Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/fabb8d63-e0ce-3598-a09f-0513068d6941.roa
File:                     fabb8d63-e0ce-3598-a09f-0513068d6941.roa (raw, json)
Hash identifier:          Pa0snj3DDSKwmxFSu1LOkNJdfjUCb3C0vP0Nu1kYG9g=
Subject key identifier:   ED:E7:26:A4:4C:2F:95:E6:04:40:32:96:4B:79:DD:D9:67:67:6A:36
Certificate issuer:       /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Certificate serial:       010D0C9F4328584AE69975EAE37D7029526CFF80
Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/fabb8d63-e0ce-3598-a09f-0513068d6941.roa
Signing time:             Mon 18 Aug 2025 20:05:53 +0000
ROA not before:           Mon 18 Aug 2025 20:05:53 +0000
ROA not after:            Sun 16 Nov 2025 21:05:53 +0000
asID:                     31898
IP address blocks:        150.230.0.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 21 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e6:99:75:ea:e3:7d:70:29:52:6c:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
        Validity
            Not Before: Aug 18 20:05:53 2025 GMT
            Not After : Nov 16 21:05:53 2025 GMT
        Subject: CN=550f60ea-981e-4abb-bdb9-03b3a51ef3ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0b:67:5c:21:cf:4e:b5:eb:70:f8:53:9e:f9:
                    60:5f:6e:30:2b:fd:11:2e:e8:4b:2c:84:02:9b:39:
                    72:34:34:c5:54:fc:9a:1b:ab:ec:0e:35:eb:ed:19:
                    19:cd:f6:a4:ca:7c:b0:33:15:05:9e:6f:cd:9d:5f:
                    73:c9:95:26:e6:e9:be:ab:f5:fc:27:f6:b6:dd:49:
                    ff:4f:67:03:8f:11:c4:5d:3b:03:20:14:53:ab:1c:
                    4d:6b:24:f3:46:96:07:e0:9b:04:ca:d4:2f:55:d9:
                    1a:cd:a7:87:7d:e7:06:8b:08:70:91:d7:d8:c7:03:
                    0d:41:9b:69:f0:58:71:d1:55:18:02:1e:72:8a:72:
                    6d:e6:20:09:18:b0:98:ef:bf:67:95:f0:f5:27:0e:
                    ce:0e:11:37:02:ef:92:d0:38:46:99:cf:84:00:cb:
                    6c:75:7d:be:df:fe:03:3f:40:4c:c0:64:c4:8b:af:
                    4a:6a:15:52:0d:6b:d7:a5:4b:a3:d1:5d:be:88:42:
                    de:e4:a6:eb:0f:c3:37:7c:59:7e:3d:a4:fb:15:6a:
                    99:5b:fb:de:90:e6:5d:76:f4:c3:9a:9e:61:d2:86:
                    9e:e9:86:16:af:0f:bf:0c:83:e8:0c:ab:00:d1:49:
                    1b:55:8c:e6:55:ab:c3:89:de:9d:1b:28:89:99:15:
                    d8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E7:26:A4:4C:2F:95:E6:04:40:32:96:4B:79:DD:D9:67:67:6A:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/fabb8d63-e0ce-3598-a09f-0513068d6941.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl

            X509v3 Authority Key Identifier:
                keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.230.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:cb:95:d1:ed:9e:b1:17:21:ad:0b:7d:c9:8b:04:43:d6:34:
         f6:f4:9f:eb:23:fb:70:c4:71:3c:c0:3f:99:f4:fe:73:b8:8b:
         36:8f:46:68:23:08:6d:e8:0f:6c:71:4e:1e:a4:ac:77:e8:f0:
         d1:95:8e:35:ae:f7:5d:de:b2:de:c6:a7:5e:2b:4f:6a:02:b7:
         2e:56:7f:b4:9a:3e:67:3c:27:93:15:b8:7b:f4:16:06:b0:76:
         c8:72:bd:38:d3:b7:8e:df:90:09:70:2e:cd:73:fe:3b:a8:cb:
         f2:6d:13:89:66:2e:d9:79:44:fa:56:e3:a0:0a:f3:c8:49:36:
         fd:66:0d:de:ac:0f:52:31:c9:0a:30:d6:d2:c2:cf:41:a9:7c:
         a4:f6:3f:4e:34:c5:56:59:61:22:f7:c8:ee:5f:89:70:29:4e:
         af:45:1a:59:a8:86:02:ed:56:0b:cb:66:15:12:d4:d2:bc:de:
         1e:c3:67:ac:21:2f:30:02:8e:ef:e9:c0:d5:bc:88:76:41:16:
         c2:b1:41:fa:c1:bc:a2:b8:0f:9e:12:43:67:18:ac:c8:b2:0b:
         06:72:af:e0:bb:7d:a8:40:08:ef:6d:ff:36:98:36:19:9e:8d:
         78:e5:86:f5:cf:1f:94:cc:40:33:43:b0:0e:81:90:b7:8a:67:
         00:47:c0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 08:06:02 2025 by rpki-client