Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/47631e88-a2aa-356e-a96a-74ad262ed819.roa
File:                     47631e88-a2aa-356e-a96a-74ad262ed819.roa (raw, json)
Hash identifier:          3bU88/2HnztFgm3Houutu3PTeSEfcT8vRKSI+dWaV1I=
Subject key identifier:   D1:37:B9:21:62:F0:3E:02:AA:EE:B8:7C:70:62:F4:34:9D:E2:B8:BA
Certificate issuer:       /CN=0dbbf3fd-cf6e-4de7-8126-d6e41824d105
Certificate serial:       010D0C9F4328584A6AF08DEC4074782A1B61AA80
Authority key identifier: E8:A7:84:21:AC:67:CB:61:5B:12:37:63:55:E4:24:3A:7A:6C:92:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/47631e88-a2aa-356e-a96a-74ad262ed819.roa
Signing time:             Sat 05 Jul 2025 13:01:04 +0000
ROA not before:           Sat 05 Jul 2025 13:01:04 +0000
ROA not after:            Fri 03 Oct 2025 13:01:04 +0000
asID:                     14618
IP address blocks:        150.9.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 03 Aug 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6a:f0:8d:ec:40:74:78:2a:1b:61:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dbbf3fd-cf6e-4de7-8126-d6e41824d105
        Validity
            Not Before: Jul  5 13:01:04 2025 GMT
            Not After : Oct  3 13:01:04 2025 GMT
        Subject: CN=e78706d6-89a3-479d-914d-b2308a201627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:3d:bf:66:b3:e0:e5:17:9e:a4:fc:ea:34:e7:
                    fc:59:b5:f9:06:8e:78:6f:b4:e3:21:6f:2b:73:a8:
                    c3:e9:ec:e2:01:47:a7:d8:2b:5f:d1:28:9b:c0:b7:
                    b2:32:03:10:38:86:a8:f7:f5:3a:15:aa:57:2c:e8:
                    f3:b3:04:1d:de:9c:c6:c7:24:32:97:91:de:2c:af:
                    5d:2e:46:88:3c:e3:4a:92:88:e7:73:ef:3b:3d:72:
                    7a:18:1e:f3:27:52:d8:e9:2d:35:f4:a3:23:4b:ce:
                    0c:38:dd:cf:a8:98:c7:3d:85:b9:c5:dc:41:69:97:
                    60:51:84:18:dd:a5:4d:34:53:79:44:59:18:54:58:
                    c6:d2:76:67:64:08:10:91:9f:7a:21:8a:e1:4a:56:
                    54:73:0b:11:23:6e:55:77:ee:99:af:ef:62:0a:49:
                    14:95:55:90:0f:f5:38:9e:5f:ca:21:72:ed:42:ab:
                    5b:5a:c5:e2:91:1e:18:e9:0c:a8:32:9e:34:3f:ff:
                    96:1a:bd:d7:b2:71:f7:a2:cf:6f:e3:ab:5d:b1:6a:
                    c2:57:ec:7f:e2:0f:3b:83:68:22:f8:37:b1:ba:b0:
                    00:10:b5:7a:9c:04:af:fc:91:b2:06:21:6c:1b:01:
                    b7:4b:12:b5:e9:86:49:77:34:66:69:c7:4e:53:c0:
                    5c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:37:B9:21:62:F0:3E:02:AA:EE:B8:7C:70:62:F4:34:9D:E2:B8:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/47631e88-a2aa-356e-a96a-74ad262ed819.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.crl

            X509v3 Authority Key Identifier:
