Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5bdb687b-fffc-3bb7-8589-70270ac9ca84.roa
File:                     5bdb687b-fffc-3bb7-8589-70270ac9ca84.roa (raw, json)
Hash identifier:          t/YIW5EQltHBdxtF+rx9rbe4NrLdE5aOQqsjYfrCKNs=
Subject key identifier:   31:70:9A:DD:3C:1F:B8:67:AC:CE:05:F8:E1:93:CC:2A:7A:5B:9F:D2
Certificate issuer:       /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Certificate serial:       010D0C9F4328584ABF5CC3B6866094A1C76C2180
Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5bdb687b-fffc-3bb7-8589-70270ac9ca84.roa
Signing time:             Mon 04 Aug 2025 18:47:04 +0000
ROA not before:           Mon 04 Aug 2025 18:47:04 +0000
ROA not after:            Sun 02 Nov 2025 19:47:04 +0000
asID:                     46558
IP address blocks:        150.230.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bf:5c:c3:b6:86:60:94:a1:c7:6c:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
        Validity
            Not Before: Aug  4 18:47:04 2025 GMT
            Not After : Nov  2 19:47:04 2025 GMT
        Subject: CN=ea885807-bded-49e9-a167-f1e352c5b345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:18:af:a4:77:8e:f5:6f:a3:36:0b:be:d2:0b:
                    88:0e:77:01:6b:97:54:15:63:a7:50:3d:ab:2c:f6:
                    e9:35:d9:e1:72:59:03:67:5d:a1:26:91:f8:27:e6:
                    a5:6b:39:70:a0:03:6b:eb:44:3b:b7:a6:dc:fe:d9:
                    1f:6d:24:c5:49:7b:c8:4d:0c:07:4a:2c:07:5b:cd:
                    c1:7a:2f:30:75:80:b6:8f:42:65:0e:b2:e0:17:f2:
                    03:ce:92:d3:4d:1f:49:c0:93:92:be:f1:56:0f:5d:
                    fd:e7:6b:cc:e3:7f:2e:62:02:3b:c6:5b:47:31:2b:
                    38:a4:07:c4:1a:14:af:47:91:92:1e:ba:5f:83:05:
                    2d:43:a9:16:07:28:43:de:91:e5:ed:a8:86:a1:a0:
                    03:88:c8:eb:b9:c6:57:a8:2b:dc:6e:64:0a:95:6f:
                    aa:be:9e:ce:61:49:ff:1c:ef:c5:8d:a0:a4:81:1f:
                    27:cc:42:75:b1:47:0a:27:75:d3:51:58:10:25:73:
                    db:92:02:64:ab:37:0b:4c:34:5e:5d:c4:46:dd:09:
                    57:87:63:c8:80:ee:77:55:69:31:0c:31:6c:4a:27:
                    51:b5:14:32:60:a9:ca:09:eb:8b:2a:9f:32:8a:4d:
                    69:a5:66:cd:ea:ea:13:4b:54:97:95:54:0b:27:e5:
                    e6:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:70:9A:DD:3C:1F:B8:67:AC:CE:05:F8:E1:93:CC:2A:7A:5B:9F:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5bdb687b-fffc-3bb7-8589-70270ac9ca84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl

            X509v3 Authority Key Identifier:
                keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.230.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:9f:27:19:85:90:29:2f:f3:30:18:a1:81:5c:38:2c:d0:4f:
         a5:b0:ea:ff:79:39:0a:23:e2:4e:d0:06:9f:6c:6f:7e:58:2d:
         eb:c4:e9:18:8e:6f:6e:c4:6d:47:e9:8b:b6:7c:fe:7d:e7:b1:
         2c:3f:ff:b3:23:0d:95:e1:96:43:46:47:c5:52:6d:90:e1:7b:
         62:72:9f:aa:d7:2b:d9:ff:f6:4f:07:9b:32:ce:70:f9:39:99:
         52:29:9e:89:f0:a7:2f:c1:34:5e:f1:c5:39:a1:74:d2:30:4e:
         f4:8b:65:52:3b:76:79:68:3a:7b:61:be:04:0c:14:d4:a9:9b:
         f9:92:c1:c1:8c:e8:bd:8b:45:39:c1:2c:b0:54:7f:c4:f9:bc:
         71:0f:b4:11:b9:28:5c:48:5f:6a:22:71:88:45:a5:a9:d7:ff:
         47:17:b9:95:f6:9e:7e:69:ae:8c:28:7a:ef:ed:3a:da:a9:06:
         75:55:45:aa:f8:6f:3c:2c:f2:75:18:d7:b8:b6:e5:51:11:1a:
         60:91:13:f4:92:6c:c7:4b:ee:32:3f:b1:a0:bb:58:3a:0d:26:
         fa:ab:82:25:99:72:9b:55:d5:13:29:e1:c1:94:c4:0d:79:69:
         ed:ae:9b:fc:bf:f3:63:87:38:8c:1f:28:17:ce:c8:fc:de:93:
         11:20:0d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 23:59:28 2025 by rpki-client