Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/b84fb6ca-55a6-3935-b280-50558e2fec3f.roa
File:                     b84fb6ca-55a6-3935-b280-50558e2fec3f.roa (raw, json)
Hash identifier:          Hdy5rkjbb55D1u/irVJeZucrhYYySfMHt6tqbOywhQk=
Subject key identifier:   C0:98:5A:AE:8A:E1:CE:CA:C3:C9:B0:7F:BC:12:C8:C2:B4:67:95:75
Certificate issuer:       /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Certificate serial:       010D0C9F4328584AEDDAAC90880A1B6A3E8697C0
Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/b84fb6ca-55a6-3935-b280-50558e2fec3f.roa
Signing time:             Thu 21 Aug 2025 10:27:57 +0000
ROA not before:           Thu 21 Aug 2025 10:27:57 +0000
ROA not after:            Wed 19 Nov 2025 11:27:57 +0000
asID:                     31898
IP address blocks:        150.230.224.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ed:da:ac:90:88:0a:1b:6a:3e:86:97:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
        Validity
            Not Before: Aug 21 10:27:57 2025 GMT
            Not After : Nov 19 11:27:57 2025 GMT
        Subject: CN=8e35f63b-dc37-499b-b159-fc3eb6e811c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f6:ec:86:ab:9f:60:e4:2e:46:d9:95:3f:c2:
                    11:16:20:d2:02:fd:ac:3c:e8:88:5f:68:90:11:8f:
                    bb:36:29:bb:2d:7e:24:dc:34:46:ca:69:cf:f2:18:
                    74:9d:74:c2:18:c2:d1:f3:c9:a4:b9:71:ce:52:6f:
                    23:87:5a:be:b5:04:64:9d:49:b3:b6:20:b7:7a:fb:
                    5d:0b:21:6c:31:ee:40:17:57:b1:ea:2c:78:9c:30:
                    3f:0a:8b:ec:cc:ba:71:33:04:16:eb:2a:7a:ec:50:
                    09:6a:08:bb:00:84:6c:c2:bc:34:61:13:3d:8a:9d:
                    ec:ae:48:9b:cf:7f:49:de:b3:22:27:97:02:45:c0:
                    6a:54:31:3e:46:2d:3b:21:3a:98:07:9c:b2:29:17:
                    95:79:cc:3c:58:e2:d7:a7:3d:64:ed:db:12:4d:a3:
                    84:c6:56:b5:5c:3e:b0:5a:ba:4a:34:30:ed:ed:09:
                    67:61:ac:ac:8e:9e:da:d9:13:7a:fc:a8:b4:3a:c5:
                    a5:07:52:65:0e:1b:9f:df:fa:6b:1f:7c:7c:cd:09:
                    b4:ed:f7:16:71:b7:dd:d6:e0:cb:3a:67:fd:41:5c:
                    da:57:5b:c1:e3:48:4a:4e:99:e6:38:c8:23:6a:13:
                    7e:0e:3f:a8:55:54:bf:9a:ea:40:e4:7b:45:29:30:
                    2b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:98:5A:AE:8A:E1:CE:CA:C3:C9:B0:7F:BC:12:C8:C2:B4:67:95:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/b84fb6ca-55a6-3935-b280-50558e2fec3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl

            X509v3 Authority Key Identifier:
                keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.230.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:62:90:c3:ec:c7:b9:e3:8b:2e:77:1f:bc:23:37:74:ea:8b:
         9f:4d:1a:8f:98:1d:e5:d6:34:20:d3:0e:e2:ad:cd:1e:bc:c0:
         45:dc:2d:f6:f0:2e:2f:89:c9:21:4e:97:54:ba:dd:a9:1b:c3:
         14:5a:5e:1a:05:c4:07:8c:18:e4:72:7b:94:01:71:b0:37:6f:
         28:8c:41:94:88:d1:78:bb:5b:c5:00:31:27:54:54:f3:37:e1:
         7a:c9:5e:92:9a:f2:70:73:e6:3b:11:5b:63:52:03:85:0b:89:
         12:48:d3:a1:00:a5:04:49:8c:11:da:ae:48:ff:67:57:34:e8:
         86:d0:72:a7:a9:76:e2:0c:fe:fd:98:c4:4b:29:e9:4a:79:28:
         81:cb:20:cf:f1:ba:03:95:65:bb:72:cf:5e:d5:ac:43:8f:90:
         cc:34:71:84:96:e2:bd:1b:18:81:ae:33:6d:93:8c:b7:17:fa:
         b1:ed:e6:d3:e4:b9:8c:07:6c:8a:8f:12:18:c5:47:37:00:46:
         35:e5:5b:e8:63:a1:af:b4:19:38:35:9a:fd:2d:3a:3a:d9:85:
         79:b5:11:ee:eb:26:3d:8c:8a:bc:03:af:93:aa:32:ed:43:da:
         33:f4:3a:62:6a:33:ff:34:1b:90:56:f9:51:d3:ae:6f:f4:f2:
         aa:32:15:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:56:10 2025 by rpki-client