Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/35762975-bc5e-3dc5-939e-7c47c2c3a5bc.roa
File:                     35762975-bc5e-3dc5-939e-7c47c2c3a5bc.roa (raw, json)
Hash identifier:          kgxdWCKjLROEK8Au9lYF9a5uDd7g0Y4TtIOK4PmF9s4=
Subject key identifier:   4B:46:71:51:EA:A3:45:5D:A8:AB:A7:80:B6:05:BC:23:B0:1E:7D:4C
Certificate issuer:       /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
Certificate serial:       010D0C9F4328584B0746C17311586813DBE1A500
Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/35762975-bc5e-3dc5-939e-7c47c2c3a5bc.roa
Signing time:             Sat 30 Aug 2025 13:00:42 +0000
ROA not before:           Sat 30 Aug 2025 13:00:42 +0000
ROA not after:            Fri 28 Nov 2025 14:00:42 +0000
asID:                     203724
IP address blocks:        208.65.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:07:46:c1:73:11:58:68:13:db:e1:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
        Validity
            Not Before: Aug 30 13:00:42 2025 GMT
            Not After : Nov 28 14:00:42 2025 GMT
        Subject: CN=71b8b916-0fd6-499d-931b-c97c2619a2e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:81:10:f9:f5:b7:b5:ea:6e:41:59:83:34:15:
                    42:3b:18:e1:7e:c0:77:b9:db:aa:75:53:f7:c8:ea:
                    cf:23:1d:b2:1b:a5:c5:f4:79:98:22:c4:85:fb:fe:
                    ef:73:34:33:3b:54:e0:bb:2d:ba:ac:3b:4c:6d:05:
                    46:8c:39:6c:46:87:41:81:2d:ce:7f:62:62:83:00:
                    52:f0:7a:4f:7c:3b:ed:0a:29:5c:f3:cc:d3:8e:59:
                    ef:b7:11:7a:79:5c:00:20:38:f5:fe:f5:c8:f5:c0:
                    67:a0:8d:67:26:eb:93:2b:41:59:66:0b:2d:14:68:
                    39:7e:9b:93:1d:cd:2c:cc:40:d3:1e:ee:4c:5d:c0:
                    f8:4e:aa:56:5e:5d:47:cc:98:e8:92:35:26:c3:a3:
                    77:37:2c:e9:33:44:f3:a2:c1:6a:6f:c0:70:6f:96:
                    1b:8c:03:cf:8a:96:69:a7:d1:ec:b5:08:d0:e4:e7:
                    50:f8:41:34:64:6b:04:c4:98:72:26:fa:11:54:c9:
                    69:54:75:94:dc:40:39:44:64:1c:18:a8:5a:7e:d0:
                    cc:fb:cc:77:dd:bc:f2:9b:7d:21:b0:9e:2d:5c:e9:
                    4e:25:b8:1c:c3:48:f4:68:26:62:fb:c0:67:41:9b:
                    d3:5c:5c:ba:38:e8:31:61:eb:25:f2:94:59:cb:1b:
                    ba:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:46:71:51:EA:A3:45:5D:A8:AB:A7:80:B6:05:BC:23:B0:1E:7D:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/35762975-bc5e-3dc5-939e-7c47c2c3a5bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl

            X509v3 Authority Key Identifier:
                keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.65.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:d3:51:60:30:6a:3e:aa:15:0a:46:ae:bb:2a:7a:2f:8f:43:
         82:0a:0a:7d:79:fe:40:54:18:2b:e5:56:17:7d:e7:54:9b:b8:
         4f:b5:36:6e:1a:d4:46:0b:13:ce:27:d6:80:ff:77:bf:80:5e:
         a4:4a:3c:9a:c2:9b:94:6b:08:66:43:34:81:85:c6:8b:a3:f5:
         b7:f4:fe:bc:31:ad:f8:be:53:54:6d:cf:26:fd:72:0c:7f:fb:
         53:36:6a:bd:d2:4b:1e:fe:b0:5e:34:34:7a:5b:a3:81:1b:6a:
         6c:cc:4d:35:6b:ca:0d:81:d5:4f:06:b4:21:0d:e2:4c:e7:50:
         68:8c:d0:75:5c:2f:dd:49:af:64:6b:cc:f6:0a:c8:0e:89:7c:
         ab:09:28:4e:35:bf:dd:11:71:10:1c:b1:59:d5:3a:05:bd:8c:
         c2:e2:fa:50:42:bf:e8:50:e5:b3:06:97:84:9f:5b:9e:ae:d9:
         ef:13:f5:6a:58:bd:60:82:e4:e5:60:bd:ad:11:5c:60:90:67:
         ee:eb:61:9c:16:4d:85:0d:7f:11:67:25:9f:3e:ac:88:70:28:
         dd:0b:a6:29:0e:95:b2:f6:10:c2:35:4f:03:5f:25:ec:65:26:
         37:4f:1e:04:4e:3c:68:7f:cf:9a:1f:fb:5f:43:d5:5e:ee:4d:
         68:01:72:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:30:31 2025 by rpki-client