Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4f004cec-8ad5-311c-a400-22bfc882b03c.roa
File:                     4f004cec-8ad5-311c-a400-22bfc882b03c.roa (raw, json)
Hash identifier:          bNGpQbM69hgCtZlzkAgth82hzyA5x7p2JI5EuJnEJcQ=
Subject key identifier:   EB:98:C7:E3:DA:3F:05:51:A0:77:6D:90:35:0B:A6:12:E2:3C:E3:F0
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584A89A627A48CA268C15348F820
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4f004cec-8ad5-311c-a400-22bfc882b03c.roa
Signing time:             Wed 16 Jul 2025 13:01:03 +0000
ROA not before:           Wed 16 Jul 2025 13:01:03 +0000
ROA not after:            Tue 14 Oct 2025 13:01:03 +0000
asID:                     13335
IP address blocks:        150.48.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:a6:27:a4:8c:a2:68:c1:53:48:f8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jul 16 13:01:03 2025 GMT
            Not After : Oct 14 13:01:03 2025 GMT
        Subject: CN=5de694fa-b99c-4aa2-9c6e-e45ac9d4d2b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:91:d5:4b:98:f2:ce:b2:f3:4d:17:bc:c8:19:
                    00:4d:7e:9c:61:20:f2:0a:99:1a:e3:d2:29:27:1d:
                    d9:ea:14:56:9d:e9:a4:67:06:c2:8a:5c:a6:8d:67:
                    5f:4d:95:32:e7:cd:3c:5e:4e:1a:98:f3:d0:fb:e8:
                    50:28:d2:83:b3:a5:25:23:1b:a8:ce:d4:23:fb:61:
                    23:bc:16:86:7e:34:df:af:cd:ee:e1:14:e6:7e:a1:
                    88:0e:ac:bf:a5:d3:ef:dc:6e:9d:26:d4:04:1a:e2:
                    58:3e:9e:d8:10:6c:5a:e2:d5:4a:14:73:15:db:79:
                    89:07:b2:9e:46:d8:db:dc:45:8e:0f:32:d5:2d:1b:
                    37:07:74:2a:55:e6:01:13:20:7f:73:04:a6:7c:30:
                    43:26:f4:d2:fb:c2:86:9a:e6:38:03:53:4b:12:f9:
                    79:5d:f9:70:40:e3:c4:ea:14:3d:e7:e4:3e:0f:63:
                    f7:75:fb:51:b1:a9:3a:28:89:d1:2f:52:4a:af:11:
                    63:35:16:90:56:8b:4e:4b:fc:c7:3a:58:b7:9e:f3:
                    ea:78:24:af:29:5f:99:b0:eb:d0:34:b6:13:3f:9d:
                    a5:83:ba:3a:f5:fc:e0:dc:0f:88:e6:da:6b:16:50:
                    cb:dc:0e:45:1e:95:0c:e0:d6:16:e1:ee:5e:13:03:
                    6b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:98:C7:E3:DA:3F:05:51:A0:77:6D:90:35:0B:A6:12:E2:3C:E3:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4f004cec-8ad5-311c-a400-22bfc882b03c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.48.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:3e:65:65:6e:0e:f4:3f:42:3f:03:ae:f4:ca:ab:cb:de:2c:
         99:76:6b:38:8e:2b:2b:a5:0f:5f:cf:53:03:e1:a6:38:22:3d:
         af:e4:e0:5a:37:53:88:0f:54:d4:48:68:92:5c:14:48:b6:d9:
         3c:64:58:fa:8c:99:ed:bd:6d:28:1c:af:cc:31:fc:14:49:66:
         10:f5:67:0e:e9:37:a1:b6:6a:dc:73:6b:e9:9e:59:73:b1:3d:
         2a:80:85:5e:41:83:fa:a2:cd:ae:0d:34:35:5d:77:51:05:4e:
         90:3c:57:e9:08:35:8c:bd:8a:88:8b:b6:1a:d4:b9:d9:d6:70:
         2c:4a:16:a1:73:48:a9:98:87:6b:e4:1c:e6:93:1b:f0:8d:72:
         00:0f:1d:bf:77:8a:fd:4c:55:82:c6:18:38:27:1d:f4:5f:de:
         6e:3c:69:3a:b9:e7:ff:34:61:9e:dd:44:75:9f:31:97:db:da:
         17:71:e7:d8:df:da:2b:81:a0:a5:f1:8e:06:70:ca:62:46:a1:
         ce:76:53:1c:14:1b:08:0a:04:69:df:d7:28:40:31:53:0f:de:
         e3:6b:4d:b3:85:fc:0a:dc:69:44:af:38:64:37:51:67:1f:69:
         97:bf:1c:a8:9f:6d:5f:0d:18:e4:67:98:0f:11:06:a6:56:e0:
         da:c6:c3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 01:31:42 2025 by rpki-client