Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6c80e3d5-346d-3567-9003-79a6e213a98d.roa
File:                     6c80e3d5-346d-3567-9003-79a6e213a98d.roa (raw, json)
Hash identifier:          jHdsJ4MWFZB7DhEk+/LJxaHxsuRpS+c1PXxSGbzRK7g=
Subject key identifier:   F1:D1:B9:14:11:2E:07:F3:69:92:40:AF:D8:38:3B:0A:6B:06:75:AB
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584A89A62632DA1F83FAF0046480
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6c80e3d5-346d-3567-9003-79a6e213a98d.roa
Signing time:             Wed 16 Jul 2025 13:01:03 +0000
ROA not before:           Wed 16 Jul 2025 13:01:03 +0000
ROA not after:            Tue 14 Oct 2025 13:01:03 +0000
asID:                     13335
IP address blocks:        150.48.152.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:a6:26:32:da:1f:83:fa:f0:04:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jul 16 13:01:03 2025 GMT
            Not After : Oct 14 13:01:03 2025 GMT
        Subject: CN=6742527e-dcce-4d58-bee9-0888cd9b9bfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:35:fb:a5:c3:28:7c:1e:fa:3a:79:ca:a1:db:
                    85:81:d3:12:35:7f:b2:90:5f:93:d7:e8:9f:df:55:
                    68:79:56:75:7f:ca:64:c9:85:fd:c7:a7:95:47:cf:
                    ad:e0:7a:8b:3e:ba:00:30:14:5f:3a:7d:5a:9e:74:
                    e5:87:af:43:e6:06:d2:1c:ce:ce:2f:83:1d:33:17:
                    d4:9d:df:da:99:98:96:c1:07:9c:0e:04:8f:84:30:
                    a8:58:04:60:60:8d:e2:cf:5e:8e:5a:b5:59:bd:33:
                    5b:27:bd:f4:ad:c7:15:9c:ec:70:1b:63:a9:9b:48:
                    33:45:e5:cd:d1:73:8d:40:a3:5e:b4:25:8a:5f:a3:
                    f3:a7:6f:df:f3:98:49:e8:9c:e8:1a:b2:dd:a1:93:
                    dc:af:84:e7:c3:43:8a:77:f9:6b:cc:83:bf:33:1b:
                    9b:d5:9a:3a:b9:50:0a:7b:26:f3:c0:d6:a6:cc:f1:
                    4a:f3:31:2b:57:5a:f4:b8:d1:7a:51:a1:33:57:59:
                    1b:16:68:88:dc:88:85:1f:f5:fa:85:1f:35:cb:72:
                    d4:e6:5e:92:9e:af:ab:45:fe:5a:56:5d:40:25:77:
                    93:b6:49:1b:e3:e5:1e:20:c2:78:f4:06:08:1b:0e:
                    c7:6f:93:55:72:05:bc:8f:c4:00:d2:eb:a4:86:3e:
                    92:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:D1:B9:14:11:2E:07:F3:69:92:40:AF:D8:38:3B:0A:6B:06:75:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6c80e3d5-346d-3567-9003-79a6e213a98d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.48.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:ab:ee:c4:7e:c1:8a:33:79:25:30:c1:3d:04:c2:66:1b:ed:
         c8:ce:9a:18:33:15:45:e8:b4:65:e8:b5:27:7e:f4:88:8b:73:
         0a:bb:5b:73:94:2e:5b:29:f8:1d:b9:61:c8:c2:ad:ad:06:24:
         ab:2b:f3:f9:89:7a:96:36:68:03:ee:9c:6d:84:db:1d:f2:6d:
         51:b9:38:2c:04:52:e2:b6:62:a5:b9:60:27:10:46:e0:dc:44:
         80:89:06:ce:cd:26:cc:9d:dd:5c:9a:e8:a4:7b:ae:ee:a9:12:
         67:2b:6d:a4:27:ab:8d:b8:d2:a8:0d:17:6f:15:47:51:5b:f1:
         15:dc:71:ea:4b:82:6b:97:78:8a:80:19:a7:fa:49:ae:17:5a:
         3c:d6:6e:94:7a:b1:4f:f7:81:85:60:4b:46:2a:d5:83:18:2b:
         49:96:d7:1b:78:68:99:3e:c5:b1:57:d1:a0:84:6a:2f:c5:ae:
         07:09:34:c9:56:19:03:c8:6d:41:cd:b5:d9:e0:77:5e:b3:86:
         1a:bb:e1:b3:56:ec:13:71:69:26:eb:ad:18:5e:72:56:cb:6a:
         e5:0b:b4:71:7b:c2:6e:58:4f:7f:d9:32:41:9b:29:9e:83:45:
         af:1f:5a:d4:7b:be:23:b7:49:e0:c2:19:2d:70:ff:ba:ad:ef:
         a3:c8:61:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 01:32:21 2025 by rpki-client