Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/2dce9a0f-c56d-3e96-842c-538dc9f12a74.roa
File:                     2dce9a0f-c56d-3e96-842c-538dc9f12a74.roa (raw, json)
Hash identifier:          b9PNxdQ0Xpd2Y854SGId1qpa/PvYDsNOiAfQvNGDQwc=
Subject key identifier:   BA:B4:81:89:C6:71:29:3F:B5:AC:9E:75:0D:48:D7:A7:15:23:77:4D
Certificate issuer:       /CN=28d0c262-8ea2-444a-ab1e-6d07c3483e45
Certificate serial:       010D0C9F4328584BBD09D2D5011ED1033986B9AC
Authority key identifier: 7B:FD:21:C3:F3:A0:5F:FC:74:CB:DE:A6:8F:D9:34:04:EC:8B:08:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/2dce9a0f-c56d-3e96-842c-538dc9f12a74.roa
Signing time:             Thu 02 Oct 2025 01:29:37 +0000
ROA not before:           Thu 02 Oct 2025 01:29:37 +0000
ROA not after:            Wed 31 Dec 2025 02:29:37 +0000
asID:                     401362
IP address blocks:        216.150.75.0/24 maxlen: 24
                          216.150.77.0/24 maxlen: 24
                          216.150.78.0/24 maxlen: 24
                          216.150.83.0/24 maxlen: 24
                          216.150.84.0/24 maxlen: 24
                          216.150.90.0/24 maxlen: 24
                          216.150.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/28d0c262-8ea2-444a-ab1e-6d07c3483e45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/28d0c262-8ea2-444a-ab1e-6d07c3483e45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bd:09:d2:d5:01:1e:d1:03:39:86:b9:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28d0c262-8ea2-444a-ab1e-6d07c3483e45
        Validity
            Not Before: Oct  2 01:29:37 2025 GMT
            Not After : Dec 31 02:29:37 2025 GMT
        Subject: CN=a0181c5d-bf2a-41fb-952e-0ba9c7600b46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:29:a1:17:fc:46:fa:5e:48:48:5a:b7:06:85:
                    c5:37:23:74:31:26:f4:f8:3c:07:bd:ec:ed:2e:a2:
                    ee:7c:9c:b4:bc:25:b5:0b:9e:6f:81:4b:51:63:ee:
                    52:1c:7f:af:42:e5:e6:22:4e:49:cc:d1:de:25:b1:
                    45:9c:16:83:2d:9a:8d:df:72:e5:44:b2:87:0f:32:
                    56:97:be:99:28:37:33:11:50:7f:c1:2d:eb:99:67:
                    72:78:8e:29:ff:9f:67:48:3c:9a:9c:b0:c7:ff:78:
                    08:e5:83:e6:3b:aa:74:e8:ad:a1:3a:a7:3e:c5:c9:
                    bf:cd:f7:ca:c9:fa:b1:9f:8a:1d:3d:8c:7a:c1:07:
                    d0:1d:9c:09:ec:ee:03:c4:a5:37:77:eb:15:74:8b:
                    e9:87:6b:b3:99:02:80:d7:a6:1a:6e:43:2a:eb:21:
                    73:05:c7:dd:e6:04:ad:9a:9e:da:7a:6d:df:5a:17:
                    ac:f8:6f:9b:d8:9a:54:5f:21:2d:b6:bb:74:36:26:
                    e5:e6:97:98:15:f5:80:71:28:11:9b:e4:2a:82:41:
                    71:da:66:d1:6b:59:6e:b0:eb:d4:33:e4:10:56:68:
                    7f:7f:17:db:e1:aa:6b:84:72:a3:75:7c:a6:12:ef:
                    42:67:a7:04:3b:f9:ea:84:e4:24:14:fe:c4:b3:b6:
                    a1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:B4:81:89:C6:71:29:3F:B5:AC:9E:75:0D:48:D7:A7:15:23:77:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/2dce9a0f-c56d-3e96-842c-538dc9f12a74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/28d0c262-8ea2-444a-ab1e-6d07c3483e45.crl

            X509v3 Authority Key Identifier:
                keyid:7B:FD:21:C3:F3:A0:5F:FC:74:CB:DE:A6:8F:D9:34:04:EC:8B:08:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.150.75.0/24
                  216.150.77.0-216.150.78.255
                  216.150.83.0-216.150.84.255
                  216.150.90.0/24
                  216.150.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:39:1d:24:8e:2e:7b:4d:3e:09:53:95:89:9b:5d:f9:04:6c:
         1f:2e:22:68:f6:b8:bd:89:87:f8:7e:99:84:07:5d:6d:ee:db:
         7d:e4:a7:8e:2a:fb:89:06:25:64:f9:42:81:69:a1:2a:4f:52:
         f2:2f:d7:06:96:ef:07:0b:ce:f9:9c:94:38:f8:3e:8f:89:67:
         73:43:4c:c2:a0:f7:c5:5b:3f:07:ac:3d:80:83:5e:ef:6f:5e:
         e0:99:8e:b2:5b:ba:33:7c:be:a8:51:23:87:56:27:5f:b4:68:
         bd:ac:5e:eb:09:42:0c:75:ca:c4:ec:0b:42:d3:a5:d1:02:d6:
         bd:d2:83:a3:3b:fc:d8:3d:e2:15:e2:07:42:da:f4:9f:92:5b:
         0a:2d:e7:c0:ab:8c:d1:20:d3:4d:b1:a2:76:e2:40:67:a6:ef:
         7e:7a:b2:2c:f4:fe:a0:f9:6a:3d:0f:2c:35:47:7f:e5:ad:48:
         c9:67:be:5d:c9:98:c7:46:98:c0:f7:2a:3e:a3:f3:47:19:a7:
         85:28:d7:bf:97:fc:6d:de:b3:7c:20:d9:54:b0:43:46:8d:d6:
         2f:79:a4:c0:b6:57:1e:7e:f1:ef:40:63:c5:97:d0:61:4a:8b:
         60:4b:34:0e:19:d7:09:60:48:1a:91:de:0f:ec:5c:07:2d:f0:
         4a:87:cb:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:49:05 2025 by rpki-client