Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/866a1286-9086-381c-bebe-035302ba5bb7.roa
File:                     866a1286-9086-381c-bebe-035302ba5bb7.roa (raw, json)
Hash identifier:          vPF66u2mmyWPeYXFr9DBd93hD5W/MkR388gmsfitG7w=
Subject key identifier:   67:CE:F9:78:24:79:FB:4F:E1:F7:DD:DD:E0:FB:DC:52:62:9E:E0:CA
Certificate issuer:       /CN=0dbbf3fd-cf6e-4de7-8126-d6e41824d105
Certificate serial:       010D0C9F4328584A6AF08E6BAC4A9297E0F07780
Authority key identifier: E8:A7:84:21:AC:67:CB:61:5B:12:37:63:55:E4:24:3A:7A:6C:92:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/866a1286-9086-381c-bebe-035302ba5bb7.roa
Signing time:             Sat 05 Jul 2025 13:01:04 +0000
ROA not before:           Sat 05 Jul 2025 13:01:04 +0000
ROA not after:            Fri 03 Oct 2025 13:01:04 +0000
asID:                     16509
IP address blocks:        150.9.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 03 Aug 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6a:f0:8e:6b:ac:4a:92:97:e0:f0:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dbbf3fd-cf6e-4de7-8126-d6e41824d105
        Validity
            Not Before: Jul  5 13:01:04 2025 GMT
            Not After : Oct  3 13:01:04 2025 GMT
        Subject: CN=52194a6a-6726-4ef4-8591-a64d98752976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:24:a6:c0:71:2a:42:4d:a4:55:15:85:bc:37:
                    3a:9c:9f:90:84:14:bb:b5:49:3e:89:af:20:8a:94:
                    52:93:76:03:d0:59:93:47:2f:66:f9:d7:12:18:3a:
                    56:b9:be:ec:84:ae:4c:82:5f:64:c7:29:9e:22:ca:
                    80:8d:e6:1d:f7:20:36:f7:75:35:54:92:3a:b9:43:
                    12:ac:04:49:d3:36:36:a7:da:6c:05:3d:32:e9:cd:
                    e3:80:0c:14:49:43:10:b7:e0:d4:2a:12:ae:2c:f3:
                    bc:94:4c:df:38:53:62:73:c0:ca:67:8e:7d:80:14:
                    45:d1:02:03:4e:01:8b:b6:0a:1c:77:00:5f:5c:01:
                    77:12:33:9c:8a:bf:1d:5c:0a:7c:f7:f7:b5:e3:f7:
                    e8:5e:15:99:73:4f:9b:c4:1e:a7:73:23:a5:ba:c0:
                    8c:d9:ff:fb:92:48:92:73:c3:b5:57:0d:db:7b:a3:
                    21:a1:8b:67:d9:5f:7a:71:e2:c6:ef:1e:fa:2b:75:
                    cd:51:1a:2c:9a:41:f1:61:c9:30:10:f0:2e:5f:e3:
                    ef:12:fe:9c:28:23:bf:27:19:04:e8:a0:34:d2:81:
                    60:a5:12:4b:67:9b:07:9d:2f:81:8a:73:25:3e:a8:
                    96:b5:4e:14:c5:13:0b:ce:e2:8b:7a:ef:3d:b8:0b:
                    a7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:CE:F9:78:24:79:FB:4F:E1:F7:DD:DD:E0:FB:DC:52:62:9E:E0:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/866a1286-9086-381c-bebe-035302ba5bb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.crl

            X509v3 Authority Key Identifier:
                keyid:E8:A7:84:21:AC:67:CB:61:5B:12:37:63:55:E4:24:3A:7A:6C:92:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.9.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:1e:f4:f6:b8:eb:80:bf:a3:ab:c7:c3:30:ae:de:4b:92:43:
         64:de:95:c9:d4:ea:3c:8e:f9:0e:64:bb:55:bd:1a:7f:6c:0e:
         03:28:db:44:e0:c5:3b:fd:7e:bd:bd:6b:81:d8:20:70:11:ab:
         83:69:86:8c:9b:53:a9:a2:c2:95:59:5b:6e:af:12:da:24:25:
         e8:0d:72:64:7d:d8:c7:90:d8:c1:9d:f1:cf:a2:0a:d3:e6:44:
         fe:a1:23:2c:17:8d:0c:b2:5e:e3:08:fa:d8:70:f1:f2:24:2b:
         98:d5:e8:d4:e4:b1:f1:e4:d1:87:b5:cc:84:cc:9d:0d:84:2d:
         9d:13:54:c3:95:43:7e:5d:79:84:bb:ad:42:1e:97:20:52:de:
         2f:c8:f9:93:13:b5:7c:f8:9b:88:d9:09:c6:82:4d:c9:f4:c5:
         5f:b7:b6:db:b3:b8:b9:6e:24:ae:bb:0a:97:e1:2e:c0:d8:75:
         a1:05:dc:5c:87:c0:33:43:fd:c7:ef:fb:a7:52:3c:40:02:7c:
         77:10:86:63:31:a9:4d:be:53:20:af:61:b9:e7:bc:87:c0:d5:
         f3:d5:a9:41:93:7a:07:ea:e9:f3:c8:a0:60:69:7f:d2:22:48:
         14:06:fc:57:c8:f2:78:0f:b4:81:ac:74:63:62:dc:3b:a6:76:
         69:f9:6f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 2 05:30:35 2025 by rpki-client