Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63fffcba-054d-4823-8758-62bf6dab2ffa/bb784c6d-5d3c-3157-b5e7-1813958b46ce.roa
File:                     bb784c6d-5d3c-3157-b5e7-1813958b46ce.roa (raw, json)
Hash identifier:          vf78SBV/CzhmHIF1RQaypUGlffk8kqzyFniv3j/LUkw=
Subject key identifier:   E8:CD:50:86:B1:63:FF:50:0C:66:D9:8E:98:8A:69:BE:9E:53:37:38
Certificate issuer:       /CN=63fffcba-054d-4823-8758-62bf6dab2ffa
Certificate serial:       010D0C9F4328584A7085F6C8C480E2CF82332D00
Authority key identifier: 83:F7:70:45:78:5B:74:58:27:04:FC:3A:06:BB:7D:99:F4:1A:DE:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63fffcba-054d-4823-8758-62bf6dab2ffa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63fffcba-054d-4823-8758-62bf6dab2ffa/bb784c6d-5d3c-3157-b5e7-1813958b46ce.roa
Signing time:             Mon 07 Jul 2025 13:01:05 +0000
ROA not before:           Mon 07 Jul 2025 13:01:05 +0000
ROA not after:            Sun 05 Oct 2025 13:01:05 +0000
asID:                     394094
IP address blocks:        199.188.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63fffcba-054d-4823-8758-62bf6dab2ffa/63fffcba-054d-4823-8758-62bf6dab2ffa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63fffcba-054d-4823-8758-62bf6dab2ffa/63fffcba-054d-4823-8758-62bf6dab2ffa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63fffcba-054d-4823-8758-62bf6dab2ffa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:70:85:f6:c8:c4:80:e2:cf:82:33:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63fffcba-054d-4823-8758-62bf6dab2ffa
        Validity
            Not Before: Jul  7 13:01:05 2025 GMT
            Not After : Oct  5 13:01:05 2025 GMT
        Subject: CN=882718b1-2633-4d65-bad6-851df9742d51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:5b:16:d9:00:5e:bb:01:cc:06:d6:1c:17:18:
                    de:b1:64:8d:c4:91:52:47:2e:f0:85:7c:62:3f:34:
                    a9:ae:0a:8f:32:df:18:e7:4b:fc:15:a4:29:c5:4f:
                    32:f2:2e:99:88:93:34:3d:1f:8c:e7:d0:50:d0:94:
                    60:41:67:af:66:af:9f:e6:68:84:99:b0:d9:f4:4a:
                    ae:7f:7f:89:b2:12:6b:21:14:5f:bd:e4:91:e0:62:
                    b5:e1:20:d6:23:c8:7c:7b:a1:57:b2:e2:cc:dd:8f:
                    9b:81:7e:a3:e3:b0:24:f0:fd:a7:24:f9:81:be:1e:
                    03:21:65:b4:36:c3:b6:5c:01:35:32:61:3b:50:f1:
                    82:79:a6:60:79:ac:1b:bf:5b:a0:9a:1c:e4:cb:01:
                    65:fa:10:a4:3a:83:0e:b9:8a:07:13:26:b8:17:ff:
                    ab:d9:50:8d:b7:b2:28:5e:34:88:b6:5e:69:e4:30:
                    37:6b:af:82:f8:88:29:78:65:38:4b:7c:98:e3:b4:
                    ad:59:1e:08:ce:88:ba:94:63:09:cd:87:20:ed:91:
                    d4:e5:08:88:ac:2c:d0:4f:9e:91:f4:57:a8:db:13:
                    cf:4d:aa:0b:07:d5:da:0f:4e:52:8f:b1:7b:19:b4:
                    70:6c:a1:90:61:50:90:64:93:01:47:6c:1b:4d:e3:
                    f0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:CD:50:86:B1:63:FF:50:0C:66:D9:8E:98:8A:69:BE:9E:53:37:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63fffcba-054d-4823-8758-62bf6dab2ffa/bb784c6d-5d3c-3157-b5e7-1813958b46ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63fffcba-054d-4823-8758-62bf6dab2ffa/63fffcba-054d-4823-8758-62bf6dab2ffa.crl

            X509v3 Authority Key Identifier:
                keyid:83:F7:70:45:78:5B:74:58:27:04:FC:3A:06:BB:7D:99:F4:1A:DE:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63fffcba-054d-4823-8758-62bf6dab2ffa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.188.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:3a:00:a2:1f:dd:ff:32:07:85:1e:3e:fb:f5:d9:37:4d:57:
         7f:b2:c2:51:16:22:38:5d:67:b9:54:61:d9:a8:e6:10:3f:76:
         93:6f:bd:81:1f:a3:56:48:b0:3f:6b:6a:f8:cc:61:3c:a8:db:
         72:7c:6e:11:14:df:d7:ff:f0:a6:c1:14:94:7b:ce:7b:48:a3:
         dd:7c:0a:0a:f8:c7:43:34:27:d9:88:b7:6c:20:44:87:4d:00:
         82:52:65:82:c3:c9:92:39:4a:0d:38:ff:0d:b9:38:29:92:03:
         77:eb:8d:d1:37:aa:f7:8a:de:03:f6:79:7f:dc:ec:6f:9b:7b:
         09:f1:3a:0a:b9:4e:48:89:30:76:25:c0:2d:a2:fa:6e:96:6f:
         4e:1f:bf:4a:f1:1a:5a:24:6c:a3:c1:1a:92:7a:35:ed:b6:ef:
         b3:3c:41:69:70:42:00:3e:78:24:9c:bf:cb:99:6a:f7:6d:26:
         0e:8a:c4:eb:24:89:65:aa:ae:09:b4:86:cc:5f:ae:da:75:c7:
         72:4b:90:43:43:42:60:a1:45:86:8c:11:a3:1c:6e:e4:ec:19:
         ce:b5:22:c7:b1:36:3f:93:f7:41:9b:57:ff:da:ee:91:3d:7f:
         26:f8:26:5d:ea:ea:54:0b:65:53:b7:06:cc:05:a5:3e:33:9e:
         b0:7d:ff:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:28:16 2025 by rpki-client