Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/91c3a106-db7f-3246-83b9-fbc7e00777b5.roa
File:                     91c3a106-db7f-3246-83b9-fbc7e00777b5.roa (raw, json)
Hash identifier:          qGLuaZ4NbwT8F5hklJKHafd2YHfKVzpJlOkdvp5ab80=
Subject key identifier:   3D:9E:33:14:B7:66:0F:90:A0:4F:17:2F:D4:90:F0:64:BC:CE:6A:4E
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584A89A627F3B99021C576A26080
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/91c3a106-db7f-3246-83b9-fbc7e00777b5.roa
Signing time:             Wed 16 Jul 2025 13:01:03 +0000
ROA not before:           Wed 16 Jul 2025 13:01:03 +0000
ROA not after:            Tue 14 Oct 2025 13:01:03 +0000
asID:                     13335
IP address blocks:        150.48.190.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:a6:27:f3:b9:90:21:c5:76:a2:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jul 16 13:01:03 2025 GMT
            Not After : Oct 14 13:01:03 2025 GMT
        Subject: CN=95c2593c-5cd8-4965-8ef3-c87e56542312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:aa:5b:c1:a2:03:b2:51:6c:6d:f5:04:95:9b:
                    3b:fa:94:81:3b:ff:7e:87:0d:e4:5a:e8:f9:34:41:
                    db:37:cd:14:7f:55:f5:98:e3:ec:fe:76:61:6f:24:
                    ac:15:29:03:50:24:fc:8a:72:f7:6f:24:6c:2a:f2:
                    c4:5b:23:95:7e:51:56:f9:dd:3e:8f:5f:f8:57:3d:
                    fa:0e:7b:59:a0:cb:ad:4c:19:63:5d:75:c3:b8:15:
                    1e:02:c1:34:97:8e:e2:5a:61:ac:17:89:6b:97:98:
                    79:20:6c:6f:0b:6d:be:ff:f4:3e:7d:c1:4c:6c:d7:
                    f9:08:13:51:69:34:7c:a6:4f:6f:dc:2d:d0:d8:11:
                    a4:1d:db:8f:67:3f:f4:a0:63:5e:35:ec:1b:fb:c3:
                    41:00:0e:c4:56:89:a3:e8:50:64:f2:2d:9b:26:89:
                    41:5f:18:91:a0:32:ef:be:2f:79:4c:36:f1:59:13:
                    ea:27:06:80:5d:82:7d:12:35:0b:bf:e4:3f:51:ed:
                    2f:a3:57:b5:cb:05:09:a5:46:3d:56:67:39:d0:26:
                    28:d4:be:8a:31:1e:4f:f6:4e:5b:4f:ed:c5:4d:32:
                    d2:24:bf:e7:c3:b9:90:0d:dc:01:00:ba:8e:7e:f5:
                    30:86:51:c2:d6:77:0c:f4:3c:05:51:1c:a0:66:e9:
                    22:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:9E:33:14:B7:66:0F:90:A0:4F:17:2F:D4:90:F0:64:BC:CE:6A:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/91c3a106-db7f-3246-83b9-fbc7e00777b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.48.190.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:eb:89:78:a5:5a:fc:27:d4:d7:d3:c4:19:f5:e0:c1:5d:f2:
         5d:8d:3d:fd:1f:4c:b2:06:c2:81:a3:42:ac:4e:4e:3e:9c:25:
         f1:6c:39:6b:66:20:2f:79:7b:12:3e:ff:a5:5d:fa:b9:da:d5:
         d3:26:8a:36:50:e2:fe:09:cd:d1:78:09:82:3a:53:88:13:4b:
         76:88:dc:fe:5b:d7:af:79:ee:46:e9:39:e4:b1:ae:a8:56:d4:
         0d:ad:08:b5:ab:d5:8d:7f:c8:14:94:6a:e9:3f:4d:55:42:c4:
         52:42:4a:5c:6b:99:18:dc:a4:f1:85:a1:6f:53:cc:b3:1f:b4:
         f4:31:48:e9:c7:ad:a7:d6:d3:ce:6a:c5:22:3e:b5:d7:d3:85:
         aa:45:fc:1d:64:87:b4:d1:68:c3:d0:3c:4a:9d:8e:6d:02:8d:
         11:13:57:c4:a2:91:41:61:b5:e4:66:cf:d9:e3:00:16:08:41:
         5b:9e:7b:0d:a4:39:4b:d0:37:ab:23:37:af:6b:85:9f:0f:3a:
         7d:45:0e:f4:be:53:6c:ee:b0:ec:9b:cc:0d:25:bc:9a:46:03:
         05:cd:23:fd:60:dd:0e:50:eb:91:9f:cc:aa:04:8d:98:43:f8:
         fa:7d:69:a6:41:02:56:59:e4:14:24:b4:4d:27:9c:ff:cf:89:
         b7:a8:88:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 01:31:33 2025 by rpki-client