Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/44fc891d-1d63-38fe-ad22-c0eb2d2d9fc4.roa
File:                     44fc891d-1d63-38fe-ad22-c0eb2d2d9fc4.roa (raw, json)
Hash identifier:          GRecApcSN3f0qsJLDLxaa+w87RZTPn7CBKDNHxYj29w=
Subject key identifier:   64:90:12:1F:E7:85:27:7D:F7:D3:F4:28:59:86:E1:0B:73:D3:91:16
Certificate issuer:       /CN=aa033953-9752-479d-b9ee-4213cf648479
Certificate serial:       010D0C9F4328584AFC1C00A5679DE3987143E6D0
Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/44fc891d-1d63-38fe-ad22-c0eb2d2d9fc4.roa
Signing time:             Tue 26 Aug 2025 13:00:41 +0000
ROA not before:           Tue 26 Aug 2025 13:00:41 +0000
ROA not after:            Mon 24 Nov 2025 14:00:41 +0000
asID:                     2381
IP address blocks:        198.150.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:1c:00:a5:67:9d:e3:98:71:43:e6:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479
        Validity
            Not Before: Aug 26 13:00:41 2025 GMT
            Not After : Nov 24 14:00:41 2025 GMT
        Subject: CN=e597511f-e7c3-42cd-8249-0945d0095d24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:71:86:cc:3c:a7:22:6d:62:23:83:89:1a:a0:
                    53:6c:4d:ef:10:bc:65:7d:6e:41:72:0d:09:58:42:
                    70:ab:5d:49:fa:d4:43:ee:ac:9a:ee:a0:63:7e:30:
                    ab:37:8c:48:81:6f:42:2d:41:72:c0:fe:56:24:f7:
                    31:20:5c:8c:73:a4:7f:41:41:da:89:9d:74:19:2c:
                    1a:cd:20:52:83:df:10:94:b3:ee:58:42:14:ac:c9:
                    ef:d2:5e:f2:1b:06:90:ff:af:4d:0e:c3:bd:cf:d5:
                    5a:ea:79:ff:35:65:a8:90:d4:5b:22:aa:63:d9:6a:
                    a7:89:51:04:91:78:70:46:c1:f7:70:46:da:d9:e9:
                    2e:38:63:ef:c5:c3:31:90:69:81:7f:4c:3f:a6:9a:
                    d9:f8:24:3a:97:63:f3:15:03:eb:47:17:06:6b:40:
                    b8:5c:3d:74:85:fb:0a:27:02:1f:a2:45:14:f4:45:
                    10:f4:3b:23:fd:c9:1b:49:2d:aa:7c:e3:4f:d8:e7:
                    11:15:c3:22:57:db:c0:c7:c3:43:e7:81:62:d5:b6:
                    1c:77:d1:00:23:d2:7d:05:18:be:37:e1:dd:04:0a:
                    2f:e8:bd:39:ff:42:37:79:31:6b:71:c0:7b:fc:6c:
                    da:fb:c0:70:65:f2:cc:64:73:4e:25:8e:70:a9:f1:
                    e8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:90:12:1F:E7:85:27:7D:F7:D3:F4:28:59:86:E1:0B:73:D3:91:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/44fc891d-1d63-38fe-ad22-c0eb2d2d9fc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl

            X509v3 Authority Key Identifier:
                keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.150.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:ce:77:b0:0e:27:86:eb:de:2b:03:33:b9:a4:13:3e:43:a5:
         ca:7b:b9:03:14:75:67:28:14:48:e9:dd:26:fc:50:46:ac:6a:
         9f:70:b3:cd:50:d0:10:a2:9c:f8:aa:d4:37:ba:bd:57:67:14:
         0c:53:d5:bb:f8:2a:c0:9f:83:26:15:dd:ba:ee:fc:de:15:fd:
         c0:8f:77:b7:d8:7a:be:54:84:b3:c2:f4:6b:92:68:80:87:5a:
         84:82:cf:9f:84:1c:1c:28:89:f7:45:25:79:31:65:6f:c7:5c:
         c5:73:21:ea:85:db:5e:7d:c6:6d:8a:f5:30:22:d1:99:83:4c:
         ca:f0:56:ef:32:0a:e8:73:70:66:bd:fc:57:8d:bf:9a:12:8e:
         fc:e5:db:0c:a3:73:9a:1f:c2:45:f4:bb:8b:88:1e:96:84:b2:
         f4:ff:5a:8e:25:01:e2:76:7e:a4:68:ec:7b:26:e6:47:3a:24:
         49:dd:ac:ba:0f:e3:9d:52:94:93:9a:50:e3:89:28:55:0a:61:
         7d:2a:4e:a7:50:3f:ca:51:d3:be:9f:d7:65:45:40:a5:38:df:
         0f:54:39:09:0e:70:00:8d:91:27:67:7c:cc:04:80:2f:79:60:
         6e:d8:cf:7f:e2:bb:83:59:3a:dc:10:bf:ff:44:1d:4d:42:0a:
         25:7c:28:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:44:06 2025 by rpki-client