Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/948d3a4a-181d-3b22-8cc6-0eb67a3785b6.roa
File:                     948d3a4a-181d-3b22-8cc6-0eb67a3785b6.roa (raw, json)
Hash identifier:          dhvjUaAfXrsSwQiA6UVVFPuoRtepVsLc9fWae8O2MR0=
Subject key identifier:   2D:F3:E8:21:7F:4D:03:8C:20:E8:7B:A0:D0:07:FE:7C:9A:89:32:6C
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584BBB75888EE6F3BE76FF9EB800
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/948d3a4a-181d-3b22-8cc6-0eb67a3785b6.roa
Signing time:             Mon 03 Nov 2025 02:00:31 +0000
ROA not before:           Mon 03 Nov 2025 02:00:31 +0000
ROA not after:            Sun 01 Feb 2026 02:00:31 +0000
asID:                     30036
IP address blocks:        150.195.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bb:75:88:8e:e6:f3:be:76:ff:9e:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Nov  3 02:00:31 2025 GMT
            Not After : Feb  1 02:00:31 2026 GMT
        Subject: CN=396549f7-972f-4f8e-b057-05e87f6e1c52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:52:aa:ff:24:aa:cb:81:24:38:25:dd:35:6a:
                    81:47:db:6d:f7:09:fd:48:69:71:92:0d:63:97:ed:
                    a1:db:c2:a9:00:13:2a:9a:53:e0:c0:55:dc:d8:10:
                    6a:9b:97:4b:4e:e2:e5:0b:9b:32:9c:a7:a6:0b:cb:
                    ac:41:49:00:d8:a4:9e:91:e5:3e:0b:8e:81:78:b7:
                    e8:2b:3a:70:0d:76:fa:5f:b6:3d:76:14:43:cb:ac:
                    70:77:f8:2c:fb:a4:f9:b1:1c:75:fe:4f:f9:89:8b:
                    9f:cb:89:69:f9:80:63:02:75:e9:e6:c7:4c:18:e7:
                    30:f6:1d:fd:8d:04:1d:09:8e:d5:36:84:52:22:ce:
                    56:fa:de:08:f4:72:4a:e4:13:41:19:0f:38:8f:0a:
                    7a:62:f8:d9:2e:a1:4f:00:68:0d:49:a7:f9:da:a3:
                    21:90:69:1b:36:1c:eb:db:19:37:5d:aa:e0:07:32:
                    9b:01:49:80:1d:0f:da:a1:da:c1:d2:dd:cd:a7:05:
                    c0:a4:d6:ca:0c:2b:a3:e8:07:9e:2e:06:21:d3:b1:
                    d3:7d:16:9a:0f:b4:c9:31:b2:21:de:5e:d7:1f:23:
                    3f:b9:57:81:0e:81:26:9c:9c:20:f5:e4:05:ca:1d:
                    19:2a:e8:75:97:b6:e4:36:b2:67:08:16:ea:9e:ff:
                    16:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:F3:E8:21:7F:4D:03:8C:20:E8:7B:A0:D0:07:FE:7C:9A:89:32:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/948d3a4a-181d-3b22-8cc6-0eb67a3785b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.195.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:31:bd:88:26:6d:7b:41:6b:78:3d:1c:e0:47:c0:44:35:26:
         67:4d:b5:f1:c7:8a:e3:5a:11:2f:2a:3a:dc:83:58:fb:1f:2a:
         85:bd:31:ae:52:6d:a5:1e:3a:01:c6:3c:b2:36:f7:ab:5d:c3:
         11:7a:4e:3c:f6:3c:55:f4:50:d5:0a:9d:c6:bf:96:58:6c:9e:
         1d:2b:9f:1b:ea:8b:87:60:56:15:b5:7d:b4:80:64:79:18:f0:
         e0:a3:60:bd:a8:59:2b:03:91:83:29:6b:42:29:70:bb:f7:ce:
         93:cd:1c:19:8b:80:e7:d8:39:e4:15:8c:3f:16:9c:41:8c:00:
         6c:35:b9:6d:7a:e7:f8:2d:6d:42:f5:72:f3:da:cc:52:bd:35:
         9d:20:b2:43:49:e8:96:e6:51:c5:1c:c5:1b:96:c9:6b:1e:27:
         a1:11:d8:7d:b7:fe:70:03:c7:5f:1e:9b:83:f0:cb:aa:bf:3c:
         f9:1b:a4:c6:e1:f0:ff:fd:aa:f3:2e:94:da:19:be:a0:7b:71:
         55:e4:a9:81:17:21:cb:6b:41:d0:f6:e5:a0:11:fe:aa:75:49:
         15:ba:84:1b:51:64:14:d8:be:1b:c1:59:e6:ed:26:b2:60:a3:
         92:3b:aa:68:35:61:a5:5a:b5:cb:be:43:a0:2f:8f:44:0f:c5:
         61:37:8b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:42:32 2025 by rpki-client