Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c022ea32-5750-373c-8c89-e1679fe1446d.roa
File:                     c022ea32-5750-373c-8c89-e1679fe1446d.roa (raw, json)
Hash identifier:          7HZhV3nWWzXOa1LxQQ0Pbwrkza1Qd2Q6D9ItAkaQx2c=
Subject key identifier:   3E:55:0E:20:7E:A4:43:53:3F:89:65:02:84:3C:68:00:08:1F:BD:EF
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584A89A62892868890B087C40440
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c022ea32-5750-373c-8c89-e1679fe1446d.roa
Signing time:             Wed 16 Jul 2025 13:01:03 +0000
ROA not before:           Wed 16 Jul 2025 13:01:03 +0000
ROA not after:            Tue 14 Oct 2025 13:01:03 +0000
asID:                     13335
IP address blocks:        150.48.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:a6:28:92:86:88:90:b0:87:c4:04:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jul 16 13:01:03 2025 GMT
            Not After : Oct 14 13:01:03 2025 GMT
        Subject: CN=880d4fef-bb20-406c-a0c9-7b927efd22a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:16:14:e5:e1:66:7a:df:16:54:1a:1d:d3:62:
                    e6:bf:9f:50:10:3d:f6:f3:4b:c9:9f:e2:46:c1:fd:
                    d6:be:76:bc:07:14:6a:35:3d:5e:e5:f0:f2:14:e6:
                    e3:15:d8:b1:47:ef:73:dc:d0:ac:92:c9:20:ed:e6:
                    0c:9a:13:19:96:7f:e8:a5:f9:0d:58:f9:4b:51:79:
                    72:3b:22:ca:05:cb:94:27:83:61:75:c4:32:b6:65:
                    fa:48:65:c7:d1:61:65:69:0e:ca:30:6f:eb:a1:f8:
                    3f:4a:9e:a8:7f:49:15:83:b0:55:17:16:2c:29:fc:
                    7e:58:d3:d0:20:dd:bf:71:7b:1d:ff:3c:16:a7:b0:
                    ce:ce:1b:cb:3e:23:d9:5a:73:a9:6b:e7:b1:4b:5f:
                    be:49:fa:35:e0:e7:d4:2e:4b:c3:e0:a8:4d:11:bb:
                    20:d8:fd:5d:e0:06:e3:81:1c:bc:63:65:b9:ab:5e:
                    19:8a:d0:27:92:19:f7:47:cc:2c:a6:3d:3c:b3:d0:
                    4f:ec:44:37:6a:52:06:c5:44:a0:ce:c8:dd:72:e3:
                    32:db:d5:63:cf:a8:a7:22:21:21:46:bb:c4:d6:de:
                    fb:78:23:48:7a:77:bf:27:9e:0d:04:e8:ec:9d:97:
                    c3:b7:56:be:f1:4a:da:0d:e5:cc:56:38:00:04:40:
                    e2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:55:0E:20:7E:A4:43:53:3F:89:65:02:84:3C:68:00:08:1F:BD:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c022ea32-5750-373c-8c89-e1679fe1446d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.48.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:d3:f2:71:6f:67:5d:22:e0:0f:95:53:74:04:35:f1:8d:6a:
         e4:11:11:8a:4e:59:4d:df:98:d3:dc:4f:15:91:2e:31:02:c5:
         bc:c7:db:9e:83:82:4e:04:0a:a3:ac:64:09:f1:b0:81:4b:cd:
         a7:33:1f:f4:4f:aa:7d:2b:af:6b:15:2c:35:2c:85:28:ac:0b:
         06:37:5c:90:a6:48:e5:65:93:e5:a9:c6:fd:97:23:3a:72:93:
         c1:d8:ac:2a:e9:8d:d0:5f:db:25:13:40:cd:2f:ee:49:8b:f6:
         42:bc:c2:79:da:12:44:57:2c:6f:4d:24:e4:19:3a:0f:9a:db:
         24:10:18:e4:27:0c:cb:64:48:95:6a:85:af:c5:a1:4f:fb:73:
         ab:ef:b8:5a:5e:5f:df:30:10:d9:1d:63:b1:6b:ac:42:5c:17:
         d0:dc:b3:13:7d:7c:f7:39:73:26:4d:41:56:be:c2:ef:a5:4a:
         3d:63:99:28:82:46:6e:af:65:62:c2:1c:09:58:56:29:d3:44:
         67:be:3d:6c:81:eb:bc:f1:8e:8d:ec:4e:65:08:15:51:c5:90:
         cf:6b:4c:64:fb:2c:3d:ba:b4:d7:00:30:e6:f9:89:0c:0a:bc:
         22:2e:1d:a7:74:f9:d4:2f:13:d0:f7:56:95:61:75:72:fb:6c:
         f3:cf:53:06
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqJpiiShoiQsIfEBEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI1MDcxNjEzMDEwM1oXDTI1MTAxNDEzMDEwM1owLzEtMCsGA1UEAxMk
ODgwZDRmZWYtYmIyMC00MDZjLWEwYzktN2I5MjdlZmQyMmEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3BYU5eFmet8WVBod02Lmv59QED3280vJn+JG
wf3Wvna8BxRqNT1e5fDyFObjFdixR+9z3NCskskg7eYMmhMZln/opfkNWPlLUXly
OyLKBcuUJ4NhdcQytmX6SGXH0WFlaQ7KMG/rofg/Sp6of0kVg7BVFxYsKfx+WNPQ
IN2/cXsd/zwWp7DOzhvLPiPZWnOpa+exS1++Sfo14OfULkvD4KhNEbsg2P1d4Abj
gRy8Y2W5q14ZitAnkhn3R8wspj08s9BP7EQ3alIGxUSgzsjdcuMy29Vjz6inIiEh
RrvE1t77eCNIene/J54NBOjsnZfDt1a+8UraDeXMVjgABEDiDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD5VDiB+pENTP4llAoQ8aAAIH73vMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYzAyMmVhMzItNTc1MC0z
NzNjLThjODktZTE2NzlmZTE0NDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAljCHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACTT8nFvZ10i4A+VU3QENfGNauQREYpOWU3fmNPcTxWRLjECxbzH256D
gk4ECqOsZAnxsIFLzaczH/RPqn0rr2sVLDUshSisCwY3XJCmSOVlk+Wpxv2XIzpy
k8HYrCrpjdBf2yUTQM0v7kmL9kK8wnnaEkRXLG9NJOQZOg+a2yQQGOQnDMtkSJVq
ha/FoU/7c6vvuFpeX98wENkdY7FrrEJcF9DcsxN9fPc5cyZNQVa+wu+lSj1jmSiC
Rm6vZWLCHAlYVinTRGe+PWyB67zxjo3sTmUIFVHFkM9rTGT7LD26tNcAMOb5iQwK
vCIuHad0+dQvE9D3VpVhdXL7bPPPUwY=
-----END CERTIFICATE-----
Generated at Mon Aug 4 01:32:19 2025 by rpki-client