Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/08701de5-6e7f-35ea-94a1-468c45f69919.roa
File:                     08701de5-6e7f-35ea-94a1-468c45f69919.roa (raw, json)
Hash identifier:          oliMTzYxH+3NDGfKfr0qubI91LBcGwy59w0Emv1HJl8=
Subject key identifier:   25:9C:23:13:7E:3D:1A:48:C8:E8:B8:83:FA:4C:B0:65:EA:A7:69:F6
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B64CC843807ACC2A919DD53C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/08701de5-6e7f-35ea-94a1-468c45f69919.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        150.195.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:84:38:07:ac:c2:a9:19:dd:53:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=603c2efc-a140-48e8-9159-54b340d02190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:de:53:a5:2f:7c:ba:ac:21:cc:88:c4:07:e3:
                    4b:94:ea:5c:0f:18:04:61:9b:41:33:f6:44:d6:4e:
                    cb:f2:cb:b7:5f:d9:39:ed:8c:fb:3d:dd:15:da:c1:
                    9c:48:75:af:d3:07:03:6f:08:7b:36:3c:04:1d:fc:
                    40:d7:78:2a:60:e2:df:49:0a:9b:0c:32:14:20:47:
                    4a:7e:6e:de:b7:62:79:1c:3d:30:a7:38:7d:cd:55:
                    32:87:91:0a:0e:f7:1c:09:bb:f7:ff:d2:0c:53:68:
                    dc:2a:1a:3d:b3:2c:1c:41:b3:79:4a:0d:be:9b:11:
                    c2:a9:cb:6d:21:db:92:5f:1c:62:5a:f8:b6:b9:9d:
                    0d:a0:9a:57:3f:5a:19:79:a7:d5:08:98:4f:b0:38:
                    6c:14:ba:24:9f:06:7d:d5:d9:c6:55:b6:0e:a5:20:
                    cb:e4:b4:fb:26:a5:68:d3:4d:a5:e9:db:0f:55:78:
                    49:e5:93:b5:04:58:38:cd:6e:ae:6a:24:c9:d0:47:
                    55:7b:80:88:20:84:24:7d:93:5a:28:21:88:90:8b:
                    61:a1:ac:28:41:19:c9:7f:c0:ce:67:bf:d4:29:29:
                    de:91:bb:27:cb:fa:13:ad:b2:e2:86:d5:ae:97:18:
                    42:12:fd:32:ca:fd:e5:53:1d:2e:8b:e6:2f:df:6e:
                    60:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:9C:23:13:7E:3D:1A:48:C8:E8:B8:83:FA:4C:B0:65:EA:A7:69:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/08701de5-6e7f-35ea-94a1-468c45f69919.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.195.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:a8:5a:d1:25:4a:72:cf:d0:e3:95:f3:72:99:e7:85:b9:c0:
         9b:f2:4d:ab:96:bc:bd:b5:48:dc:d0:80:57:8c:eb:ad:88:b8:
         cc:75:f3:32:9b:ae:99:c6:c9:e6:7e:c9:f0:d1:1c:d1:5f:9d:
         00:a4:ff:73:36:c9:d2:9f:01:e8:7a:cc:00:6d:88:da:df:a8:
         d5:88:c6:cf:69:07:66:1a:a9:91:3d:6e:36:a0:25:a7:19:96:
         dd:1c:b7:1c:68:da:bb:96:cd:15:ab:a5:4c:70:e4:a3:c8:c2:
         e2:a8:f3:8c:4f:7c:5b:6a:0f:92:b4:9a:69:ff:03:ce:9d:1c:
         a2:d1:18:93:43:ec:b2:98:fa:b6:7d:49:b6:c7:72:b3:6c:e4:
         b6:d2:a7:23:d6:81:b4:5c:02:7b:df:33:4e:df:fc:92:57:2c:
         01:2d:b6:eb:d5:8e:b0:b2:a7:8d:f1:1a:0a:e3:1a:af:dc:df:
         2d:3a:43:81:cc:09:c2:6c:11:c9:a6:80:a8:12:22:49:e4:e9:
         81:9e:d4:5c:a7:23:f9:46:30:1d:1f:39:f6:68:11:38:aa:82:
         89:23:0e:c4:4f:00:f4:2b:b3:9f:39:e7:1c:56:86:a9:09:86:
         a5:15:33:ed:b0:9c:80:ab:9d:e3:17:9d:66:65:46:3f:19:b7:
         44:69:7a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:53:51 2025 by rpki-client