Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/95f24bfe-6ffa-3c46-b39b-fcc6bb14c497.roa
File:                     95f24bfe-6ffa-3c46-b39b-fcc6bb14c497.roa (raw, json)
Hash identifier:          LPHso4iZFMGIw8eRnknQJWDJHrrYN7clc8/W5ei4rh0=
Subject key identifier:   80:58:AE:7F:16:55:A5:DE:98:B9:B2:78:9A:74:69:FD:24:16:DD:87
Certificate issuer:       /CN=e3fada49-b353-4a69-9b32-1b6ab3729db1
Certificate serial:       010D0C9F4328584B84E79AFCA024DFD0DB05B200
Authority key identifier: 26:E9:72:DD:F2:AB:6A:0B:0F:65:29:13:47:2F:D8:DF:E5:06:3D:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/95f24bfe-6ffa-3c46-b39b-fcc6bb14c497.roa
Signing time:             Tue 14 Oct 2025 13:00:37 +0000
ROA not before:           Tue 14 Oct 2025 13:00:37 +0000
ROA not after:            Mon 12 Jan 2026 14:00:37 +0000
asID:                     3855
IP address blocks:        207.228.150.0/24 maxlen: 24
                          207.228.151.0/24 maxlen: 24
                          207.228.152.0/24 maxlen: 24
                          207.228.153.0/24 maxlen: 24
                          207.228.154.0/24 maxlen: 24
                          207.228.155.0/24 maxlen: 24
                          207.228.156.0/24 maxlen: 24
                          207.228.157.0/24 maxlen: 24
                          207.228.158.0/24 maxlen: 24
                          207.228.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:84:e7:9a:fc:a0:24:df:d0:db:05:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3fada49-b353-4a69-9b32-1b6ab3729db1
        Validity
            Not Before: Oct 14 13:00:37 2025 GMT
            Not After : Jan 12 14:00:37 2026 GMT
        Subject: CN=fdfd151b-4d9f-402a-a56a-0e98d38da8c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:99:57:38:6a:11:9d:e4:6f:04:4a:95:b9:6d:
                    23:22:55:0e:17:50:16:1f:69:d9:81:e1:86:f1:db:
                    bf:d7:12:84:30:84:bb:3f:2e:40:7f:bf:ad:da:d4:
                    6c:59:e6:d2:cf:d0:cc:b1:ef:30:28:77:90:7e:b7:
                    cc:21:2a:ff:30:55:15:dd:19:59:61:0a:70:cc:27:
                    0c:50:82:1d:34:91:19:04:a1:d5:07:b9:fd:b0:4f:
                    6a:df:61:f0:ad:37:5e:c9:33:f7:a2:97:a3:25:05:
                    f1:21:e2:b4:2c:6b:87:1f:ce:94:c0:95:78:56:d5:
                    b6:d2:ed:75:62:53:40:df:4a:1a:41:ee:dc:80:b4:
                    7b:17:5f:98:dc:23:c5:13:54:18:51:46:66:cd:86:
                    d4:44:ea:e7:0c:36:d3:c9:20:92:ec:14:41:2d:2d:
                    cd:63:68:e7:31:62:90:e1:82:1a:3c:32:f7:81:63:
                    fd:2e:23:7e:e3:f1:74:a7:91:39:93:51:85:62:6e:
                    a2:c1:7b:59:33:69:e1:68:b8:5c:8d:79:dc:80:5d:
                    8c:56:d5:c7:87:d8:77:a6:60:c2:bf:dd:9a:e8:f7:
                    4d:fb:b3:6a:f1:ca:e3:e7:f2:c2:ae:a3:53:11:e0:
                    d1:88:26:95:14:a6:13:85:d7:6c:1f:33:30:49:22:
                    f7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:58:AE:7F:16:55:A5:DE:98:B9:B2:78:9A:74:69:FD:24:16:DD:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/95f24bfe-6ffa-3c46-b39b-fcc6bb14c497.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.crl

            X509v3 Authority Key Identifier:
                keyid:26:E9:72:DD:F2:AB:6A:0B:0F:65:29:13:47:2F:D8:DF:E5:06:3D:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.228.150.0-207.228.159.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:8b:a5:53:86:9b:a0:e6:b1:49:a7:7a:70:45:09:60:66:f6:
         76:09:4c:7a:e7:fe:53:29:30:6d:d4:61:18:e1:be:c8:77:1a:
         63:ad:14:e7:7d:a6:c6:c7:77:9a:95:1b:4e:3b:68:c5:0b:8b:
         83:39:5b:b6:42:3c:8f:ca:3c:a7:17:fa:83:6d:ae:0b:3b:d2:
         08:7e:9e:85:30:75:e7:77:20:45:f1:1d:c3:c8:10:4b:67:da:
         dc:d3:18:9b:17:75:3f:47:f1:be:d4:be:61:a4:a0:fc:0d:23:
         36:e7:d8:b9:6f:01:db:bd:b5:4d:bd:c6:af:21:3f:92:e9:dd:
         87:15:4b:88:f8:a3:14:af:35:77:fd:ba:ad:11:a4:3d:78:ad:
         95:25:3b:86:5d:a1:67:fa:db:69:b7:aa:7a:61:4a:84:7f:a5:
         d5:c8:cc:38:01:e6:28:de:18:4b:82:b2:21:82:ed:fd:f7:38:
         f1:01:f5:f5:82:af:16:87:a8:56:58:0c:38:39:ac:26:12:28:
         b1:bb:5e:85:1d:ed:2b:08:ba:dc:09:36:d9:71:df:c5:87:2e:
         0d:25:56:62:79:a8:a6:77:16:bc:6d:01:a3:6f:74:0c:b8:5e:
         45:d7:5b:39:0e:72:89:ab:3a:4b:9b:3e:51:5f:f0:80:31:df:
         fb:55:d2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:55:12 2025 by rpki-client