Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7b019230-2713-30c3-824f-7cf5327e6d59.roa
File:                     7b019230-2713-30c3-824f-7cf5327e6d59.roa (raw, json)
Hash identifier:          TMesdGlR9oGxZe0eLyv8bS7kKafR2QblQJF4yLzBa1U=
Subject key identifier:   00:F3:D3:95:FB:67:F2:79:1C:8C:52:B8:BA:42:F1:A6:A1:FD:98:51
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584A89A624930DF46BAAFE97E900
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7b019230-2713-30c3-824f-7cf5327e6d59.roa
Signing time:             Wed 16 Jul 2025 13:01:03 +0000
ROA not before:           Wed 16 Jul 2025 13:01:03 +0000
ROA not after:            Tue 14 Oct 2025 13:01:03 +0000
asID:                     13335
IP address blocks:        150.48.166.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:a6:24:93:0d:f4:6b:aa:fe:97:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jul 16 13:01:03 2025 GMT
            Not After : Oct 14 13:01:03 2025 GMT
        Subject: CN=6f21aa9e-58a9-4223-a259-bb42da5da6ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9f:9d:b1:a9:ad:81:a6:2f:55:35:49:6f:3f:
                    fd:91:f3:93:98:ec:be:5f:6e:44:7b:3a:20:ad:18:
                    70:78:d3:19:23:9b:8e:a2:e7:09:d5:5f:9e:48:45:
                    a2:0b:ea:aa:2e:e7:eb:a5:ae:fe:33:4b:58:fc:0a:
                    d3:5a:3a:f1:4d:d1:53:f4:c1:5f:e8:87:bd:3c:f1:
                    fb:b7:fb:ed:08:b8:dd:9a:09:3e:52:19:6e:17:e9:
                    cd:1d:98:53:32:03:ba:6e:8d:e8:22:c5:2c:0e:36:
                    41:db:e4:dc:86:6a:22:1c:bb:d2:e3:54:9a:4c:85:
                    02:7b:9e:6c:e8:35:6d:35:ce:7c:02:a2:39:9c:44:
                    40:f5:5f:4c:b1:38:98:b9:d9:8f:ad:54:a0:ea:f8:
                    3f:b9:1a:e4:50:6e:f1:a8:fc:23:59:5b:df:5b:15:
                    47:db:5e:6d:35:63:bc:7b:28:e0:6a:ae:5d:c3:a3:
                    85:5e:19:df:e5:c7:37:54:28:bd:f0:f3:6a:aa:81:
                    d4:c9:98:76:54:a0:b9:36:43:fc:68:05:7f:90:4e:
                    ac:6e:8b:97:20:f0:a6:f6:c2:ec:f8:8b:70:af:70:
                    34:6c:aa:86:64:cc:68:7e:ec:22:ea:c0:d5:6a:01:
                    1c:7d:d7:aa:ee:b4:2a:25:b9:4b:ac:8c:02:61:2a:
                    37:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:F3:D3:95:FB:67:F2:79:1C:8C:52:B8:BA:42:F1:A6:A1:FD:98:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7b019230-2713-30c3-824f-7cf5327e6d59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.48.166.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:f5:d3:10:2e:ef:a7:eb:b8:2b:d9:c6:93:12:49:26:c4:45:
         4d:61:bf:6f:93:f2:b4:da:6f:a0:98:57:3c:d9:c4:2f:66:4b:
         9a:0d:07:77:85:02:44:a7:ef:ea:3b:88:07:65:33:a2:3d:8a:
         26:eb:cc:9e:e6:ea:d1:b4:ea:77:69:7f:73:5d:f9:c7:47:7e:
         03:fb:4d:e1:9c:5c:e3:f2:8e:ce:f0:a4:fa:5e:76:b9:ae:84:
         2a:d6:cf:80:e0:4a:99:78:c5:b7:6d:e3:45:78:9f:9e:bd:69:
         c8:48:07:42:44:45:95:25:7b:83:11:77:36:98:98:48:6d:6c:
         e7:fc:b4:18:b3:81:97:9e:8e:6d:a6:9d:7f:e6:d8:44:38:53:
         8e:d5:b8:9e:90:d0:b3:a4:3f:38:3e:05:aa:89:d8:5b:42:de:
         ae:4c:3b:f0:d3:d1:07:a4:7a:ab:22:a1:06:b9:f3:e0:2c:d3:
         1f:63:d6:a7:e5:ef:76:bf:2f:aa:25:8c:69:7d:59:10:dd:9b:
         54:4d:e0:f1:17:ad:5d:57:9b:7f:8b:b7:72:e6:47:fc:b9:73:
         5a:15:42:4b:18:64:0b:3d:18:90:3b:1d:90:15:9f:d6:9c:fb:
         48:b3:0e:50:95:b8:b7:d3:6b:d0:b4:22:35:2e:20:bd:b6:d5:
         06:d4:81:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 01:33:49 2025 by rpki-client