Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3f343bd9-680f-3702-b991-0e48f54f6f74.roa
File:                     3f343bd9-680f-3702-b991-0e48f54f6f74.roa (raw, json)
Hash identifier:          0eSZYWyrHKlr5R3ELR3HBt+y4fdjs1HSDUdMuZkkZfw=
Subject key identifier:   71:60:7D:83:62:16:38:F2:CF:69:2D:8F:AF:9A:76:6A:68:36:F0:59
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584A89A625104B9FF790E5A43080
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3f343bd9-680f-3702-b991-0e48f54f6f74.roa
Signing time:             Wed 16 Jul 2025 13:01:03 +0000
ROA not before:           Wed 16 Jul 2025 13:01:03 +0000
ROA not after:            Tue 14 Oct 2025 13:01:03 +0000
asID:                     13335
IP address blocks:        150.48.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:a6:25:10:4b:9f:f7:90:e5:a4:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jul 16 13:01:03 2025 GMT
            Not After : Oct 14 13:01:03 2025 GMT
        Subject: CN=8aa2aacc-0ca7-4ba2-bb5f-43db131a1968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:97:4d:60:73:95:21:2d:d6:c0:c0:64:78:57:
                    32:52:5d:75:04:18:6c:7e:29:02:71:bf:64:e9:40:
                    b7:f2:ba:7a:18:ef:2c:87:ff:a6:8f:45:b8:57:0e:
                    32:3a:6e:8f:86:37:d3:95:49:ab:05:e1:f3:12:e9:
                    1d:0a:b8:ce:04:96:6e:56:7a:a9:50:7d:74:23:95:
                    a3:6b:c9:af:f1:8d:c4:30:f8:d2:a0:87:b9:cb:3b:
                    a5:d8:ee:4e:3d:f2:b4:c8:ca:d2:e4:1d:d9:72:5c:
                    f8:8c:8a:aa:fc:1e:4a:1f:95:88:4e:11:99:c6:20:
                    7b:9d:da:57:4a:fb:e6:1e:85:89:c6:08:90:b2:ec:
                    1d:b8:7a:4b:31:8a:fe:c9:db:e7:8d:d4:dd:1b:36:
                    2a:79:b6:5a:48:ff:b3:08:c8:d9:71:c3:98:78:db:
                    51:c6:96:98:65:e7:ff:35:e7:f8:b8:74:46:9e:05:
                    23:ec:33:cd:55:40:1f:00:21:29:3a:0a:07:64:51:
                    f1:8f:20:c9:d6:51:d6:83:22:1a:3e:2f:0c:b1:43:
                    60:6a:2c:9c:75:cc:6e:34:5f:5f:05:fa:4f:ba:16:
                    ca:81:9c:a7:56:a7:7a:1c:eb:c4:58:9f:02:36:a4:
                    4b:93:42:ce:94:ce:24:84:d6:f3:9d:2f:da:74:e7:
                    55:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:60:7D:83:62:16:38:F2:CF:69:2D:8F:AF:9A:76:6A:68:36:F0:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3f343bd9-680f-3702-b991-0e48f54f6f74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.48.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:15:63:13:05:72:be:b9:bf:12:d5:54:ac:d2:00:59:7d:85:
         a5:7a:61:68:6c:31:4a:a5:21:4d:a8:03:d1:9c:e5:fd:30:22:
         a6:90:5c:12:af:84:79:6b:70:88:ac:65:0d:46:ce:a4:c1:cd:
         0a:e2:1e:5c:1f:18:cb:28:45:3a:b1:4b:7a:9e:10:ec:74:f7:
         31:2d:9d:b4:e0:2e:bd:7f:f9:5f:23:e0:30:d7:47:19:68:82:
         c6:11:83:93:19:77:f4:51:bf:ad:a5:cb:7b:73:c3:8c:ad:cb:
         8e:e0:8a:17:1a:8f:18:e0:76:3f:88:be:38:2a:68:59:98:e1:
         17:a2:22:41:f2:a8:e5:51:91:9e:6b:29:07:81:13:4b:7e:a4:
         92:b1:55:69:b2:c9:12:a1:a7:16:40:e1:63:bc:2f:9b:80:78:
         eb:e7:07:2b:e9:f1:ec:87:29:bf:a3:65:dc:e5:b1:56:1e:cd:
         fb:06:7d:51:5e:93:be:55:7b:2c:70:f3:b0:c6:51:31:f7:ac:
         de:0a:ad:3f:03:84:ae:b4:ca:b6:0c:eb:e1:7e:fc:fc:a4:7b:
         fd:6a:29:04:ea:08:fa:8d:ab:ac:d6:4a:f7:8e:f0:8c:2f:1e:
         ec:84:d8:de:d0:7a:c7:ba:7e:7d:b1:14:f8:8a:64:c5:92:cb:
         0b:0c:bf:29
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqJpiUQS5/3kOWkMIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI1MDcxNjEzMDEwM1oXDTI1MTAxNDEzMDEwM1owLzEtMCsGA1UEAxMk
OGFhMmFhY2MtMGNhNy00YmEyLWJiNWYtNDNkYjEzMWExOTY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpdNYHOVIS3WwMBkeFcyUl11BBhsfikCcb9k
6UC38rp6GO8sh/+mj0W4Vw4yOm6PhjfTlUmrBeHzEukdCrjOBJZuVnqpUH10I5Wj
a8mv8Y3EMPjSoIe5yzul2O5OPfK0yMrS5B3Zclz4jIqq/B5KH5WIThGZxiB7ndpX
SvvmHoWJxgiQsuwduHpLMYr+ydvnjdTdGzYqebZaSP+zCMjZccOYeNtRxpaYZef/
Nef4uHRGngUj7DPNVUAfACEpOgoHZFHxjyDJ1lHWgyIaPi8MsUNgaiycdcxuNF9f
BfpPuhbKgZynVqd6HOvEWJ8CNqRLk0LOlM4khNbznS/adOdVzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHFgfYNiFjjyz2ktj6+admpoNvBZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvM2YzNDNiZDktNjgwZi0z
NzAyLWI5OTEtMGU0OGY1NGY2Zjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAljCTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABIVYxMFcr65vxLVVKzSAFl9haV6YWhsMUqlIU2oA9Gc5f0wIqaQXBKv
hHlrcIisZQ1GzqTBzQriHlwfGMsoRTqxS3qeEOx09zEtnbTgLr1/+V8j4DDXRxlo
gsYRg5MZd/RRv62ly3tzw4yty47gihcajxjgdj+IvjgqaFmY4ReiIkHyqOVRkZ5r
KQeBE0t+pJKxVWmyyRKhpxZA4WO8L5uAeOvnByvp8eyHKb+jZdzlsVYezfsGfVFe
k75Veyxw87DGUTH3rN4KrT8DhK60yrYM6+F+/Pyke/1qKQTqCPqNq6zWSveO8Iwv
HuyE2N7Qese6fn2xFPiKZMWSywsMvyk=
-----END CERTIFICATE-----
Generated at Mon Aug 4 01:34:39 2025 by rpki-client