                keyid:E8:A7:84:21:AC:67:CB:61:5B:12:37:63:55:E4:24:3A:7A:6C:92:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.9.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:ba:5b:55:33:db:be:91:e0:e5:98:4b:5c:df:86:65:dd:99:
         8f:43:70:7f:b7:11:af:76:55:89:6b:17:a9:b1:70:dd:3b:a1:
         86:db:64:70:7c:a3:5b:18:6f:ad:9c:8a:93:00:fa:a1:de:5f:
         33:51:bf:00:af:19:f6:33:64:85:de:3c:b0:18:46:44:52:18:
         e8:91:65:df:bf:f8:d5:ed:b3:e9:e6:75:97:64:b6:19:fb:52:
         67:67:07:ff:d0:f1:36:01:07:0a:d2:e6:02:8f:62:6b:61:db:
         2a:44:55:3f:23:4f:7c:d2:49:af:f9:92:43:f5:92:3d:b5:99:
         44:f5:29:a5:71:c6:36:03:9d:39:22:7b:0c:ec:49:2e:cb:61:
         34:16:a4:0a:bb:2c:15:d2:fd:14:7b:67:3e:a7:81:1b:8b:eb:
         25:e8:e5:84:42:84:14:67:7e:34:eb:ea:9c:0d:bd:31:ee:61:
         3c:50:73:71:08:22:ac:e2:03:45:cc:38:28:92:5a:33:81:f4:
         6a:7d:aa:bc:3b:da:3b:ad:c2:7e:f2:e0:57:54:70:97:e1:f8:
         3b:24:c9:85:1e:2e:a6:50:94:3b:ef:5e:94:59:d7:92:fe:24:
         0e:b0:70:c2:25:86:73:0e:df:25:ec:a2:6a:d5:d9:7f:e9:b0:
         73:8f:7a:d1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpq8I3sQHR4KhthqoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGRiYmYzZmQtY2Y2ZS00ZGU3LTgxMjYtZDZlNDE4MjRk
MTA1MB4XDTI1MDcwNTEzMDEwNFoXDTI1MTAwMzEzMDEwNFowLzEtMCsGA1UEAxMk
ZTc4NzA2ZDYtODlhMy00NzlkLTkxNGQtYjIzMDhhMjAxNjI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhT2/ZrPg5ReepPzqNOf8WbX5Bo54b7TjIW8r
c6jD6eziAUen2Ctf0SibwLeyMgMQOIao9/U6FapXLOjzswQd3pzGxyQyl5HeLK9d
LkaIPONKkojnc+87PXJ6GB7zJ1LY6S019KMjS84MON3PqJjHPYW5xdxBaZdgUYQY
3aVNNFN5RFkYVFjG0nZnZAgQkZ96IYrhSlZUcwsRI25Vd+6Zr+9iCkkUlVWQD/U4
nl/KIXLtQqtbWsXikR4Y6QyoMp40P/+WGr3XsnH3os9v46tdsWrCV+x/4g87g2gi
+DexurAAELV6nASv/JGyBiFsGwG3SxK16YZJdzRmacdOU8BcuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNE3uSFi8D4Cqu64fHBi9DSd4ri6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wZGJi
ZjNmZC1jZjZlLTRkZTctODEyNi1kNmU0MTgyNGQxMDUvNDc2MzFlODgtYTJhYS0z
NTZlLWE5NmEtNzRhZDI2MmVkODE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMGRiYmYzZmQtY2Y2ZS00ZGU3LTgx
MjYtZDZlNDE4MjRkMTA1LzBkYmJmM2ZkLWNmNmUtNGRlNy04MTI2LWQ2ZTQxODI0
ZDEwNS5jcmwwHwYDVR0jBBgwFoAU6KeEIaxny2FbEjdjVeQkOnpskgkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8wZGJiZjNmZC1jZjZlLTRkZTctODEyNi1kNmU0
MTgyNGQxMDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlgnfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHW6W1Uz276R4OWYS1zfhmXdmY9DcH+3Ea92VYlrF6mxcN07oYbbZHB8
o1sYb62cipMA+qHeXzNRvwCvGfYzZIXePLAYRkRSGOiRZd+/+NXts+nmdZdkthn7
UmdnB//Q8TYBBwrS5gKPYmth2ypEVT8jT3zSSa/5kkP1kj21mUT1KaVxxjYDnTki
ewzsSS7LYTQWpAq7LBXS/RR7Zz6ngRuL6yXo5YRChBRnfjTr6pwNvTHuYTxQc3EI
IqziA0XMOCiSWjOB9Gp9qrw72jutwn7y4FdUcJfh+DskyYUeLqZQlDvvXpRZ15L+
JA6wcMIlhnMO3yXsomrV2X/psHOPetE=
-----END CERTIFICATE-----
Generated at Sat Aug 2 05:33:11 2025 by rpki-client