Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9e66a2b6-37fc-3926-8a83-8c24f1f4df73.roa
File:                     9e66a2b6-37fc-3926-8a83-8c24f1f4df73.roa (raw, json)
Hash identifier:          lSYKf/+bF/VD0i6cTSj4LprDV/SIacBZlvpsvTqydBM=
Subject key identifier:   83:7F:71:EF:5E:47:55:30:BD:54:BC:5F:7E:30:95:42:E6:04:B0:C8
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584AC2E0FE43BE32EC5B863BFE00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9e66a2b6-37fc-3926-8a83-8c24f1f4df73.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     3223
IP address blocks:        206.123.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:fe:43:be:32:ec:5b:86:3b:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=25992796-8fb5-4b09-97ce-e617567d8a56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:12:38:a5:a7:a6:a7:e5:66:48:4f:ac:1b:d2:
                    8a:c0:de:3f:6b:60:40:80:0b:fd:d2:28:74:3f:ed:
                    cd:0d:3d:f2:bd:95:10:ae:04:52:e9:72:74:59:2f:
                    db:1e:ac:1a:d7:86:0d:f4:af:59:80:ec:f0:cf:c4:
                    12:ab:aa:32:b1:49:52:cc:83:cf:c7:74:75:26:38:
                    18:78:71:d1:bd:3f:a4:98:56:33:e2:00:9d:43:ff:
                    12:8e:22:20:f7:dd:c8:01:fc:51:ab:cd:0a:6f:26:
                    60:e9:06:74:54:d6:c2:4f:8d:5a:25:5c:b6:a1:12:
                    86:b5:9a:d2:f4:6e:db:47:00:cc:71:bc:81:7a:5e:
                    3f:98:09:3a:8b:c8:7e:a0:1c:8b:5d:c7:ce:bc:6a:
                    87:88:fb:e8:bc:db:88:90:5c:80:8c:39:df:c4:0f:
                    35:be:f7:22:a5:34:ff:4a:ac:80:6e:80:1b:1c:82:
                    17:df:c0:cb:50:f0:84:0c:ed:75:da:49:e4:5a:37:
                    f5:28:55:06:14:fa:a1:fe:2f:17:cb:b6:f9:4b:f1:
                    07:3c:9a:1e:54:d5:76:f8:86:ea:38:6e:bd:1c:60:
                    43:c0:f7:6e:85:fd:ad:4a:66:af:ae:45:eb:ab:e6:
                    2a:66:b4:eb:08:13:0d:6f:2f:fe:17:8f:dd:db:27:
                    06:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:7F:71:EF:5E:47:55:30:BD:54:BC:5F:7E:30:95:42:E6:04:B0:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9e66a2b6-37fc-3926-8a83-8c24f1f4df73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.123.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:17:10:3e:cd:af:1f:25:71:96:91:ef:d7:4d:f3:68:67:9d:
         72:e3:e3:51:8a:89:f7:8a:72:25:2c:e2:98:f9:85:e0:12:b1:
         57:1a:0c:8e:6c:6c:41:c0:23:a3:60:67:d5:7b:33:d7:f4:b3:
         65:1a:d9:f2:b1:58:ba:1c:cd:cb:6b:9d:c9:1e:e6:f2:7d:40:
         81:b8:ec:58:4e:b3:f8:23:ef:2e:3c:fe:aa:21:f8:57:f9:e1:
         4b:c7:54:52:71:31:61:b9:f3:d5:ed:5b:21:b9:d1:80:24:60:
         b7:6c:49:ba:59:0e:aa:fd:77:b9:c6:83:d3:eb:58:8f:4c:19:
         46:2a:16:82:c0:4b:f2:b5:71:8d:61:3b:ac:41:00:eb:51:6f:
         6d:f6:0f:69:9e:42:a3:b1:16:4b:a1:08:48:20:14:bc:b1:a8:
         22:f9:24:86:39:14:31:d4:61:29:48:49:9e:38:0f:bc:7f:60:
         d0:77:52:78:14:b6:c0:e0:bb:1c:6e:35:e0:60:e3:d8:04:58:
         06:57:60:8d:90:c4:de:02:08:e5:5f:4b:ae:af:13:69:1d:50:
         e1:5c:c5:14:18:36:a6:dd:c5:a3:4b:34:58:42:76:2d:19:46:
         3e:df:43:6c:76:8a:04:7e:d8:bf:e8:89:13:98:de:d3:a8:61:
         77:4d:e9:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:03:48 2025 by rpki-client