Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/150b2426-c419-4e4b-b73d-c495cce8cfdd/bdd55083-6ce6-3837-add9-5ff3851a5c95.roa
File:                     bdd55083-6ce6-3837-add9-5ff3851a5c95.roa (raw, json)
Hash identifier:          ag/FOrHuIRg9vFtEKotsgrXU1kuDjByDnoo2tywHBjw=
Subject key identifier:   A1:15:68:C2:5A:82:77:BA:9C:49:0A:DD:2D:EE:92:41:BD:D7:1C:00
Certificate issuer:       /CN=150b2426-c419-4e4b-b73d-c495cce8cfdd
Certificate serial:       010D0C9F4328584A94D0E42DD8F761E20F29FB00
Authority key identifier: 7B:B0:DE:F8:D8:73:D2:3C:62:65:9C:34:18:FF:AB:19:23:2C:26:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/150b2426-c419-4e4b-b73d-c495cce8cfdd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/150b2426-c419-4e4b-b73d-c495cce8cfdd/bdd55083-6ce6-3837-add9-5ff3851a5c95.roa
Signing time:             Sun 20 Jul 2025 13:01:04 +0000
ROA not before:           Sun 20 Jul 2025 13:01:04 +0000
ROA not after:            Sat 18 Oct 2025 13:01:04 +0000
asID:                     16668
IP address blocks:        192.41.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/150b2426-c419-4e4b-b73d-c495cce8cfdd/150b2426-c419-4e4b-b73d-c495cce8cfdd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/150b2426-c419-4e4b-b73d-c495cce8cfdd/150b2426-c419-4e4b-b73d-c495cce8cfdd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/150b2426-c419-4e4b-b73d-c495cce8cfdd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:94:d0:e4:2d:d8:f7:61:e2:0f:29:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=150b2426-c419-4e4b-b73d-c495cce8cfdd
        Validity
            Not Before: Jul 20 13:01:04 2025 GMT
            Not After : Oct 18 13:01:04 2025 GMT
        Subject: CN=4cd5d3a6-43b8-4c01-bcb1-cf7d20ef8be3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:86:5a:2c:34:12:28:3b:ae:47:2c:0c:ea:b4:
                    e8:4e:75:f1:9d:87:05:e1:a4:2b:4b:17:3f:2c:84:
                    74:92:45:ea:0a:a9:37:b7:f6:23:5d:ac:58:70:36:
                    5f:05:23:61:c3:54:8a:9c:78:5c:ca:ee:eb:03:0b:
                    7e:45:15:94:73:65:21:dc:b1:1c:3c:dc:2c:c7:10:
                    33:63:be:74:bf:7a:21:92:e6:e7:30:4d:46:d9:f7:
                    2f:fb:d1:66:92:39:a1:6d:70:86:00:7a:38:16:a9:
                    4f:d2:03:d6:de:d1:01:84:8f:7b:4b:4d:2d:ef:69:
                    73:d4:f3:27:3d:d1:ea:89:a4:8e:31:f9:ee:cd:4c:
                    71:35:e1:31:48:51:72:2e:96:2b:d7:40:5e:d0:84:
                    4b:42:b8:08:9a:3f:47:21:0f:9a:39:c3:b3:27:61:
                    c8:90:54:2a:f0:19:d9:d7:2f:08:df:a9:78:c2:71:
                    80:c4:26:de:c2:9f:22:b3:c4:d1:20:34:9e:f5:4e:
                    df:89:9f:91:1c:b2:e1:10:b1:4a:8c:91:d3:89:d8:
                    6c:c5:c7:02:28:df:db:9c:20:40:5c:d2:59:a4:d2:
                    59:8e:45:1d:48:1d:83:70:0f:99:b6:a6:dd:6b:cb:
                    ae:e0:0f:95:62:c4:71:45:4c:31:c8:14:1f:62:a6:
                    5c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:15:68:C2:5A:82:77:BA:9C:49:0A:DD:2D:EE:92:41:BD:D7:1C:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/150b2426-c419-4e4b-b73d-c495cce8cfdd/bdd55083-6ce6-3837-add9-5ff3851a5c95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/150b2426-c419-4e4b-b73d-c495cce8cfdd/150b2426-c419-4e4b-b73d-c495cce8cfdd.crl

            X509v3 Authority Key Identifier:
                keyid:7B:B0:DE:F8:D8:73:D2:3C:62:65:9C:34:18:FF:AB:19:23:2C:26:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/150b2426-c419-4e4b-b73d-c495cce8cfdd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.41.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:d5:1a:1d:2b:89:e6:91:f5:56:a4:67:85:4c:32:ca:08:16:
         da:29:77:03:2b:79:6c:be:13:0f:57:3c:2a:a4:93:c3:96:db:
         f3:05:66:0b:15:89:29:8a:70:04:db:2f:d8:b0:c8:9b:54:83:
         11:04:d4:8b:a0:93:6b:1b:12:d9:1c:69:72:44:6f:fd:a4:ed:
         9d:33:1c:08:17:b0:79:4d:12:44:ae:04:f6:2c:37:e9:ee:51:
         37:68:be:e1:05:3d:18:a6:e5:5c:81:e1:86:8d:60:45:99:c8:
         6f:03:59:f3:d9:6f:cd:87:ba:1e:72:cb:53:7b:42:4e:35:81:
         b7:b7:e7:76:ca:f3:44:70:d6:b1:11:c6:f4:9b:b3:b6:ab:a5:
         d1:3c:3d:53:cf:82:b4:a0:f5:58:89:6f:ac:e1:5b:51:48:3d:
         c8:63:a6:34:c5:6c:6f:b0:cc:1b:00:cd:f2:88:d0:47:84:8d:
         ad:b6:a7:6a:07:69:66:b8:ed:4e:0b:97:c5:9f:f8:71:04:bf:
         74:0a:b7:cc:f0:f6:1d:0b:f8:06:56:ac:15:1f:20:75:d9:07:
         3e:aa:9e:07:fd:6a:c1:4c:c2:b3:64:07:58:39:db:1c:28:0b:
         06:38:aa:49:65:79:03:8e:80:31:1c:85:9d:50:80:be:2a:99:
         ce:04:56:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 17:42:29 2025 by rpki-client