Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/58ed347c-385a-3fd4-bda9-30b47a4c179d.roa
File:                     58ed347c-385a-3fd4-bda9-30b47a4c179d.roa (raw, json)
Hash identifier:          BE9236BvI4bDvBSoOVHWU1ATrqm16IV+Lx59XjyZsWU=
Subject key identifier:   99:85:1E:E7:D1:D8:F4:CF:08:C1:38:F2:4E:DD:4F:98:3A:17:2C:9A
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A81463C461F5C8C220218A580
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/58ed347c-385a-3fd4-bda9-30b47a4c179d.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     30036
IP address blocks:        150.195.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:3c:46:1f:5c:8c:22:02:18:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=65b51ffe-10dc-4238-80a5-903310d3b2ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f2:54:90:4a:91:be:72:0b:18:0c:e5:93:b9:
                    c9:18:fd:b9:30:1d:87:67:67:46:8f:f0:78:c6:55:
                    48:86:e4:e6:2a:08:27:bc:37:21:99:f2:2f:7b:6d:
                    97:71:7a:38:12:57:e4:85:31:fd:79:cb:29:af:06:
                    ed:7c:78:3f:99:df:8b:d8:d5:00:af:a8:48:77:16:
                    e6:12:99:05:3c:bf:00:8b:fc:df:d0:f8:50:c6:d8:
                    60:84:dd:6f:b3:db:52:cc:91:4a:ab:b1:25:93:28:
                    db:f3:1a:ef:39:49:49:eb:00:6a:d3:82:4c:20:35:
                    e4:88:24:68:75:75:b2:05:2a:35:e7:4b:17:05:b9:
                    c7:c0:32:47:45:64:3b:2c:45:90:53:ae:04:e6:ba:
                    48:98:59:3f:32:b2:13:dc:81:d1:58:1c:f1:b4:41:
                    1e:e2:03:2b:7b:69:54:09:bc:2e:66:e6:4a:14:43:
                    cf:15:5b:7c:5c:f9:9d:a2:a9:a9:ee:e9:ae:80:00:
                    ab:20:df:96:3d:ba:c5:71:be:12:06:86:d3:26:b4:
                    b9:7f:b4:2b:0a:c4:87:80:8f:94:35:91:fa:93:26:
                    7b:f9:33:d8:29:e5:be:dd:f3:61:61:36:55:ee:53:
                    20:85:52:87:dd:7c:27:6b:13:d1:19:14:64:3d:3f:
                    39:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:85:1E:E7:D1:D8:F4:CF:08:C1:38:F2:4E:DD:4F:98:3A:17:2C:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/58ed347c-385a-3fd4-bda9-30b47a4c179d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.195.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:57:48:dd:ff:0f:24:63:68:a7:86:61:9c:91:9b:bc:e8:c0:
         52:ea:ad:6b:b0:7f:2d:2c:e8:b1:d1:db:aa:a9:67:54:b3:6c:
         40:12:92:8d:8e:5a:78:f3:5e:de:9f:97:90:9a:e7:20:a4:7b:
         29:75:97:32:31:2e:cf:d8:a1:d7:da:99:61:de:2e:f0:d4:bb:
         84:ea:74:e4:73:98:6f:1f:0a:42:c0:7d:cd:72:10:a7:15:a7:
         07:a4:1a:24:3b:33:2c:a1:be:b2:43:09:61:68:ee:cb:7a:c1:
         b7:05:c3:82:30:58:f0:3b:86:73:c5:b9:c0:da:7b:bb:38:ad:
         93:fe:4d:ac:e2:15:f4:b5:f7:94:bd:cc:a7:e3:42:7d:03:fa:
         f2:4f:5c:2c:f9:11:39:db:7e:8f:fa:fd:cc:84:d1:0c:89:93:
         97:46:0e:11:e2:f6:81:7e:4d:4b:7b:29:54:ae:6d:eb:08:2e:
         c0:73:45:55:34:5f:b3:17:eb:39:7f:9b:ac:e6:22:1b:39:dc:
         6a:0f:8f:32:71:cd:42:f6:d3:ac:c6:45:87:9d:96:bb:81:e1:
         cb:7e:5b:f5:8f:51:24:f7:01:7e:53:b7:a1:4c:94:b3:db:9d:
         6c:e4:17:d5:64:b5:f8:dd:54:67:ee:16:a9:0e:46:d8:87:bb:
         3d:29:b0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:11:48 2025 by rpki-client