Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/305b85b8-38e8-3366-afff-21661c5eaa16.roa
File:                     305b85b8-38e8-3366-afff-21661c5eaa16.roa (raw, json)
Hash identifier:          qsYa1SJ5FQsS5hJ0H/+hT7w7kwGjBM77BW+oRrVYovM=
Subject key identifier:   12:11:EA:20:46:8E:F7:37:34:9E:C2:1E:78:CA:C9:AB:FD:A9:51:23
Certificate issuer:       /CN=367e4bfe-b165-41fa-ab22-3f78555490cf
Certificate serial:       010D0C9F4328584AA160D6F878FA490DB31CE180
Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/305b85b8-38e8-3366-afff-21661c5eaa16.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     16509
IP address blocks:        192.161.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:60:d6:f8:78:fa:49:0d:b3:1c:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=0f36d55f-b7c9-4ed6-b773-c500f5e75c34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:9f:00:7d:9b:1b:fb:f1:35:12:07:7c:f0:27:
                    d8:30:cb:55:89:fb:a0:32:ff:b6:62:cd:88:07:00:
                    93:0d:76:a2:e5:9d:01:4e:8b:3f:47:46:2b:1d:75:
                    be:07:71:5c:5a:ef:5c:7e:15:05:3f:e8:97:52:a2:
                    06:e9:fe:d7:1a:11:a4:e6:71:a1:6f:d1:30:ce:5e:
                    f4:50:67:5a:c9:6b:4c:ad:a0:88:77:50:18:d8:df:
                    54:ac:7e:1c:cf:ee:50:02:56:26:59:0f:61:b6:3e:
                    06:0a:0b:4f:57:cb:cb:3c:95:d0:b8:33:e6:43:ed:
                    81:f6:a7:3f:48:9b:2a:a3:6f:a9:e7:59:22:6c:ac:
                    c9:aa:7a:14:0e:2e:11:55:0e:14:e6:ce:58:21:b5:
                    65:2f:7e:d9:a8:2e:0c:27:2c:8c:c2:5c:1f:df:13:
                    d6:c4:17:57:83:4c:56:50:05:ba:f0:ac:e6:82:20:
                    bd:71:c5:1b:42:b4:de:d9:36:36:93:ec:d2:25:91:
                    6c:88:5c:c0:36:7d:55:60:0c:66:c4:00:8c:07:64:
                    ec:2e:f7:f5:20:f3:76:0d:f0:85:f9:73:2b:af:11:
                    d7:8c:ba:14:e9:17:ec:3e:7a:33:b8:3d:dc:35:8a:
                    bb:42:6f:5d:86:d7:54:f1:c6:86:36:20:6d:73:4e:
                    00:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:11:EA:20:46:8E:F7:37:34:9E:C2:1E:78:CA:C9:AB:FD:A9:51:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/305b85b8-38e8-3366-afff-21661c5eaa16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl

            X509v3 Authority Key Identifier:
                keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.161.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:b4:9b:df:de:72:2e:6e:de:ad:fc:1a:90:7c:9f:6d:cf:f8:
         41:39:32:f6:b5:37:e0:89:2a:1b:7c:11:14:4b:de:e2:85:d8:
         32:c7:f7:b6:5c:43:25:df:f2:de:25:3e:76:51:ca:98:ff:f5:
         52:8f:d7:de:10:2d:41:49:59:4b:9d:fb:c4:d0:8d:ca:f7:47:
         61:db:49:9e:d5:4d:6a:f1:a9:37:e9:b9:2c:27:b9:86:40:88:
         a1:a2:cd:65:e3:fc:17:5d:ff:ed:5d:78:3a:07:93:ee:4b:40:
         bf:08:d0:4b:1f:10:d2:c3:e6:4e:c3:0f:7a:11:e4:33:3a:39:
         20:44:ba:65:be:f0:ae:b6:2b:0a:b6:da:07:03:bd:aa:03:06:
         63:2f:a9:60:43:0d:31:79:2f:ee:4d:2a:7a:f3:95:1f:45:97:
         76:eb:82:01:b8:7a:aa:6f:47:f0:ab:8c:7d:04:65:ab:a7:56:
         ae:5e:ad:53:cf:0c:06:90:68:b8:2a:0b:fc:49:e2:1f:1e:96:
         f6:1d:68:6f:3f:6c:21:17:3b:84:51:7d:93:51:f4:af:44:6f:
         6a:16:6b:7a:63:85:b7:d5:0c:60:8c:34:2c:9f:08:5c:f8:07:
         aa:12:f6:f5:9d:45:53:30:41:b5:68:97:79:d8:ae:70:32:f9:
         fa:b8:15:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:58:33 2025 by rpki-client