Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/b0d4a783-aede-347d-a376-96810f016fda.roa
File:                     b0d4a783-aede-347d-a376-96810f016fda.roa (raw, json)
Hash identifier:          /C+Pkr3wgksUndOIW75fGPs6GFFSnkQCOq+CTTH8+aw=
Subject key identifier:   F6:40:AD:B8:54:39:5A:7D:AB:40:52:0D:24:94:A4:7A:86:47:17:CF
Certificate issuer:       /CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78
Certificate serial:       010D0C9F4328584B1F016AF4B03131E79D219B20
Authority key identifier: A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/b0d4a783-aede-347d-a376-96810f016fda.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     19551
IP address blocks:        107.154.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:6a:f4:b0:31:31:e7:9d:21:9b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=3020abc9-7ad6-49a9-96e0-b6eb24d2af08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:2f:59:fa:3f:13:74:15:f9:b1:01:8d:76:b1:
                    7f:94:94:d3:07:c3:0d:03:a8:6a:1b:aa:62:03:b9:
                    31:ca:fb:8b:60:15:a5:d1:8b:69:f5:8b:4b:f2:6e:
                    7a:c1:a1:a2:c7:09:e7:0a:d2:81:60:06:11:5e:a3:
                    e7:9e:52:f3:f8:5d:56:21:17:d1:cc:2c:2f:5d:db:
                    21:03:93:46:f1:02:24:4b:4d:45:ce:56:72:f9:5c:
                    c5:e1:c4:4b:d1:61:bb:22:66:9b:b9:1f:3d:61:4e:
                    fa:57:89:f5:70:9d:07:57:94:46:18:9d:25:a1:89:
                    3d:00:0c:7e:02:65:12:46:01:8e:d6:62:31:2d:1e:
                    cd:9e:03:4d:6c:1d:4e:d3:7a:d9:88:ff:cb:46:14:
                    52:c7:85:5d:80:f0:80:23:66:6b:ae:cf:8f:10:ed:
                    54:0c:21:6e:f1:e9:5d:78:0c:f9:63:cc:37:6b:d3:
                    ef:1c:d1:58:79:37:48:6b:48:17:ed:bb:c0:b9:fb:
                    3d:b9:77:8d:9c:cf:c7:e8:48:b3:22:7e:8c:68:bf:
                    56:93:3f:2f:d1:9f:d9:be:74:df:94:27:86:a2:ae:
                    ec:92:92:2f:e6:f7:7a:d1:22:7c:20:2a:d6:f2:87:
                    63:6f:1c:ea:54:66:3e:b4:ab:07:82:ee:c5:8c:24:
                    23:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:40:AD:B8:54:39:5A:7D:AB:40:52:0D:24:94:A4:7A:86:47:17:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/b0d4a783-aede-347d-a376-96810f016fda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.crl

            X509v3 Authority Key Identifier:
                keyid:A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.154.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:e8:5e:d8:33:8f:d0:5c:41:cd:c8:10:4d:a0:39:32:ff:11:
         cd:36:3c:62:56:0b:11:85:5b:cf:5b:bb:88:6f:34:f0:31:d1:
         e4:da:b8:b3:93:5e:56:7e:51:cd:58:77:2d:9e:cf:fa:b0:2b:
         0e:77:14:dc:71:b6:d9:e8:7f:33:0f:16:71:e2:9c:81:d7:55:
         d6:13:63:15:c1:c4:e0:e8:77:a3:68:51:98:c1:72:33:ed:9d:
         9d:83:6f:d5:eb:cb:21:af:89:dc:48:bb:6e:e0:a6:2b:73:58:
         b3:4a:6d:6d:98:9e:74:8e:6a:01:7f:95:7b:a5:09:c5:31:6b:
         86:8a:f4:2c:55:b2:6f:73:6b:f3:a3:8b:8f:83:08:5d:81:47:
         bd:a8:81:ef:6b:a1:a6:92:17:71:a7:c2:99:91:29:9d:ed:af:
         5b:b4:aa:0f:94:7d:bf:29:50:fc:79:2f:0d:ad:37:f9:4c:47:
         c6:f6:32:e9:00:e2:63:4f:b9:0f:2a:ae:2d:c1:47:1a:a4:6c:
         88:af:69:96:fc:52:e0:90:90:60:fb:fc:7d:69:07:b9:61:0f:
         89:fe:49:72:0e:66:ac:a8:9e:28:91:db:3c:06:8d:ca:11:b7:
         7d:f7:c0:6b:ba:f1:31:15:ed:dc:82:5f:d8:15:f6:cb:0b:53:
         57:3d:2a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:35:56 2025 by rpki-client