Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/85f04602-815a-374a-b7b8-25f3d69f600e.roa
File:                     85f04602-815a-374a-b7b8-25f3d69f600e.roa (raw, json)
Hash identifier:          mGTV383nJwECCRgFzsJTcxIiaP4rHia6wz72Nx5MdYc=
Subject key identifier:   8C:7D:3D:9A:CB:A1:86:B3:F0:CA:5B:22:DA:C5:2F:14:90:70:10:C3
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B28C6ED9CA5059014C7A39780
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/85f04602-815a-374a-b7b8-25f3d69f600e.roa
Signing time:             Thu 11 Sep 2025 13:00:41 +0000
ROA not before:           Thu 11 Sep 2025 13:00:41 +0000
ROA not after:            Wed 10 Dec 2025 14:00:41 +0000
asID:                     19905
IP address blocks:        150.195.54.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:28:c6:ed:9c:a5:05:90:14:c7:a3:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 11 13:00:41 2025 GMT
            Not After : Dec 10 14:00:41 2025 GMT
        Subject: CN=095f1d4e-908e-416b-a17b-1d0200948dc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:21:ae:e3:03:05:8b:41:ef:87:a3:7e:9d:a4:
                    4a:db:08:15:47:3d:10:18:da:3d:1e:4f:41:7b:81:
                    58:3e:7c:44:01:11:4a:a6:72:8a:dd:09:33:37:a8:
                    8b:75:6b:53:9f:6f:69:c3:45:21:a7:67:7c:15:31:
                    b9:4a:26:08:b4:12:9a:29:6b:cc:2f:de:2c:68:80:
                    cd:22:0f:7f:9e:17:a6:6a:d9:a6:86:fa:11:98:02:
                    e8:ec:c2:51:a1:b6:ce:fd:dc:02:fb:21:78:5a:4e:
                    18:a2:be:9e:01:30:cd:69:6b:fd:a5:01:02:28:0e:
                    3f:b2:d6:90:f7:44:2c:41:53:b9:d9:1c:87:8c:90:
                    17:c5:22:2a:ba:b6:74:98:56:3d:fd:e1:59:73:73:
                    91:da:73:24:86:86:9a:03:da:2a:54:12:fb:8d:27:
                    7b:b7:d2:34:8e:26:f8:96:31:f2:96:3b:59:4a:df:
                    81:54:82:ee:3a:e3:d9:46:b1:50:76:f7:b3:5f:a2:
                    fc:de:72:62:66:d8:7d:e9:7c:c1:89:87:fe:d6:cd:
                    8b:3c:6d:8f:b5:20:1f:eb:14:f0:c5:48:31:2f:a3:
                    d4:f7:9e:92:e2:33:7b:52:0a:d7:ae:11:43:b0:d4:
                    4e:30:1d:51:72:fc:fb:69:f2:6f:79:45:56:9f:41:
                    ed:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:7D:3D:9A:CB:A1:86:B3:F0:CA:5B:22:DA:C5:2F:14:90:70:10:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/85f04602-815a-374a-b7b8-25f3d69f600e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.195.54.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:2f:d4:6b:a1:0a:11:42:c7:fc:30:00:58:a8:cf:ff:b3:55:
         51:49:78:29:bd:9c:c4:36:80:3f:08:91:1c:8e:88:c0:b1:b0:
         92:1f:57:53:dc:37:88:4f:a1:13:40:d6:20:db:bb:a6:61:5a:
         23:7e:00:ad:eb:de:fc:88:d5:4f:01:a7:ac:c6:43:9b:cf:f9:
         c8:02:32:6c:04:8a:c2:06:5c:90:70:4f:39:04:5f:62:f3:c3:
         f4:b0:48:52:98:9c:13:70:d8:81:bf:b0:31:a0:01:7c:fd:a2:
         c7:52:f1:87:81:14:93:29:39:39:eb:5e:c7:5a:4c:a4:3d:22:
         f2:fc:48:22:d5:ba:20:37:86:7b:9c:4d:fa:17:9b:64:19:ff:
         37:f6:1c:b3:3b:b3:81:94:ef:fa:6f:b7:1d:88:70:08:38:24:
         f4:b5:d1:67:f3:64:c5:f5:d9:b8:e9:6c:41:ef:2b:eb:11:5d:
         f1:71:6e:66:e8:d5:fd:4a:75:59:eb:2b:2d:66:eb:ec:c0:17:
         c3:24:85:09:69:b1:5a:c6:22:65:63:5e:9b:e4:ac:80:66:67:
         85:64:4c:00:40:03:06:e8:11:55:94:05:4f:a3:38:d2:48:15:
         42:91:86:a2:7f:f2:4e:d0:6d:cc:16:d2:39:d9:ff:f9:f1:19:
         f3:a8:98:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:50:23 2025 by rpki-client