:A7:65:AF:61:67:4B:60:36:F3:D7:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fd52c6ce-4e3e-33f2-9036-0a0dc55cfa92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.236.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:e8:27:8e:45:8c:45:07:00:9b:06:f2:49:c8:7a:c2:54:f7:
         a1:af:7f:24:f0:51:2f:d7:14:d2:03:eb:9d:90:c5:c0:a5:14:
         01:c7:33:fd:23:cb:38:7e:23:53:d2:47:67:ff:fe:34:68:ce:
         df:73:49:11:c9:34:fb:21:21:13:70:1b:f2:ed:a3:f8:62:77:
         92:ad:50:b5:e2:e8:04:aa:ef:df:bc:5e:d9:2b:67:2b:de:ab:
         c0:8e:ab:a1:10:97:fe:9f:3d:67:95:b8:13:d8:93:22:a0:c2:
         03:89:47:7e:9f:a0:46:53:53:0b:7b:ba:0f:1a:74:5f:ff:d0:
         e7:1b:14:58:0b:58:fe:87:44:d3:4d:f2:8f:bd:db:63:aa:ea:
         70:a0:ad:d5:c8:c4:81:d9:28:55:29:47:a5:53:88:b0:66:40:
         dc:c1:ef:f5:67:fc:03:7f:69:fc:60:f0:44:2f:42:29:1c:1e:
         06:92:ea:62:55:3a:91:0d:76:00:ea:d4:4d:f6:8b:1e:01:d4:
         79:0c:97:9d:1b:f7:11:5b:65:48:4c:cf:56:40:3f:0f:cd:6e:
         04:72:44:7b:cb:6a:8e:ea:d4:2b:48:8d:a0:6c:5b:c8:e1:17:
         e4:ec:6d:84:a5:38:80:47:03:db:2e:35:88:5e:2f:e2:33:90:
         3d:8c:77:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:41:02 2025 by rpki-client