Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/abe3f2bc-fbd2-3123-ad30-61c1e4ebc025.roa
File:                     abe3f2bc-fbd2-3123-ad30-61c1e4ebc025.roa (raw, json)
Hash identifier:          Joba1zKgh1T+jEQGq/IZMFzhYD/dSLm3AcIX2fXgTJI=
Subject key identifier:   7B:2E:3D:50:1C:16:B7:B3:02:D9:C7:03:C5:7D:AD:7E:DB:D1:F9:CA
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584A89A624B5C4933F280F81D000
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/abe3f2bc-fbd2-3123-ad30-61c1e4ebc025.roa
Signing time:             Wed 16 Jul 2025 13:01:03 +0000
ROA not before:           Wed 16 Jul 2025 13:01:03 +0000
ROA not after:            Tue 14 Oct 2025 13:01:03 +0000
asID:                     13335
IP address blocks:        150.48.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:a6:24:b5:c4:93:3f:28:0f:81:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jul 16 13:01:03 2025 GMT
            Not After : Oct 14 13:01:03 2025 GMT
        Subject: CN=6887b10e-9a4f-45f5-8a58-c74704ad3417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:bd:83:39:b7:68:3e:9a:96:88:e5:93:2c:5b:
                    8b:e8:0a:43:0c:64:0d:29:a1:b8:b6:c9:2b:9e:be:
                    09:60:19:23:dc:37:f4:18:99:fc:46:ed:b5:28:bf:
                    93:04:08:0e:7f:ea:e0:45:a4:7b:4f:c6:0a:01:b6:
                    c5:68:ed:d5:b4:1c:b9:d1:3e:6b:61:d9:30:85:ef:
                    98:0e:01:b6:f5:f9:f5:e7:4f:09:6b:df:7d:d2:e4:
                    7b:1c:b4:d5:a3:be:b4:5d:2d:79:8f:99:48:2e:35:
                    41:c9:2a:84:de:05:3b:8e:eb:df:3b:ba:54:30:b9:
                    8e:f5:1b:ff:7a:3f:3e:8d:ea:55:19:4c:a0:d5:19:
                    11:ab:f1:1a:dc:40:9d:97:58:ec:ad:06:2f:dc:fe:
                    92:5a:6f:c5:cb:37:2e:ed:a9:3f:fc:6d:b2:24:a4:
                    81:20:a6:11:27:5b:85:cd:d1:7b:7a:2c:b4:1f:25:
                    86:73:fe:ee:14:74:e1:2d:82:f5:df:66:d2:67:9d:
                    32:59:c9:2e:2a:de:9b:1c:97:70:05:e0:e9:30:82:
                    d4:28:f2:a5:d4:3e:96:f8:05:00:66:2f:86:61:91:
                    bd:91:d4:98:05:74:1c:b9:f5:07:06:63:37:4f:cc:
                    2e:31:ae:3c:30:1d:3e:92:84:ca:ca:1d:f3:1f:d2:
                    46:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:2E:3D:50:1C:16:B7:B3:02:D9:C7:03:C5:7D:AD:7E:DB:D1:F9:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/abe3f2bc-fbd2-3123-ad30-61c1e4ebc025.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.48.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:ae:d3:a1:0f:91:72:da:b4:2f:5e:d5:fc:a1:a4:5d:b1:20:
         5c:3b:07:21:b6:66:1f:da:ce:f0:8f:b5:b5:64:8d:fb:14:90:
         5f:e4:c0:e1:8b:f0:d8:13:f4:37:3a:d9:77:bc:1b:0a:ab:eb:
         19:2d:79:36:e3:cd:61:15:d1:b8:ae:60:84:e8:65:8e:b1:21:
         0e:a8:5a:6a:e3:c8:6e:01:b5:ee:09:e9:3e:6f:ff:62:25:80:
         52:29:cf:06:d9:66:d8:51:bc:d3:f3:f5:df:1a:85:0e:2f:02:
         d8:f2:f3:19:ac:be:5f:92:a5:0f:7b:c6:0d:52:35:34:63:f9:
         e4:cd:f0:f6:0b:d0:d8:9a:a5:5b:22:59:b5:6a:f4:44:3d:7f:
         bc:ff:08:0e:0f:9e:0c:6b:29:b7:ba:04:c1:07:62:85:1d:1f:
         c9:82:ec:a4:af:86:dd:89:9f:d5:e6:df:5d:89:c4:b6:de:e2:
         16:cc:8e:7b:a9:65:a9:11:db:dd:0a:ea:1a:6c:54:3e:1a:5c:
         30:49:82:ab:ce:dc:fc:76:a8:74:15:d7:26:b6:98:18:95:35:
         9d:ae:14:ba:0c:d8:e5:b9:70:cb:71:be:2b:53:e0:dd:04:b8:
         29:63:93:ac:1b:65:d7:b2:3e:2b:08:41:a4:18:a5:6c:09:b2:
         b1:84:f8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 01:31:32 2025 by rpki-client