Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fd8519bc-2aff-311c-87b8-3c2ef98b7787.roa
File:                     fd8519bc-2aff-311c-87b8-3c2ef98b7787.roa (raw, json)
Hash identifier:          ggFQUzB8ZyAYXfWISyHusymKkta0jQ+K7uStS+wtHZ0=
Subject key identifier:   BC:B8:0D:80:19:70:91:1C:BC:6C:46:77:6A:16:C3:37:D1:4A:9B:8F
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584BC270F14C4E7B0FC503745C00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fd8519bc-2aff-311c-87b8-3c2ef98b7787.roa
Signing time:             Wed 05 Nov 2025 14:00:38 +0000
ROA not before:           Wed 05 Nov 2025 14:00:38 +0000
ROA not after:            Tue 03 Feb 2026 14:00:38 +0000
asID:                     577
IP address blocks:        207.164.76.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Nov 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c2:70:f1:4c:4e:7b:0f:c5:03:74:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Nov  5 14:00:38 2025 GMT
            Not After : Feb  3 14:00:38 2026 GMT
        Subject: CN=17cfae15-e187-42fc-a22c-8c3f21cbfa55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:da:07:22:84:b3:66:1c:ec:b0:77:2b:3f:eb:
                    7d:31:6c:a2:32:f8:04:af:29:0c:40:1d:52:0f:35:
                    74:19:8a:bb:f0:05:3a:05:71:d8:af:3c:9c:50:d8:
                    9f:48:61:5a:90:9d:b4:f6:23:31:f4:83:17:73:14:
                    72:8f:97:f2:d2:0f:a9:bc:01:10:c5:cd:78:57:50:
                    93:75:19:e9:dd:4b:c5:e7:c4:ec:6b:6d:9f:12:07:
                    49:84:ec:86:e6:3d:27:60:a6:6c:a0:18:c1:76:f8:
                    5e:96:84:41:68:17:58:be:d4:34:82:ca:a5:88:97:
                    33:ca:2e:d9:3a:9b:19:df:a1:b9:80:5d:f6:a0:4f:
                    43:3d:6f:54:c1:b4:58:66:c8:d2:31:35:0c:e6:34:
                    88:e3:b5:74:71:d7:ab:7b:fe:a5:ae:2d:08:a9:51:
                    db:65:f3:5e:74:96:61:6a:2b:39:7b:f1:b6:2c:bf:
                    7e:cd:f2:58:30:d0:f1:e3:92:50:0b:1e:53:8b:3d:
                    78:98:27:a0:79:6e:ee:5a:7d:33:bc:12:05:2d:52:
                    0d:7c:a0:46:51:e3:fb:bc:86:2b:76:05:2e:5c:29:
                    80:70:08:c7:ee:b2:fa:7a:fc:13:62:09:24:34:94:
                    02:87:02:cb:9b:8c:99:44:23:e1:02:ac:90:26:4a:
                    75:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:B8:0D:80:19:70:91:1C:BC:6C:46:77:6A:16:C3:37:D1:4A:9B:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fd8519bc-2aff-311c-87b8-3c2ef98b7787.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.164.76.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:8c:d4:ee:f3:4d:8f:07:8b:61:ac:12:97:53:47:38:b6:76:
         be:cd:a3:fd:74:67:24:e8:5e:74:a7:67:99:92:7e:d9:b4:fa:
         f9:50:71:ea:5b:ee:5a:0f:39:93:3d:b0:92:c9:f1:4d:2b:4c:
         ab:ed:ce:a9:59:0f:b6:90:f3:53:58:4d:51:7c:a1:39:0f:34:
         15:11:f2:0e:15:ab:61:e9:52:dc:df:40:da:e3:90:19:ec:b3:
         2e:c3:ca:0a:97:bd:8e:f4:42:53:78:90:2d:a2:c9:66:01:e8:
         e7:29:70:32:5d:b9:28:5d:ea:a6:ee:eb:13:07:fc:58:17:31:
         37:d7:31:d1:10:20:c4:a9:56:b7:2e:93:a5:22:f8:a5:7f:1d:
         06:02:92:63:5f:b2:66:33:d4:1b:68:b7:30:66:ed:0f:75:65:
         65:10:03:82:4e:2a:87:5d:b7:84:8a:4b:8b:b9:ea:ea:b0:b9:
         b8:61:fe:6f:2b:74:5d:d5:73:69:7e:1c:06:19:cc:bd:31:5a:
         ac:3f:d1:36:75:41:40:0c:6f:23:13:e7:de:a5:b2:33:b1:6a:
         e6:03:ce:d5:21:8a:cc:f3:69:26:73:ac:55:20:9d:5d:5a:a4:
         cb:07:fb:eb:75:ce:a3:57:b6:21:94:ea:4e:46:9d:b0:7d:49:
         df:86:06:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:10:26 2025 by rpki-client