Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1da1cbb5-b9c9-35f1-a1d6-c4c491a65e67.roa
File:                     1da1cbb5-b9c9-35f1-a1d6-c4c491a65e67.roa (raw, json)
Hash identifier:          JiuS04iukdx936yXyGQ6+2e5O9windTooe4M7Rh0M0k=
Subject key identifier:   CE:32:96:31:F3:43:A9:81:64:3D:19:8F:B7:67:00:82:2F:74:66:AB
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584A89A6273D8A7AC5DDDDC1E5E0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1da1cbb5-b9c9-35f1-a1d6-c4c491a65e67.roa
Signing time:             Wed 16 Jul 2025 13:01:03 +0000
ROA not before:           Wed 16 Jul 2025 13:01:03 +0000
ROA not after:            Tue 14 Oct 2025 13:01:03 +0000
asID:                     13335
IP address blocks:        150.48.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:a6:27:3d:8a:7a:c5:dd:dd:c1:e5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jul 16 13:01:03 2025 GMT
            Not After : Oct 14 13:01:03 2025 GMT
        Subject: CN=3a5c2267-bdd8-42b4-8b77-8286607a1b4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:3f:97:66:75:83:36:a1:bf:af:d8:99:04:71:
                    c8:2b:37:a8:0d:28:7b:44:e1:a1:88:70:6b:7e:25:
                    0d:b7:99:87:e4:56:f3:63:94:23:c5:0c:5a:52:29:
                    61:86:e5:f5:8d:c8:1f:83:b4:66:ed:be:37:a2:17:
                    80:e1:f2:7d:0a:d6:78:ec:bd:18:24:67:15:80:9d:
                    7b:13:c7:0b:98:af:f7:22:e8:e0:6b:e8:f5:fc:4e:
                    fa:c9:77:9c:75:11:16:cd:21:c7:ad:d0:25:2d:87:
                    6b:87:9d:5c:04:12:0a:36:86:28:02:41:8f:62:19:
                    d4:fa:6c:d6:e6:a5:e9:d6:e2:59:fa:97:73:f8:ec:
                    e6:3c:d4:cc:ea:e4:22:e7:1f:3a:ef:a8:26:35:fd:
                    37:60:26:31:39:f7:42:13:c3:11:7e:a8:2f:69:14:
                    e0:e5:7a:62:21:0f:8a:8d:35:31:b0:4c:cd:0a:35:
                    e3:f9:00:13:a5:c3:87:6e:3e:9e:79:a4:61:fb:f1:
                    68:dd:9a:e1:fe:ab:86:b6:12:cd:4b:3e:c6:fa:b8:
                    07:a2:14:09:81:9a:e9:2c:9a:44:c8:3f:39:00:a3:
                    5f:8d:d3:f2:34:54:32:0d:3a:45:18:ad:8d:42:f2:
                    38:05:6c:db:25:78:a5:9c:b1:03:da:0a:69:e7:46:
                    f4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:32:96:31:F3:43:A9:81:64:3D:19:8F:B7:67:00:82:2F:74:66:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1da1cbb5-b9c9-35f1-a1d6-c4c491a65e67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.48.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:ad:7c:f2:27:80:e8:c8:74:75:bb:ee:83:76:db:81:a3:d8:
         09:c0:2a:c2:26:c3:43:5e:2f:cc:34:46:91:2a:7e:be:5b:44:
         3c:c8:e8:7c:2b:40:6d:5a:39:1e:54:0d:cf:47:25:31:98:24:
         e4:fb:d4:ac:40:77:55:0a:48:f9:92:1d:97:d1:81:68:a6:ab:
         30:c4:38:a3:2a:52:64:6b:8d:41:6e:dc:0f:1f:dd:1b:bf:ee:
         06:53:72:0d:5f:2e:f5:6e:d4:5d:47:df:14:52:07:aa:84:b8:
         d7:68:03:32:15:83:96:4e:9c:d1:01:a8:57:89:40:99:86:0d:
         6b:95:27:e3:7d:d9:f5:81:8b:76:f8:f0:4a:65:8f:50:7a:b3:
         ae:4d:68:a7:84:bd:a0:f3:5b:d3:cb:68:d4:d9:f0:1c:05:c4:
         35:e2:92:e0:3d:d4:8e:82:a8:fd:e2:12:f0:30:19:6d:47:68:
         53:90:a5:66:94:06:68:26:67:0b:67:d7:cc:a8:ba:fe:61:04:
         ee:af:0a:0a:62:d2:62:97:6e:c4:94:c9:d0:a1:21:46:b4:f3:
         7d:d8:38:d9:8b:6a:6f:41:d3:44:40:aa:d6:35:5e:44:21:48:
         84:ce:54:c7:c7:da:bd:4b:77:54:b1:04:37:8d:56:5a:1b:73:
         70:fb:c7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 01:31:40 2025 by rpki-client