Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/54ffc766-2534-38bf-9448-16f1b9c20b54.roa
File:                     54ffc766-2534-38bf-9448-16f1b9c20b54.roa (raw, json)
Hash identifier:          x+0oTZzQwf7WLKORRgBH5+BnQfgdcCPN84SSWmvLXE0=
Subject key identifier:   E4:53:B0:5A:93:2B:6B:0F:1E:DC:D7:3B:03:56:DB:A3:E7:8E:D0:CE
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584A89A6231B6720A794EB2D5600
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/54ffc766-2534-38bf-9448-16f1b9c20b54.roa
Signing time:             Wed 16 Jul 2025 13:01:03 +0000
ROA not before:           Wed 16 Jul 2025 13:01:03 +0000
ROA not after:            Tue 14 Oct 2025 13:01:03 +0000
asID:                     13335
IP address blocks:        150.48.152.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:a6:23:1b:67:20:a7:94:eb:2d:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jul 16 13:01:03 2025 GMT
            Not After : Oct 14 13:01:03 2025 GMT
        Subject: CN=755456fa-73cf-4a45-aa3e-e975b2c899f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:21:48:33:fd:82:58:51:19:9d:4a:32:17:de:
                    80:b0:af:af:bf:01:62:02:1b:18:2b:ae:ec:53:30:
                    74:32:de:e8:8c:cd:8c:a3:31:ff:9d:c0:68:18:13:
                    ff:b1:01:d9:05:f5:0b:0b:97:d0:44:34:8a:f6:50:
                    6d:01:a1:8b:07:f9:59:c6:44:5f:47:00:44:fd:2e:
                    81:d6:58:99:68:5d:5b:74:ae:d7:c1:f7:49:e0:60:
                    08:ff:78:62:91:91:20:f1:44:b9:4d:a0:2d:63:8d:
                    42:4c:e9:e4:8a:ee:3e:dd:3b:d8:ca:8b:e0:4c:98:
                    ca:a0:cf:f6:63:09:48:7c:8f:b3:15:13:a6:fb:31:
                    1a:b0:b6:44:2c:88:ed:e0:b8:20:46:4e:bb:fa:af:
                    8a:8d:33:be:c5:d3:94:9d:13:1c:a2:26:74:be:35:
                    9d:8b:b7:5f:96:c9:76:e4:ff:36:3e:65:6a:99:68:
                    61:5a:ed:8c:ef:5e:37:2c:90:7c:b0:1b:0e:e1:a8:
                    fe:21:90:c4:32:41:e8:62:5f:43:c0:db:b6:5c:3d:
                    46:66:37:b3:e6:41:09:a5:87:da:06:a0:81:2a:1a:
                    28:54:c4:b0:90:8f:de:7a:4b:47:4c:05:23:a4:57:
                    21:cf:d0:bf:9a:df:3f:c8:c1:95:a2:4f:c0:ba:ec:
                    c7:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:53:B0:5A:93:2B:6B:0F:1E:DC:D7:3B:03:56:DB:A3:E7:8E:D0:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/54ffc766-2534-38bf-9448-16f1b9c20b54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.48.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:78:3b:3c:be:42:73:16:0f:a9:64:d0:d7:88:ed:74:33:df:
         e1:08:a5:90:0d:c8:87:28:04:82:4c:bf:e0:ac:9e:6f:8c:61:
         2d:90:d9:1a:d9:e6:30:46:38:ba:db:c0:d9:67:76:5c:0f:b2:
         3f:43:6f:69:03:9b:99:fb:54:2d:72:b3:14:d8:84:d2:75:aa:
         0e:33:60:e2:0b:2a:75:11:73:22:db:6a:59:fc:0c:45:4f:18:
         a3:f1:98:89:bb:5d:3e:aa:a5:0e:57:d3:e8:be:25:d8:67:d4:
         fd:1b:d5:70:a1:78:75:7f:e9:86:09:d0:e1:bd:8c:af:67:1d:
         19:bf:54:e1:84:3d:8b:33:7c:8e:ed:e8:45:9d:ce:46:b8:96:
         b9:96:89:a3:d5:05:b2:21:dd:d4:f8:71:db:40:09:ed:f2:36:
         89:51:89:c9:6d:98:21:1b:79:97:87:cd:bb:8b:b8:bb:93:6a:
         05:67:50:54:cb:e5:f8:71:5f:e8:66:d1:e7:93:15:7b:d5:35:
         0c:f9:42:fc:6d:13:18:8f:cc:00:ad:3d:f3:47:9a:31:13:23:
         97:d5:e4:35:8c:89:b8:86:14:d4:98:23:79:f6:e8:2a:f5:3a:
         60:32:42:f7:b0:a6:71:d5:1c:82:19:33:2d:0f:db:5c:9f:a4:
         30:0a:8c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 01:33:45 2025 by rpki-client