Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/779a63bf-08f6-3f6f-bed1-9894398f6634.roa
File:                     779a63bf-08f6-3f6f-bed1-9894398f6634.roa (raw, json)
Hash identifier:          Fhs/yMGI8nKZBTDuoIdFcmeOygCJpbVwVpR1K8IyMHI=
Subject key identifier:   50:44:D8:6A:88:3E:40:7C:C2:09:08:08:E9:DE:2E:3D:52:5A:79:8E
Certificate issuer:       /CN=d6d708e8-5964-4587-8db1-e22545ec38a3
Certificate serial:       010D0C9F4328584B127166AAB8D1BD493328AA40
Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/779a63bf-08f6-3f6f-bed1-9894398f6634.roa
Signing time:             Wed 03 Sep 2025 13:00:41 +0000
ROA not before:           Wed 03 Sep 2025 13:00:41 +0000
ROA not after:            Tue 02 Dec 2025 14:00:41 +0000
asID:                     21947
IP address blocks:        192.150.152.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:12:71:66:aa:b8:d1:bd:49:33:28:aa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3
        Validity
            Not Before: Sep  3 13:00:41 2025 GMT
            Not After : Dec  2 14:00:41 2025 GMT
        Subject: CN=5ca8ccd9-438e-4a34-a845-422f9dcb489f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6b:a1:eb:5d:5f:e3:6b:7e:af:57:de:f1:f3:
                    9b:eb:61:07:aa:88:2f:68:96:92:ae:ab:e5:b7:cf:
                    de:73:b5:b5:46:e0:5d:4f:77:ca:f9:38:fc:11:02:
                    eb:a1:4b:f7:21:31:6a:13:46:6a:14:27:1b:4d:06:
                    52:c3:04:1c:93:02:a3:da:98:76:37:c0:ae:6e:ab:
                    c7:df:90:bd:2d:cd:18:6d:2d:ad:29:62:64:9a:8c:
                    7c:c4:c7:ba:ce:f5:a7:b4:ca:93:d1:77:15:7e:0b:
                    2a:a7:c7:4f:d4:e8:03:6a:0a:56:0e:75:62:9e:f3:
                    84:e9:5c:c4:c2:a5:20:d6:7b:64:36:88:0e:3f:51:
                    53:da:64:6b:1b:8e:05:db:54:ea:7e:c6:13:aa:ad:
                    ef:f6:f0:79:c2:82:5e:6a:3d:67:f2:a2:e3:08:a7:
                    66:2d:f0:a6:c4:75:7f:62:20:4d:4e:e7:14:16:23:
                    2c:5a:00:85:a7:bd:4a:36:b6:c4:4e:f6:6e:4b:ca:
                    d7:51:28:2c:69:7d:cd:8c:66:66:53:89:43:49:5e:
                    7d:8d:4f:57:46:b9:81:9a:0c:eb:62:91:73:aa:4a:
                    d9:ae:54:cb:b5:82:7e:39:68:1b:fd:e2:ae:bb:6a:
                    aa:e7:31:74:ca:26:1d:3c:b0:3f:52:72:b5:e3:81:
                    fd:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:44:D8:6A:88:3E:40:7C:C2:09:08:08:E9:DE:2E:3D:52:5A:79:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/779a63bf-08f6-3f6f-bed1-9894398f6634.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl

            X509v3 Authority Key Identifier:
                keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.150.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:d7:bb:05:53:2c:67:f9:16:2b:82:32:81:c9:67:07:f4:2e:
         3d:18:ed:a3:27:9a:e0:17:35:e6:ac:0c:b9:72:7e:03:45:fe:
         04:51:ed:53:bc:01:bb:53:fc:ab:01:94:36:79:a8:4c:ba:cc:
         1f:25:e6:64:45:07:2e:3c:52:29:47:25:fa:aa:a3:db:ff:78:
         a4:77:6f:6c:e1:4c:3f:a7:c8:09:fc:df:d4:4c:e4:35:0a:de:
         9a:e1:15:a8:af:fc:75:3d:55:38:d6:9c:07:2b:8d:a0:33:8c:
         b6:fe:e9:74:a7:b9:ea:15:c9:8a:09:a0:c2:80:53:ea:0a:ca:
         be:a9:ef:3c:ee:9b:3b:6d:4d:0f:f3:47:79:9c:41:b3:c9:70:
         8a:07:bf:77:27:d3:b8:ad:8a:1c:84:92:96:5d:58:2e:d5:a5:
         ca:ce:71:2b:bc:af:67:3a:55:74:f9:06:40:3f:ca:71:17:fc:
         7f:d6:c4:4d:d6:ed:1c:27:fe:cb:10:5a:21:4c:c7:f8:7a:61:
         c4:7f:a4:ba:e8:53:23:6e:ba:5b:8d:18:9c:46:82:a9:14:7e:
         6d:eb:73:e3:88:e5:2a:1f:fa:3f:ed:62:96:61:d0:d1:a5:0b:
         52:94:08:27:eb:06:4f:bb:03:d5:80:9c:01:b8:98:98:5a:33:
         a6:45:4d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:01:20 2025 by rpki-client