Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5c29a3bb-1344-310e-ae45-7769cf39332c.roa
File:                     5c29a3bb-1344-310e-ae45-7769cf39332c.roa (raw, json)
Hash identifier:          ojBsnE5gZsSFHgpIpblfloaM0ovaS0KWIn5MJr7rUbI=
Subject key identifier:   99:0F:95:EB:AF:DB:C2:ED:4A:BA:62:D1:58:12:C3:8D:7A:06:9A:EE
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B61735A045B1120554C854E00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5c29a3bb-1344-310e-ae45-7769cf39332c.roa
Signing time:             Wed 01 Oct 2025 20:13:32 +0000
ROA not before:           Wed 01 Oct 2025 20:13:32 +0000
ROA not after:            Tue 30 Dec 2025 21:13:32 +0000
asID:                     19905
IP address blocks:        150.195.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:61:73:5a:04:5b:11:20:55:4c:85:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  1 20:13:32 2025 GMT
            Not After : Dec 30 21:13:32 2025 GMT
        Subject: CN=3313fb1e-28f8-44f4-8b7c-8482da1c5397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ff:30:4e:5f:9e:c3:e6:81:bd:66:5b:1c:75:
                    8f:db:37:8c:59:76:21:c7:d9:1f:20:04:98:29:9a:
                    fc:5b:d0:77:e4:39:aa:d2:99:e5:a3:f5:9a:37:c4:
                    7f:0c:be:ba:6d:bb:7e:5c:b4:00:04:74:a7:6d:fc:
                    2e:32:52:99:82:a2:8e:ea:7c:a4:5d:64:d6:b6:92:
                    14:de:80:79:29:47:1d:22:e2:92:14:ca:98:fd:64:
                    60:a5:43:fc:ef:5d:35:83:50:6f:7b:46:81:15:5b:
                    7c:ab:30:d7:33:27:de:8d:eb:a0:99:49:10:4c:21:
                    7e:28:2c:18:53:e9:08:31:16:20:9c:1d:e3:a4:44:
                    c1:ba:5d:3b:19:fa:48:fc:14:24:c7:74:db:f5:95:
                    e6:a4:17:89:a5:8c:de:3d:d2:fa:17:b0:37:8a:06:
                    3a:cb:d8:b8:13:4a:fb:66:bf:54:04:12:7f:c6:c6:
                    78:84:ed:f0:90:0e:f7:42:37:3b:d8:6e:a5:08:43:
                    78:9c:ee:70:69:7e:6d:53:bf:da:cb:76:19:4f:f0:
                    55:d4:e1:51:8c:9b:de:49:29:2a:78:80:80:c9:f7:
                    3d:a9:b2:0b:68:35:ba:ef:50:45:f9:33:5e:2e:92:
                    d4:84:ec:c3:8b:2e:47:af:59:9c:aa:bf:17:25:34:
                    90:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:0F:95:EB:AF:DB:C2:ED:4A:BA:62:D1:58:12:C3:8D:7A:06:9A:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5c29a3bb-1344-310e-ae45-7769cf39332c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.195.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:35:2d:21:40:d3:fc:a9:7c:33:01:6f:97:f4:34:2e:4b:1a:
         b7:ec:7b:4e:29:96:44:ee:d6:83:10:d1:1d:91:5f:60:15:0c:
         de:a3:6a:43:e5:18:c8:85:2f:d5:a9:07:e0:70:72:a4:4d:91:
         ec:c7:9f:72:86:7e:20:6f:4e:e7:ef:bf:2c:bf:b7:0c:63:21:
         4a:77:f1:6b:57:be:5b:57:2b:0b:23:bc:71:fd:37:2d:ed:9b:
         f7:c8:35:24:41:9f:1d:df:6a:f0:f0:18:a4:c0:a7:23:00:f2:
         3b:cd:51:ae:18:b6:e4:70:65:fe:9e:7c:86:eb:b3:5f:94:3f:
         a2:03:66:4a:bb:30:55:2b:c4:7c:d0:dd:b8:e0:c5:df:b6:40:
         19:cc:91:85:b8:80:32:9e:89:96:d2:89:8d:69:69:12:3d:0d:
         92:e5:8b:74:4a:52:bf:d9:94:52:a6:d9:4a:42:99:61:ba:80:
         0c:f8:f3:ba:58:a7:66:dc:f8:51:03:24:f1:ec:de:4f:36:96:
         78:d2:68:0d:9a:10:b3:7c:02:8f:21:9f:ce:26:f9:cc:1e:99:
         cf:39:fa:ed:73:83:68:e8:53:fe:df:f7:a4:84:ed:82:6b:df:
         e1:3c:22:32:b3:f9:81:94:91:ee:cf:36:fd:28:a4:ea:a4:41:
         8c:af:51:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 03:00:07 2025 by rpki-client