Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/7b1e65e5-f9c9-3a75-8df9-d2316315cf45.roa
File:                     7b1e65e5-f9c9-3a75-8df9-d2316315cf45.roa (raw, json)
Hash identifier:          VelQIZ4ZF0dsPVJKe2+ZLqGbV4M83gIA4Yh4I4+ww1A=
Subject key identifier:   FD:BC:6E:E3:65:86:BB:6D:0C:60:4E:8A:50:9A:05:9C:A2:CA:CB:B5
Certificate issuer:       /CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff
Certificate serial:       010D0C9F4328584B21CC1AF8FBA32E85E7743600
Authority key identifier: D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/7b1e65e5-f9c9-3a75-8df9-d2316315cf45.roa
Signing time:             Tue 09 Sep 2025 01:00:33 +0000
ROA not before:           Tue 09 Sep 2025 01:00:33 +0000
ROA not after:            Mon 08 Dec 2025 02:00:33 +0000
asID:                     30153
IP address blocks:        209.50.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:21:cc:1a:f8:fb:a3:2e:85:e7:74:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff
        Validity
            Not Before: Sep  9 01:00:33 2025 GMT
            Not After : Dec  8 02:00:33 2025 GMT
        Subject: CN=e358b51b-ff7f-4e59-ab95-23f683c7ac68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:12:9e:0c:98:f6:b5:a7:ae:26:00:99:66:f2:
                    10:42:14:2e:c2:79:89:e1:bb:d3:b7:51:11:dc:06:
                    db:2a:f9:69:b0:62:73:9e:fb:07:bc:e4:a6:07:2a:
                    e4:c8:01:43:a0:be:68:51:15:9d:4c:f6:46:96:28:
                    01:04:9d:bb:87:ca:65:eb:5a:b6:c0:ff:c7:2b:82:
                    d5:d1:83:27:1a:4d:c3:40:c9:80:01:42:6e:dd:5b:
                    64:c7:dd:13:b5:22:b2:82:b9:9a:d3:f7:f0:ce:71:
                    59:8f:a7:b9:fb:3f:8c:f0:10:6f:3e:d7:09:76:9e:
                    f4:ed:37:f6:74:86:e5:b0:c2:e8:66:6a:ab:51:fd:
                    e6:d6:5c:a9:95:e2:3a:76:f2:b1:da:1d:8c:61:75:
                    ba:25:f2:cc:30:93:48:6a:eb:a6:a0:42:7f:07:73:
                    aa:1c:4b:e7:5a:89:ee:73:9a:34:90:7d:b7:cd:d3:
                    39:97:ef:45:7f:a4:b4:bc:26:a1:58:50:7f:7c:37:
                    16:96:1e:48:c3:76:73:76:b0:06:79:c9:96:52:9d:
                    8d:a6:fc:18:ab:3b:f2:d3:2c:0e:43:56:70:37:f6:
                    8a:4a:93:9b:f5:10:7e:19:e9:54:31:dd:01:60:5d:
                    09:94:a6:e0:f4:7f:2c:78:5a:e8:15:ad:b8:85:cb:
                    d3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:BC:6E:E3:65:86:BB:6D:0C:60:4E:8A:50:9A:05:9C:A2:CA:CB:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/7b1e65e5-f9c9-3a75-8df9-d2316315cf45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl

            X509v3 Authority Key Identifier:
                keyid:D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.50.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:9e:14:5f:bd:51:e7:de:c1:f1:a1:73:a7:52:73:54:03:6d:
         38:2f:2e:92:f4:f3:cb:cb:dd:19:e2:e6:c6:f9:3d:f2:d9:a9:
         90:42:37:48:e1:e2:12:38:9e:3d:cd:77:71:4a:5c:68:23:1b:
         e3:40:9c:a4:bd:26:0c:b5:79:18:78:0e:d4:94:6f:a2:6f:22:
         5b:48:bc:29:45:29:86:41:a7:cc:cc:64:0e:fc:7c:f1:d6:cb:
         a6:fb:43:99:23:22:28:f7:29:9a:63:01:bd:9f:4a:02:a9:7b:
         42:b5:74:7a:0c:a3:75:c1:6e:a5:4b:5f:2a:b6:0e:56:97:31:
         d4:af:f2:a8:d3:09:a7:f8:93:5f:73:68:a4:af:54:dc:16:20:
         66:58:08:3a:b0:90:fb:45:0e:aa:ea:d0:8e:4c:55:0a:b2:44:
         ea:72:a5:f6:10:92:b5:81:7d:a2:6b:71:a0:d6:49:6c:0d:a5:
         30:d5:ef:10:7c:a4:47:ed:d4:ac:d4:a4:46:ee:a5:b4:6e:8a:
         5f:bc:97:53:ee:ab:5a:16:23:10:c7:15:cd:3a:eb:e3:90:87:
         e4:a2:3f:8e:75:5f:61:d2:bd:53:b3:fa:30:d5:5b:ca:d9:be:
         80:ff:bc:1c:a2:b7:a8:1b:39:1e:05:a8:86:94:d3:e3:19:40:
         64:d9:ed:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 10:40:21 2025 by rpki-client