Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f44de4f5-78e4-42af-acca-8050ea182ff6/466363da-85c6-33b0-a242-29c0c15e7a21.roa
File:                     466363da-85c6-33b0-a242-29c0c15e7a21.roa (raw, json)
Hash identifier:          DvAhgYv8ACDc3OhQD1FkSG0zuOL6B24HQCDjWh017CE=
Subject key identifier:   5B:2E:3E:CC:02:F4:F4:91:B0:4B:53:63:DF:90:FC:0E:21:7D:BC:83
Certificate issuer:       /CN=f44de4f5-78e4-42af-acca-8050ea182ff6
Certificate serial:       010D0C9F4328584B004BDFB14E7374F7E8155A50
Authority key identifier: 09:24:28:80:A8:0E:AE:18:3F:45:BC:C7:3B:A7:F7:46:52:DD:E6:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f44de4f5-78e4-42af-acca-8050ea182ff6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f44de4f5-78e4-42af-acca-8050ea182ff6/466363da-85c6-33b0-a242-29c0c15e7a21.roa
Signing time:             Thu 28 Aug 2025 01:00:33 +0000
ROA not before:           Thu 28 Aug 2025 01:00:33 +0000
ROA not after:            Wed 26 Nov 2025 02:00:33 +0000
asID:                     30036
IP address blocks:        199.120.150.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f44de4f5-78e4-42af-acca-8050ea182ff6/f44de4f5-78e4-42af-acca-8050ea182ff6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f44de4f5-78e4-42af-acca-8050ea182ff6/f44de4f5-78e4-42af-acca-8050ea182ff6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f44de4f5-78e4-42af-acca-8050ea182ff6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:4b:df:b1:4e:73:74:f7:e8:15:5a:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44de4f5-78e4-42af-acca-8050ea182ff6
        Validity
            Not Before: Aug 28 01:00:33 2025 GMT
            Not After : Nov 26 02:00:33 2025 GMT
        Subject: CN=0ef629da-984a-44df-b448-bc5b912902bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a7:f1:99:6a:e4:bd:fb:2e:8a:14:18:22:92:
                    10:a5:c4:36:27:f8:58:84:68:a4:f1:65:08:a7:47:
                    6c:1e:60:38:a8:6b:1c:bd:b6:19:ad:d7:4f:b3:32:
                    2a:a4:40:b9:f1:c2:41:3d:32:bc:ec:e8:6b:d6:3e:
                    65:f5:91:34:48:65:84:13:82:31:98:60:c3:aa:d0:
                    c5:23:c4:20:2d:2d:94:88:66:58:29:fa:7f:95:78:
                    10:fe:2f:77:71:d8:d3:7d:86:fd:90:87:10:46:08:
                    eb:6f:08:a9:ff:1b:ab:2f:fd:8f:d2:80:eb:13:ec:
                    80:67:cd:75:c5:64:ee:e3:ce:bc:81:07:fc:01:d0:
                    b3:1f:68:48:ea:1e:f1:5b:92:42:6f:70:2e:23:81:
                    b2:02:75:4d:15:b4:03:1e:ea:ca:9d:7b:19:2b:28:
                    14:21:a1:38:34:41:7b:5d:94:78:9b:b5:72:53:62:
                    70:5c:83:1f:52:69:a4:42:f7:a2:ed:6e:43:a7:3d:
                    b0:86:76:d0:ae:81:0c:47:c6:91:63:82:06:ea:8a:
                    35:21:aa:d7:ce:59:c9:cd:55:c8:84:51:1c:1d:e5:
                    67:6f:01:2a:2e:c1:90:05:71:85:da:54:9c:64:1f:
                    f3:cc:fe:a8:50:8c:70:56:6a:8b:a2:7c:35:28:6c:
                    ed:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:2E:3E:CC:02:F4:F4:91:B0:4B:53:63:DF:90:FC:0E:21:7D:BC:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f44de4f5-78e4-42af-acca-8050ea182ff6/466363da-85c6-33b0-a242-29c0c15e7a21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f44de4f5-78e4-42af-acca-8050ea182ff6/f44de4f5-78e4-42af-acca-8050ea182ff6.crl

            X509v3 Authority Key Identifier:
                keyid:09:24:28:80:A8:0E:AE:18:3F:45:BC:C7:3B:A7:F7:46:52:DD:E6:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f44de4f5-78e4-42af-acca-8050ea182ff6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.120.150.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:03:45:ef:bf:65:ba:1b:ab:ba:e3:b9:48:78:29:f0:a8:f0:
         d8:f9:ae:e5:52:ca:be:2f:68:ba:d5:ec:ef:0b:dd:a8:62:de:
         b1:9e:88:a6:21:df:7f:98:f5:21:d9:a9:82:00:fe:a7:bd:48:
         b5:f2:ca:4d:54:b1:ac:29:b2:46:dd:23:41:a9:09:ae:a4:44:
         3e:23:66:14:30:b3:b6:79:f4:5b:ef:82:d9:fb:d0:77:f5:2e:
         3d:f2:a9:b2:bf:96:ac:9c:b0:81:76:e3:cf:ec:4b:a5:31:d8:
         11:75:6f:b4:bc:58:94:99:75:4c:a9:2a:8c:8f:fd:20:20:5b:
         17:24:40:7a:0a:65:87:c2:84:35:30:5e:37:43:40:74:0c:02:
         95:3f:ae:fe:3c:28:84:b6:04:b9:cf:4d:5f:4d:87:58:05:f3:
         fd:6b:66:c7:59:0f:76:4d:0c:a3:85:14:b0:c0:83:ba:c0:66:
         18:f5:91:b1:c1:03:30:ac:46:a0:b0:8a:9b:ea:d7:c9:03:a2:
         42:c7:cf:cd:d4:de:ca:ee:24:1a:67:95:b9:24:4d:9a:83:66:
         b6:d7:e4:da:6e:63:60:03:e7:51:c4:ce:4e:b3:08:77:c2:c6:
         90:ba:83:4f:06:e6:96:42:c0:6e:65:f9:43:3a:36:10:c7:5f:
         42:75:a7:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 10:03:46 2025 by rpki-client