Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff/8916b605-f1b7-343c-b58f-f1991f2406cb.roa
File:                     8916b605-f1b7-343c-b58f-f1991f2406cb.roa (raw, json)
Hash identifier:          yt8nnXnppmXxBA1O8MeKdEq8i9NSLGQ3Ofc5fMQ5r+w=
Subject key identifier:   14:20:96:8B:93:46:F9:7E:7C:82:3F:4A:AB:02:1D:CA:6A:45:B8:21
Certificate issuer:       /CN=804758a5-8bfa-463f-a66c-d50aa7237fff
Certificate serial:       010D0C9F4328584ADECBC1867D3DE489D1EC1440
Authority key identifier: C5:AC:F5:21:04:22:63:10:CB:AA:76:9F:4D:D9:1D:6F:49:B9:93:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff/8916b605-f1b7-343c-b58f-f1991f2406cb.roa
Signing time:             Sat 16 Aug 2025 01:00:33 +0000
ROA not before:           Sat 16 Aug 2025 01:00:33 +0000
ROA not after:            Fri 14 Nov 2025 02:00:33 +0000
asID:                     22828
IP address blocks:        150.148.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff/804758a5-8bfa-463f-a66c-d50aa7237fff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff/804758a5-8bfa-463f-a66c-d50aa7237fff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:de:cb:c1:86:7d:3d:e4:89:d1:ec:14:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=804758a5-8bfa-463f-a66c-d50aa7237fff
        Validity
            Not Before: Aug 16 01:00:33 2025 GMT
            Not After : Nov 14 02:00:33 2025 GMT
        Subject: CN=326a9bd5-7e3a-467c-b68a-ac8a9c9f280e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:6e:0b:df:33:48:c4:65:98:7c:db:0b:3c:66:
                    53:20:fa:5a:78:fa:f5:f7:53:53:fb:4b:81:a0:ea:
                    b2:8b:4a:7d:f5:77:ec:9d:72:8f:0d:ca:e7:5e:3e:
                    a7:d0:96:0d:c9:3f:fd:01:7e:6e:d0:79:6f:22:d8:
                    9a:af:21:56:47:50:06:05:21:e5:cd:c3:98:15:eb:
                    d6:2c:f7:92:34:5e:52:f2:53:22:d2:6e:cf:f4:4c:
                    a6:a5:4e:d9:8e:82:31:47:e8:4d:8a:5a:94:c4:61:
                    55:86:54:94:b1:4b:6a:a8:10:f7:44:00:7c:74:5e:
                    7e:2b:87:0b:0f:c7:a6:ca:65:fd:90:86:53:ed:02:
                    12:dc:9a:11:4b:aa:28:00:d2:93:5b:ad:e3:62:a5:
                    e7:9b:47:a4:07:b3:45:82:06:61:6a:72:ad:bf:fa:
                    1f:a3:41:e5:dd:51:d1:26:53:10:29:8c:13:6f:06:
                    60:b4:2d:9b:20:b4:29:ea:51:4b:27:63:45:cf:50:
                    3a:4f:f8:15:2e:35:c5:d3:54:82:2a:8e:80:f3:32:
                    f9:4e:16:ef:66:b3:fb:48:4e:6d:a8:03:20:a0:6a:
                    d6:97:9d:12:9c:c0:af:bd:77:f9:3a:d4:96:85:8f:
                    b5:95:2c:1f:94:36:2e:ef:24:6a:89:f7:c6:3f:6f:
                    fc:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:20:96:8B:93:46:F9:7E:7C:82:3F:4A:AB:02:1D:CA:6A:45:B8:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff/8916b605-f1b7-343c-b58f-f1991f2406cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff/804758a5-8bfa-463f-a66c-d50aa7237fff.crl

            X509v3 Authority Key Identifier:
                keyid:C5:AC:F5:21:04:22:63:10:CB:AA:76:9F:4D:D9:1D:6F:49:B9:93:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.148.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:a7:c2:c0:2e:31:1f:73:57:e3:7e:69:bd:d5:e8:2b:07:68:
         ec:af:c9:37:09:b6:f5:b0:c3:fe:85:06:6c:c1:dc:7b:20:7f:
         8e:ae:49:98:9e:48:23:e8:8f:44:88:04:83:2a:b3:6c:ef:6d:
         79:3a:19:40:14:58:be:fa:c2:5b:0b:2e:b9:d6:c8:9b:23:d6:
         13:ea:93:b2:78:eb:3e:c5:1d:db:a3:37:76:f7:3c:b3:c8:5c:
         47:39:57:a4:cc:74:95:fc:8a:f0:7f:91:91:7f:2c:3c:3c:b7:
         ca:8d:e3:94:66:ab:f6:a3:d4:55:61:b4:cb:22:a4:70:a8:fc:
         c1:e2:ab:c7:02:30:fb:8a:e9:bf:6a:51:e1:19:c8:6a:a8:a3:
         9f:53:ad:1f:f2:b0:42:b2:20:a9:eb:a5:d6:67:fd:95:24:5d:
         d5:8b:2e:4a:64:9b:ec:d1:20:c6:a1:30:20:56:0c:33:01:ae:
         4c:aa:18:a8:5a:5d:49:b1:02:f7:2a:19:63:3b:af:ec:ba:85:
         0d:ef:3d:92:10:0f:12:ee:c1:11:15:7c:89:26:00:f2:7c:af:
         93:5e:12:e4:da:84:6f:fd:3b:29:b1:ad:fd:69:cd:78:f6:67:
         b7:c6:03:ac:2f:f9:d7:00:37:a7:af:d5:90:66:72:b8:d1:70:
         34:31:77:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:59:32 2025 by rpki-client