Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/b63ea7f2-4d06-33c8-8735-280d77047bb9.roa
File:                     b63ea7f2-4d06-33c8-8735-280d77047bb9.roa (raw, json)
Hash identifier:          nuzoletgKTCm35l9Ao2V/0X3XhEKAgeN04HD45iKob4=
Subject key identifier:   79:55:FD:FA:0B:12:20:F3:42:66:F8:8C:F5:FC:90:64:44:03:66:06
Certificate issuer:       /CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08
Certificate serial:       010D0C9F4328584AFF1657B1E3D4ADD2083ABA00
Authority key identifier: 7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/b63ea7f2-4d06-33c8-8735-280d77047bb9.roa
Signing time:             Wed 27 Aug 2025 14:36:55 +0000
ROA not before:           Wed 27 Aug 2025 14:36:55 +0000
ROA not after:            Tue 25 Nov 2025 15:36:55 +0000
asID:                     25198
IP address blocks:        216.75.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ff:16:57:b1:e3:d4:ad:d2:08:3a:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08
        Validity
            Not Before: Aug 27 14:36:55 2025 GMT
            Not After : Nov 25 15:36:55 2025 GMT
        Subject: CN=e9e9515e-43e2-4fa6-ab02-bb5d0cf2af9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0b:2b:a6:97:70:a1:5e:37:2f:43:48:fd:2c:
                    d6:3b:94:c0:4e:62:f4:a3:e0:9d:f2:8a:b8:bd:ab:
                    1c:62:51:dd:cf:ce:a1:ad:5d:64:e9:8b:33:cb:76:
                    fa:aa:80:4f:19:9d:a5:ab:d2:49:0f:3a:76:cd:42:
                    e4:a7:1e:38:28:ad:e4:d3:1a:d4:19:50:c7:ef:7f:
                    33:02:54:f2:db:e7:da:a2:dc:d3:8c:e6:22:e1:61:
                    fd:08:92:09:3d:ef:c9:8f:1d:f3:28:86:0f:7b:0e:
                    71:21:09:85:cb:9b:c8:e8:3c:1b:ec:c9:a2:70:a7:
                    7c:01:03:dc:6e:5e:f3:a6:5d:f4:c4:f2:25:8a:58:
                    a6:df:c4:2e:2b:a6:3d:ba:32:6f:5b:7d:43:fa:ee:
                    d9:e3:2a:60:d0:cb:9c:a7:df:03:e4:65:97:1f:1f:
                    84:e1:ff:33:f6:95:53:5c:c6:95:3d:52:53:cf:08:
                    4c:07:14:54:ae:96:3f:b8:25:8e:b8:3a:ca:bc:72:
                    9b:a1:66:06:52:bf:cb:18:8c:3a:c6:df:c2:e4:d0:
                    d2:a7:81:95:64:a2:8b:71:58:4c:60:e1:12:23:5e:
                    12:4c:1e:bd:08:b7:f3:bf:8c:ee:01:6f:00:92:07:
                    80:40:71:ec:00:99:bb:e3:cc:57:81:bd:82:54:b2:
                    4c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:55:FD:FA:0B:12:20:F3:42:66:F8:8C:F5:FC:90:64:44:03:66:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/b63ea7f2-4d06-33c8-8735-280d77047bb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl

            X509v3 Authority Key Identifier:
                keyid:7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.75.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:1b:ca:d2:aa:0a:69:f4:f5:06:1a:05:4f:c1:d2:7e:2e:a6:
         54:ea:56:9f:4e:f5:51:0c:3c:34:89:38:43:16:e5:9f:d0:05:
         a7:5c:c3:d9:bb:23:04:b0:cf:ee:69:7e:be:2d:8f:81:c2:cd:
         58:1b:cb:6b:dd:f0:9a:43:ea:d8:70:1a:fd:fd:23:91:13:bd:
         e6:81:08:fa:4d:9d:ae:58:54:ae:14:b6:3f:56:c4:4e:cf:70:
         e9:39:48:f1:29:a8:94:c1:03:19:fb:fe:6b:81:20:4a:3d:33:
         df:5c:f5:1b:a6:57:cb:15:5e:29:7b:23:d3:f6:01:5f:03:c4:
         51:ac:c1:70:b0:9f:9b:b9:e4:43:8c:a1:c3:87:c5:7d:ec:be:
         ec:f5:ad:d4:e8:11:a2:b0:2e:30:68:85:1c:0a:8b:99:f1:44:
         ab:00:e4:36:91:53:10:fb:96:dc:ec:ac:29:75:f2:eb:01:2a:
         f2:f9:32:86:3a:4a:de:30:11:d5:b4:66:fc:cf:97:ef:bb:89:
         bb:19:69:1e:ab:93:f8:eb:b4:aa:46:0a:dc:dd:74:25:95:ce:
         e0:43:13:cf:59:52:da:c9:13:b0:fe:b7:f6:97:6c:2c:27:d5:
         ed:b8:1b:2f:3f:e5:33:ec:72:61:88:ee:b0:0c:4d:76:d3:23:
         74:ee:a6:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 18:59:39 2025 by rpki-client