Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/11da83fa-df64-3eb4-9184-9c8813fb3578.roa
File:                     11da83fa-df64-3eb4-9184-9c8813fb3578.roa (raw, json)
Hash identifier:          poungbRJj8+22rICnoVwKNYG0M0U+PrHcoBoAii2DD8=
Subject key identifier:   89:57:4E:92:B4:F1:82:F9:5F:FB:8B:03:46:18:35:37:B8:46:AE:47
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584A89A622FD9314AB37BFB82C00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/11da83fa-df64-3eb4-9184-9c8813fb3578.roa
Signing time:             Wed 16 Jul 2025 13:01:03 +0000
ROA not before:           Wed 16 Jul 2025 13:01:03 +0000
ROA not after:            Tue 14 Oct 2025 13:01:03 +0000
asID:                     13335
IP address blocks:        150.48.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:a6:22:fd:93:14:ab:37:bf:b8:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jul 16 13:01:03 2025 GMT
            Not After : Oct 14 13:01:03 2025 GMT
        Subject: CN=0a30333d-55db-466d-b514-22bf6c995ba2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:73:15:28:6b:01:c8:69:e6:30:ed:81:c6:20:
                    84:0e:c1:6b:9a:83:7a:48:be:02:0a:6e:e5:01:ce:
                    8b:3d:93:d7:95:f9:75:99:46:c7:1c:cb:b4:cc:0a:
                    59:42:64:41:a7:7d:a7:87:42:10:b3:2d:0e:37:dd:
                    17:53:bd:81:1d:00:2a:65:4e:97:6f:3d:a4:14:1c:
                    53:af:ec:57:fd:b3:30:13:96:0d:2d:0c:49:12:2e:
                    8d:2b:49:3b:94:c6:c4:c3:f5:74:c9:0a:3d:c7:68:
                    b0:0a:23:f1:ad:59:f3:ed:a4:c8:cc:25:7f:8c:eb:
                    1f:6b:81:27:73:b7:ea:0d:61:0e:5f:ad:f5:fc:93:
                    93:f4:53:6a:2e:14:14:4c:67:52:b7:33:cf:9e:c8:
                    95:f7:43:eb:f0:13:54:5c:67:ec:69:cf:99:a4:71:
                    c6:f2:dc:ae:95:36:f2:10:3c:d3:b7:da:28:05:7e:
                    34:56:5f:f2:5c:c2:65:29:53:7b:88:ae:25:fb:da:
                    0a:6c:5a:5c:d8:5f:7a:4c:0e:f8:b1:9f:2b:c3:64:
                    ad:dc:24:92:42:db:0b:47:86:0c:5f:57:c8:a6:be:
                    77:fb:61:61:8e:a2:28:b2:de:be:e4:15:10:21:35:
                    95:ba:be:be:29:e6:60:c3:4e:86:bb:cd:21:d2:b8:
                    23:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:57:4E:92:B4:F1:82:F9:5F:FB:8B:03:46:18:35:37:B8:46:AE:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/11da83fa-df64-3eb4-9184-9c8813fb3578.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.48.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:5c:8e:00:d5:b8:9a:3d:a7:c1:d4:ed:6e:fd:26:68:e1:c6:
         91:d2:41:8c:cc:74:64:c7:f8:3f:71:04:90:51:26:45:7e:9f:
         93:71:03:53:71:6d:b3:9b:e6:be:5e:f7:2c:8d:a9:24:4b:2b:
         02:2e:b9:1d:5e:41:36:f6:be:61:0c:5f:3d:70:24:05:09:86:
         f7:91:e1:b8:5f:c6:b9:fe:da:bf:f8:e4:23:55:65:69:6e:a6:
         54:a6:81:ca:d1:c8:e1:5b:6b:65:f3:67:41:30:78:39:5e:a9:
         ac:f0:10:d4:a1:71:ea:15:9f:aa:5e:46:a3:bd:ae:35:b4:ef:
         dd:96:c3:a2:ca:27:49:ce:8b:df:a1:38:99:80:2c:f8:80:8e:
         e7:27:ee:2a:0a:91:03:a9:91:a6:cd:06:44:28:1f:1d:9f:67:
         a0:22:bd:b3:4d:02:f7:27:1d:13:ce:d3:a1:4c:2b:aa:bb:b9:
         80:02:18:2b:b2:69:d7:4d:dc:54:d0:e6:17:25:df:91:e0:f4:
         da:45:df:34:06:69:b4:e0:e9:79:6b:f9:3d:c8:6b:1e:fd:c7:
         fa:56:bf:d8:72:1d:63:f2:d7:50:a5:03:ba:d3:90:1b:b8:89:
         be:98:f4:40:11:e4:0f:30:65:51:d5:4f:99:23:d0:83:fc:0a:
         b8:e6:92:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 01:31:27 2025 by rpki-client