Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1ef61aa3-636c-30e0-a899-4c8ab837bd88.roa
File:                     1ef61aa3-636c-30e0-a899-4c8ab837bd88.roa (raw, json)
Hash identifier:          s+mGRwBSsVxzVEzwyGjj/dT/WlECAjL5Gf+1pMhSWz4=
Subject key identifier:   26:66:FB:42:7F:81:85:DF:D0:5E:6B:A9:28:5D:8F:73:3B:51:EF:6E
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B6201DF1CB2CBF1A0607CE680
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1ef61aa3-636c-30e0-a899-4c8ab837bd88.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     30036
IP address blocks:        150.195.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:01:df:1c:b2:cb:f1:a0:60:7c:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=3a21c5bc-7b6a-4077-a5a1-a8b788a314ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:34:28:47:5b:84:7d:17:61:92:82:5e:79:c9:
                    ef:0e:7a:30:ab:c4:04:42:25:ae:8a:4c:67:6a:86:
                    01:25:a3:d1:c1:9f:95:ce:e6:82:c7:31:f8:5c:03:
                    1a:7d:be:2b:06:ec:73:c7:ba:9c:5a:ac:c8:82:2e:
                    57:46:27:cc:6f:0a:bf:0f:5c:ee:a1:d4:d9:9c:2d:
                    53:0b:f6:3a:02:6b:84:5a:33:1c:a8:c7:68:82:bc:
                    0f:ae:e1:56:2e:6c:2c:bf:00:16:7d:ba:42:1d:ca:
                    6d:03:ef:eb:2d:ba:99:7b:d8:45:88:25:db:cd:3c:
                    2f:2c:e7:61:33:50:cf:a8:ba:dc:26:a6:53:f1:95:
                    a1:0b:cd:72:9e:56:91:16:8a:f8:66:a4:61:15:5c:
                    64:68:58:50:9f:33:b3:41:28:5f:76:f5:9e:42:de:
                    41:a9:6a:ae:ce:ef:a3:86:4d:cc:98:b6:d8:fa:8a:
                    d0:a1:e3:f4:d5:d5:0d:5e:08:b7:7f:c7:f6:af:6c:
                    03:e0:e5:19:1c:3a:e6:4b:76:2b:e9:29:03:ec:b6:
                    8d:df:fc:9e:2f:b2:62:b9:ff:0e:79:ce:37:51:69:
                    2e:dc:10:dd:45:d7:07:59:6d:ad:31:26:6a:06:30:
                    40:11:a2:21:3c:81:bd:e3:89:7a:e7:f2:4f:7a:1c:
                    9d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:66:FB:42:7F:81:85:DF:D0:5E:6B:A9:28:5D:8F:73:3B:51:EF:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1ef61aa3-636c-30e0-a899-4c8ab837bd88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.195.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:44:a5:54:af:ee:49:94:96:e7:af:ea:0b:71:98:c4:0e:30:
         e4:8e:5f:f4:29:9a:ad:74:5e:63:bb:9a:3e:36:5c:cc:55:76:
         82:4b:b7:f5:79:ac:c9:20:78:f2:15:de:c2:e4:80:d7:26:c9:
         d8:f4:39:4b:62:1d:1e:76:74:c5:b8:cc:8c:e2:fa:20:34:a4:
         df:95:b4:27:69:ba:bb:8d:30:51:38:bd:34:94:a4:bf:6f:6d:
         95:5c:1f:64:d4:0f:20:e3:dd:12:64:c1:e5:81:52:97:70:cd:
         b9:23:c5:79:b2:ae:72:14:8d:37:d5:76:02:6e:7d:8f:e3:bf:
         3e:c8:df:5b:ba:c5:ab:45:2b:9a:f4:89:3d:bd:4f:6d:8e:97:
         d4:78:41:01:68:4c:c4:e2:41:71:c1:f6:41:14:44:6f:93:58:
         72:7f:04:ec:51:1b:d0:cc:a2:aa:06:cb:7e:95:b4:9b:67:e7:
         c2:3e:47:6f:1b:9e:0c:11:19:0b:14:73:3b:5c:46:ad:8a:2f:
         ae:e2:e4:76:6f:0d:c8:44:0e:fe:c6:8c:a5:4b:8a:1f:2c:39:
         51:66:e7:e3:bc:c4:70:06:b1:3c:89:c0:39:03:81:0a:b8:d6:
         da:44:01:1e:5a:71:8d:08:dc:01:1f:8c:d0:92:1b:18:66:d9:
         d5:19:38:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:58:48 2025 by rpki-client