Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/35901c33-80f4-3e97-9156-237d061a1c8a.roa
File:                     35901c33-80f4-3e97-9156-237d061a1c8a.roa (raw, json)
Hash identifier:          ATdc9GwaiYPVFKANOesDTyEO+j8zo5Th6ZINKWwGrks=
Subject key identifier:   68:90:A2:33:F0:8A:68:D5:31:F0:E3:3B:40:5A:CA:75:D2:95:BA:BB
Certificate issuer:       /CN=d65fef8f-4cd2-4778-9158-f56f30242812
Certificate serial:       010D0C9F4328584B8EACE691076318E31C793AC0
Authority key identifier: 7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/35901c33-80f4-3e97-9156-237d061a1c8a.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     2734
IP address blocks:        192.150.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:e6:91:07:63:18:e3:1c:79:3a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d65fef8f-4cd2-4778-9158-f56f30242812
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=f97804a6-b695-4b52-ba90-596858c0a534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:6b:d3:e2:08:df:d8:88:ec:3a:ad:30:c7:20:
                    0c:6f:1c:fa:9d:0a:c6:f1:00:05:36:3d:52:ba:cb:
                    32:42:6e:f6:0f:c8:7d:a5:3c:3c:31:5a:d3:0d:36:
                    65:76:e3:2d:e3:0b:23:e3:a9:c4:6e:57:d0:d9:d1:
                    6d:d9:b1:ba:61:62:95:6a:69:e6:c5:02:20:fe:cf:
                    3c:e5:54:b6:61:6c:87:17:ef:17:90:df:b4:49:37:
                    1d:0b:a1:49:98:c4:2a:44:35:b4:c4:c1:c3:83:4f:
                    8a:da:43:8d:34:71:5c:7c:cb:c2:1f:b8:58:3b:90:
                    f6:f4:b3:35:61:2e:a4:72:86:63:ff:13:3a:7b:b4:
                    c4:fa:b7:5d:56:44:b8:8b:a6:7c:a2:d0:d9:ff:7f:
                    20:b0:88:01:1f:e2:64:19:5a:22:db:e4:76:fe:fa:
                    c2:12:4a:f9:d6:ba:17:c0:4c:6d:b8:1d:da:88:c6:
                    8a:62:60:87:15:6b:00:e2:cc:c5:4c:66:d3:f6:7d:
                    b3:be:42:67:bf:77:49:dc:c6:bd:cc:a8:64:c7:ea:
                    83:46:70:49:8b:f5:0e:f1:99:24:ab:c6:19:27:64:
                    94:5d:c3:a0:ee:92:26:10:bd:be:8f:30:d3:6a:f1:
                    3f:ea:ad:39:fa:07:d7:3e:f0:29:de:e4:17:61:3e:
                    05:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:90:A2:33:F0:8A:68:D5:31:F0:E3:3B:40:5A:CA:75:D2:95:BA:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/35901c33-80f4-3e97-9156-237d061a1c8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl

            X509v3 Authority Key Identifier:
                keyid:7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.150.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:e1:68:04:9f:68:27:70:6e:a5:0d:2c:59:82:71:ee:89:ab:
         cd:4b:07:e4:4a:39:49:e6:b1:3e:fb:49:6e:b3:6e:3b:19:2c:
         45:a1:c0:64:d1:9a:f7:1f:52:31:9f:d6:17:1b:1d:8f:e9:8e:
         14:c4:3a:bc:aa:69:fe:22:57:6b:58:ce:02:fc:f7:39:ed:41:
         b6:ea:9b:e1:92:b8:77:6e:87:de:a0:0d:fa:3c:27:92:58:a4:
         67:24:81:fd:85:62:2d:8a:a0:b2:64:36:11:6e:50:7f:b7:37:
         f0:8b:69:54:26:79:22:76:b1:4f:4d:29:fa:c1:a8:19:ae:b4:
         b3:54:28:ef:18:60:61:34:09:b0:08:05:ef:c1:13:e9:f4:52:
         72:71:44:ff:83:b9:dc:5e:3c:0c:03:cd:a9:bb:ca:8f:94:c9:
         6c:9f:13:10:36:7b:fc:d6:5d:6e:1f:0f:94:a7:21:93:d3:5c:
         70:d4:f9:a9:41:e9:a1:e4:b8:d2:08:bd:ab:92:2f:36:c0:43:
         f8:21:b8:38:26:4e:ff:5c:30:33:ca:61:ee:f9:9a:8b:57:45:
         65:6b:56:bc:ad:d4:98:a4:a3:9c:9a:b0:f6:8f:21:82:ea:48:
         e7:21:ec:e9:f3:1f:f3:be:3e:b9:b3:26:91:80:c9:0e:d8:ae:
         6a:2b:6b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 10:12:44 2025 by rpki-client