Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/866a1286-9086-381c-bebe-035302ba5bb7.roa
File:                     866a1286-9086-381c-bebe-035302ba5bb7.roa (raw, json)
Hash identifier:          OVchVs54aOusULWxZ2smrwfUlH6+2+9Vj5sqSKPTPFI=
Subject key identifier:   30:48:FF:23:FB:0F:41:52:1F:16:4A:43:87:55:CE:CB:10:47:9D:BD
Certificate issuer:       /CN=0dbbf3fd-cf6e-4de7-8126-d6e41824d105
Certificate serial:       010D0C9F4328584B4BAC58BC125A74630D540540
Authority key identifier: E8:A7:84:21:AC:67:CB:61:5B:12:37:63:55:E4:24:3A:7A:6C:92:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/866a1286-9086-381c-bebe-035302ba5bb7.roa
Signing time:             Wed 24 Sep 2025 01:00:31 +0000
ROA not before:           Wed 24 Sep 2025 01:00:31 +0000
ROA not after:            Tue 23 Dec 2025 02:00:31 +0000
asID:                     16509
IP address blocks:        150.9.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4b:ac:58:bc:12:5a:74:63:0d:54:05:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dbbf3fd-cf6e-4de7-8126-d6e41824d105
        Validity
            Not Before: Sep 24 01:00:31 2025 GMT
            Not After : Dec 23 02:00:31 2025 GMT
        Subject: CN=91a18b7b-e5a8-4715-b2f6-3adbe508094e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e6:70:fe:3b:1e:2b:e6:4a:f6:fd:c1:1c:f4:
                    74:3e:ea:4d:21:c3:7a:60:4e:55:cf:df:64:81:62:
                    90:da:2c:a5:be:84:02:0b:ad:05:15:31:dc:0e:d0:
                    9d:d7:d5:da:38:a3:d8:6f:9b:1d:63:cd:47:1e:42:
                    95:54:4b:d3:3b:fb:fa:94:d5:8b:64:7f:36:2e:84:
                    d7:58:27:b8:ab:00:d8:12:be:13:3d:99:d3:26:e6:
                    e2:f2:46:0c:04:2d:6a:e5:74:83:f6:a1:3a:a2:b2:
                    9f:5f:1c:28:8e:35:49:ff:25:72:72:56:f5:1e:a8:
                    db:15:d0:51:aa:8e:9b:66:bb:0f:24:0b:b0:fe:15:
                    7d:2b:8a:c6:23:7b:c5:de:59:7e:d5:8f:b4:e3:64:
                    44:2a:5d:1d:73:6e:88:f6:20:5a:94:46:cc:fd:b0:
                    19:bc:48:f1:53:3f:6b:ab:b4:0f:89:f6:1b:9f:54:
                    b5:99:76:b4:cb:d0:75:72:f8:9c:9e:2f:52:ae:52:
                    3c:ce:1f:8e:84:b4:88:c9:71:9c:41:a8:b7:a4:48:
                    f4:31:78:f8:1e:98:08:e9:81:7b:d8:d3:87:65:a1:
                    1f:c5:1c:43:40:55:ad:ee:c3:c4:22:17:9b:56:6c:
                    f1:c3:76:c1:ae:bb:b3:86:28:b2:bf:86:7b:ee:88:
                    4e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:48:FF:23:FB:0F:41:52:1F:16:4A:43:87:55:CE:CB:10:47:9D:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/866a1286-9086-381c-bebe-035302ba5bb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.crl

            X509v3 Authority Key Identifier:
                keyid:E8:A7:84:21:AC:67:CB:61:5B:12:37:63:55:E4:24:3A:7A:6C:92:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.9.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:78:20:50:2f:55:e7:09:2e:33:ee:9f:2c:f1:7a:18:eb:2d:
         ae:12:e2:52:e7:c3:d2:e2:9e:6d:3c:09:99:44:aa:51:78:36:
         7c:22:f3:bc:81:40:d9:83:f2:c1:e5:00:2b:d2:65:75:63:ba:
         b8:96:ee:35:2f:0b:88:72:ef:80:e9:37:5e:2a:80:76:72:b2:
         37:0f:94:83:f7:32:00:12:c2:30:2b:12:71:9d:24:71:1f:59:
         83:29:d6:07:3a:95:b4:0e:70:c3:85:d9:1f:5e:e9:5d:97:65:
         4b:47:f4:4b:2e:a1:6d:ff:97:a8:62:40:db:b4:6a:9d:1a:3b:
         cb:63:80:84:7c:19:f4:56:37:d4:c2:0d:29:20:fc:e9:bf:1a:
         98:10:46:b9:aa:df:2d:64:d2:4a:4c:d1:b4:8e:a2:48:d9:10:
         ca:38:29:7c:9b:41:e2:33:61:e0:fa:bc:c4:48:48:b0:ba:0f:
         84:cc:14:19:82:52:ac:30:ba:1f:c8:45:80:cf:9d:d9:56:cf:
         46:49:ea:db:b1:fe:bd:15:3a:4f:9a:cb:4f:5b:5f:c1:c0:9e:
         e6:1a:e5:01:9e:c7:02:ef:93:4d:2d:a5:03:7c:03:69:8c:b0:
         50:d4:80:c3:97:81:66:8e:2d:94:a9:a4:66:29:16:fc:74:d9:
         bd:41:26:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:05:42 2025 by rpki-client