Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0384f19e-0fb9-3cb1-a82b-28cadd90e517.roa
File:                     0384f19e-0fb9-3cb1-a82b-28cadd90e517.roa (raw, json)
Hash identifier:          OeY3eWAOFo3peKQwgQQ9NvOzZr0RDPLzf160H1gBR/E=
Subject key identifier:   B2:23:26:62:34:5B:59:D3:54:4F:76:35:BF:17:96:0E:E6:20:38:5A
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A814661C6291DFFEFEF001E80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0384f19e-0fb9-3cb1-a82b-28cadd90e517.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     30036
IP address blocks:        150.195.94.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:61:c6:29:1d:ff:ef:ef:00:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=c357b582-72bd-46fb-ae00-9002a4aa9c93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ea:5c:0f:6e:a9:0c:15:81:06:98:7e:e5:99:
                    a6:cf:3d:2a:db:48:95:0f:84:ca:4d:f9:c5:aa:84:
                    24:93:a2:02:ef:07:08:2c:4d:21:9c:1d:20:bb:82:
                    c6:86:f3:08:50:84:3e:7c:83:4a:fc:79:54:b1:23:
                    61:ce:86:0a:fa:f4:f0:9a:f1:6e:09:db:33:f6:2c:
                    1e:98:75:1f:87:5b:3e:4a:5d:93:f3:da:68:d6:88:
                    2e:76:af:b1:07:b0:5f:a9:1b:36:d3:d1:96:fe:65:
                    ef:8d:e9:b0:5c:9c:b4:5f:05:e4:e5:00:55:98:6b:
                    3e:8f:46:5d:6a:8e:d0:7f:fd:4e:51:41:8e:53:97:
                    66:5b:c3:ed:df:25:b7:1f:fc:1f:9a:5a:39:cc:c7:
                    87:e8:01:d0:d8:6b:ae:93:08:f8:1d:04:4b:be:06:
                    87:9f:e7:51:1d:04:e9:85:c5:ff:b2:04:bf:da:21:
                    23:b2:13:9e:12:57:6c:59:98:94:2d:ec:27:fe:1b:
                    89:24:d5:70:9b:69:cc:3f:f1:fa:e3:ea:8f:35:4c:
                    44:d8:44:13:4a:fa:21:c8:15:85:9b:37:ff:16:d4:
                    fa:dc:8c:ad:18:62:df:c7:9e:a5:20:cf:0d:cb:9a:
                    97:90:3b:fd:0f:be:82:69:93:5c:c8:e9:fe:0b:9d:
                    0d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:23:26:62:34:5B:59:D3:54:4F:76:35:BF:17:96:0E:E6:20:38:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0384f19e-0fb9-3cb1-a82b-28cadd90e517.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.195.94.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:a7:f1:d8:1e:88:5e:6c:ff:c8:bf:ae:5e:cb:ea:b2:9c:38:
         d2:17:b6:36:1b:88:95:42:ac:1d:df:48:b9:0e:8b:d3:39:65:
         58:05:f3:6c:7f:95:4f:96:c7:2e:bf:ee:09:70:dc:f8:46:36:
         ba:e6:76:d8:25:14:45:42:b0:8b:b8:28:fe:f5:64:16:6e:2b:
         39:19:49:0f:9b:08:18:bd:b0:da:fd:1a:83:20:fe:e3:6d:a5:
         a0:e7:a4:20:2c:b9:6f:95:c8:70:ed:b6:7b:52:d8:6d:f0:7c:
         dd:06:8f:c7:d9:b7:5a:0f:93:9d:58:26:c9:31:3d:5f:3e:fe:
         66:92:55:ac:8f:e4:f6:d8:84:d4:59:fc:0f:25:09:60:d8:c3:
         02:37:d7:2b:56:cb:06:84:f5:e7:63:ad:9e:ea:81:38:14:cd:
         d1:51:33:6c:5d:4f:db:6c:35:03:84:c3:8b:92:27:79:75:14:
         36:44:b4:ef:6d:f4:9b:9d:f0:a7:62:41:3e:cd:11:f9:e9:62:
         38:6d:b9:b1:95:f6:18:42:28:7e:51:30:1c:b9:f6:52:83:25:
         da:e8:b2:f5:e9:22:a2:44:f7:43:75:e2:0e:f3:9c:b8:86:30:
         79:62:08:ef:4c:df:8e:e7:8d:4a:68:09:5a:aa:fa:b9:83:b7:
         e9:94:d8:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:10:12 2025 by rpki-client