Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/94a5b142-649d-371a-8c3a-822429553a6a.roa
File:                     94a5b142-649d-371a-8c3a-822429553a6a.roa (raw, json)
Hash identifier:          Akg0ILj+oaN7Q6mWMhoLgDOqZ8uukKY2RjT/y4kiV7w=
Subject key identifier:   6A:62:8B:5B:8B:05:11:80:C9:8F:5F:42:53:0E:35:03:6B:90:DC:11
Certificate issuer:       /CN=109078e4-3ad5-4242-9f3e-058161c97a9f
Certificate serial:       010D0C9F4328584AE5C679938755A69B827C1BA0
Authority key identifier: D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/94a5b142-649d-371a-8c3a-822429553a6a.roa
Signing time:             Mon 18 Aug 2025 13:00:41 +0000
ROA not before:           Mon 18 Aug 2025 13:00:41 +0000
ROA not after:            Sun 16 Nov 2025 14:00:41 +0000
asID:                     46832
IP address blocks:        150.199.4.0/24 maxlen: 24
                          150.199.90.0/24 maxlen: 24
                          207.160.152.0/21 maxlen: 24
                          209.106.228.0/22 maxlen: 24
                          209.106.232.0/21 maxlen: 24
                          209.106.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e5:c6:79:93:87:55:a6:9b:82:7c:1b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=109078e4-3ad5-4242-9f3e-058161c97a9f
        Validity
            Not Before: Aug 18 13:00:41 2025 GMT
            Not After : Nov 16 14:00:41 2025 GMT
        Subject: CN=a7c9b907-c698-4816-8d8d-c2a8e5f6c032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:53:28:13:7b:9f:ad:d8:db:1f:a6:2f:3c:b1:
                    6a:94:6a:fc:a3:c2:f0:c4:56:e6:45:67:b5:f6:7a:
                    52:d6:25:4c:6e:0e:01:49:1d:eb:04:ef:b4:3a:b8:
                    69:4e:af:5d:6c:d2:1d:e3:7b:5f:0f:1f:93:6c:49:
                    5c:5d:e7:b3:a7:02:6e:9f:69:a8:20:49:aa:60:a3:
                    bd:32:2f:fb:c4:d4:4b:a0:6f:76:b3:60:fd:c0:c6:
                    f9:86:ad:e7:b5:99:9a:0a:7f:ce:2d:fb:a2:1e:1a:
                    7b:bb:27:ad:4a:f0:57:8e:b1:f0:98:ae:e2:0c:e8:
                    d0:ef:c3:22:4b:75:f0:3d:46:0e:61:f6:88:a9:43:
                    6b:d1:08:d8:9a:2c:b4:40:8d:0f:70:6e:97:8f:28:
                    ba:cd:94:2e:0e:5a:a1:ee:b2:71:90:25:a0:a7:88:
                    fc:b9:26:95:2c:54:51:3a:c9:76:86:b6:ba:1d:76:
                    9a:e1:c2:88:ff:19:c8:d1:6f:9e:80:3d:07:9a:97:
                    67:f5:1d:55:38:f3:0c:3f:55:33:35:f9:5a:4b:8a:
                    6a:03:c0:8b:20:51:f6:78:b1:f2:3e:f3:4e:0a:68:
                    13:b8:57:e6:1c:3e:cf:d0:08:b5:3c:93:be:4a:25:
                    79:fb:e7:7e:06:97:78:77:f4:2d:48:8a:08:f5:15:
                    64:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:62:8B:5B:8B:05:11:80:C9:8F:5F:42:53:0E:35:03:6B:90:DC:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/94a5b142-649d-371a-8c3a-822429553a6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.crl

            X509v3 Authority Key Identifier:
                keyid:D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.199.4.0/24
                  150.199.90.0/24
                  207.160.152.0/21
                  209.106.228.0-209.106.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:c3:ac:40:bd:80:ca:68:13:ba:64:2b:15:95:21:96:4a:5c:
         bc:1a:eb:1f:76:b6:b8:26:5b:75:ce:36:92:5d:2d:fe:61:bf:
         8b:59:9d:a7:a7:3c:fe:18:69:ea:76:e9:7d:a3:f6:05:98:38:
         04:8e:9d:0c:12:43:eb:56:b0:34:a2:3a:3d:6e:20:03:5b:55:
         f8:96:f9:0f:61:c5:55:19:4c:4f:8b:0d:72:85:93:f4:b4:f4:
         8d:5a:69:65:0e:ea:03:0a:d2:25:f6:bf:75:b0:24:d1:df:bf:
         96:21:32:51:76:4c:10:51:49:6b:6a:cd:2e:09:5c:2c:a0:f0:
         a0:0d:e5:22:12:61:f9:df:9b:d3:70:69:5f:8b:b1:ff:5c:b2:
         e3:92:d8:4d:a0:b8:d2:bc:15:d4:23:d8:74:6c:bb:b1:e0:5e:
         4e:b8:42:da:5d:8f:ea:77:df:4c:61:7e:08:8f:18:47:17:e5:
         fc:19:79:0b:53:13:e1:d0:9b:15:7c:1a:36:16:1d:f7:76:51:
         a0:ad:26:17:21:fc:63:1f:c6:7e:3f:2f:b6:ab:16:11:d1:94:
         8f:cc:27:81:e2:7b:ac:82:6f:f1:7b:71:ab:58:1a:81:43:8c:
         71:61:93:19:a6:43:02:c2:66:ac:d0:b0:01:e5:cc:10:19:aa:
         48:84:8d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 09:35:08 2025 by rpki-client