Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/22718d88-48b5-3782-a513-eaeb2a6d5a39.roa
File:                     22718d88-48b5-3782-a513-eaeb2a6d5a39.roa (raw, json)
Hash identifier:          WyQLft2LATw8U0mAVTee2ONUOrkW0sGZyCiUxsLeOj0=
Subject key identifier:   EB:CC:D8:66:17:91:1F:94:4C:70:1F:46:D0:84:5F:00:18:C6:9E:C9
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584A89A6240C9960444805F78E40
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/22718d88-48b5-3782-a513-eaeb2a6d5a39.roa
Signing time:             Wed 16 Jul 2025 13:01:03 +0000
ROA not before:           Wed 16 Jul 2025 13:01:03 +0000
ROA not after:            Tue 14 Oct 2025 13:01:03 +0000
asID:                     13335
IP address blocks:        150.48.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:a6:24:0c:99:60:44:48:05:f7:8e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jul 16 13:01:03 2025 GMT
            Not After : Oct 14 13:01:03 2025 GMT
        Subject: CN=c3326a09-6c61-43b3-b846-6c7b785bd2f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:de:1f:48:9b:87:1c:94:21:a3:7b:df:01:50:
                    9b:09:1b:f7:3a:d4:bf:28:9a:7c:dc:03:fd:46:da:
                    98:f6:85:33:f4:24:a1:6b:14:da:e6:16:f1:2f:39:
                    64:87:f8:b9:66:84:bc:20:f2:2b:44:32:a5:29:d8:
                    ec:14:e2:89:e5:61:fb:bb:4a:65:5f:5e:9e:f9:ba:
                    63:d7:02:f4:af:62:87:26:3c:f5:66:ef:7d:bf:45:
                    4c:b6:3d:ca:13:12:b3:a4:1c:8b:d8:37:bd:da:ef:
                    60:8e:de:3b:0e:60:b6:7a:b3:70:65:6a:75:9e:78:
                    08:3c:d3:83:32:fd:50:f2:ff:f8:d3:cb:01:48:41:
                    b8:a0:62:97:c1:43:ae:2c:66:72:1f:d4:e2:57:3e:
                    ce:89:68:96:86:3f:1d:19:e5:76:0a:c2:b6:94:11:
                    19:ec:a1:a2:02:4a:fa:7a:22:a6:a4:28:07:b8:64:
                    27:2a:cc:69:df:32:99:f7:35:ab:32:fb:67:21:5d:
                    ed:0a:55:12:54:cd:73:07:3d:fd:df:21:cc:34:92:
                    65:1d:c2:f4:2b:12:d7:ed:94:51:e8:d7:1c:f1:f7:
                    a3:75:0d:e1:d4:5e:21:c5:5a:e6:95:56:c7:e9:8f:
                    f2:43:c7:a1:b4:2d:9e:30:95:91:62:0b:fa:e5:88:
                    df:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:CC:D8:66:17:91:1F:94:4C:70:1F:46:D0:84:5F:00:18:C6:9E:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/22718d88-48b5-3782-a513-eaeb2a6d5a39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.48.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:54:7d:47:5e:d5:32:26:ab:92:eb:96:60:dc:31:7a:1e:2d:
         bf:31:c9:a5:58:3a:9b:36:64:0d:34:b4:dd:fb:25:68:a5:40:
         4c:72:0b:ca:fc:b6:1f:7b:d7:00:52:45:77:44:f7:ba:73:5e:
         b4:b3:1e:5c:cf:03:36:d2:de:e8:11:d9:e3:69:17:ad:02:3a:
         31:60:b2:04:76:8a:94:1d:1f:5a:df:40:08:d0:4e:09:c3:ae:
         1e:09:9d:b1:54:38:8f:ba:be:c7:24:9e:71:42:6d:39:f0:b2:
         04:e8:1d:c1:ec:10:b2:3f:77:cc:d9:f8:11:ec:0f:05:5a:46:
         bb:71:b2:5e:e1:c0:2f:c3:9d:57:47:25:4f:92:dc:76:9a:8a:
         ab:09:65:d4:56:7d:14:16:fe:8a:59:7a:7c:c0:1c:28:d6:cc:
         18:89:a4:08:60:6a:67:2a:38:eb:a9:eb:7f:7b:c9:cc:22:a4:
         8c:7d:79:44:32:36:a3:0d:05:73:0b:d7:3c:32:68:ac:67:87:
         69:91:11:67:a3:99:4f:f6:a8:e5:ac:42:7d:61:c7:91:fe:4c:
         3a:7d:d7:d2:57:6e:c4:0b:c3:b1:d0:14:e7:9c:19:9f:40:ff:
         b7:cc:ca:21:bf:43:84:4b:dd:cb:80:0f:71:44:48:83:d4:87:
         ed:c3:0f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 01:35:19 2025 by rpki-client