Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cc09158f-e5e0-3535-bd23-1840d5f73492.roa
File:                     cc09158f-e5e0-3535-bd23-1840d5f73492.roa (raw, json)
Hash identifier:          YFj1ojPUhyzTHn2hKToAnGahcPpwiqtyXedWjucYUFg=
Subject key identifier:   C0:1B:7F:CC:92:82:13:0C:54:8E:12:E7:CA:EB:8D:41:82:AB:4E:03
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584A89A626D1B47AE6CF1F2EF080
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cc09158f-e5e0-3535-bd23-1840d5f73492.roa
Signing time:             Wed 16 Jul 2025 13:01:03 +0000
ROA not before:           Wed 16 Jul 2025 13:01:03 +0000
ROA not after:            Tue 14 Oct 2025 13:01:03 +0000
asID:                     13335
IP address blocks:        150.48.160.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:a6:26:d1:b4:7a:e6:cf:1f:2e:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jul 16 13:01:03 2025 GMT
            Not After : Oct 14 13:01:03 2025 GMT
        Subject: CN=9a90e61a-a651-4264-9c1b-5167850e3d7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5f:4a:3f:c4:97:be:ed:4c:a4:0d:1f:bb:5d:
                    5e:86:aa:dc:d3:b6:bd:26:f0:20:21:df:43:69:26:
                    48:06:de:85:35:02:ef:4c:bc:a7:f5:84:db:95:50:
                    3b:79:30:4a:db:ba:fb:1d:97:6d:0f:de:26:4d:58:
                    4d:cc:a7:28:31:99:c2:34:3e:be:f3:82:b7:9d:b7:
                    ea:40:c4:9e:5a:0b:ab:67:74:46:c9:73:49:09:7c:
                    01:d1:5f:3f:69:6b:9d:2f:52:c0:e6:26:3c:cb:0e:
                    80:0d:89:77:c8:7c:a3:34:b1:7a:4e:cf:d7:09:32:
                    8d:59:b8:80:cf:55:cd:b4:07:dd:f5:1e:1e:8d:ab:
                    0b:8a:66:25:3f:78:d7:70:54:3f:c6:c0:5a:03:84:
                    a5:cd:d6:1c:6f:79:a9:9d:2e:ff:88:04:fd:4a:16:
                    93:98:b9:c6:68:a3:8b:71:db:5c:81:03:69:a6:6b:
                    13:0b:82:5f:dc:cb:a1:6c:35:c5:75:a0:a9:ce:8c:
                    d2:53:e4:93:5c:5b:07:25:20:0f:c5:dd:e0:ce:12:
                    5b:38:bc:96:69:63:73:32:76:f6:13:93:40:aa:3c:
                    15:25:6b:75:7e:39:e3:da:e6:65:58:b4:5f:21:d2:
                    f7:31:14:a2:26:35:a4:fe:af:c8:ab:87:97:a7:8b:
                    08:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:1B:7F:CC:92:82:13:0C:54:8E:12:E7:CA:EB:8D:41:82:AB:4E:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cc09158f-e5e0-3535-bd23-1840d5f73492.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.48.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:5e:31:92:c6:99:b3:3c:b9:27:17:97:c9:30:ff:69:47:10:
         3b:3d:d4:22:fb:5c:52:57:09:7d:72:87:f7:10:7d:30:79:8a:
         c1:dd:1e:74:83:b7:dd:46:50:2c:61:4e:3c:bb:fe:4d:69:99:
         7d:7b:ba:8d:67:1a:44:ec:59:99:ba:27:39:1b:a8:fc:10:81:
         59:e2:98:71:1d:48:e7:d0:1b:6d:f8:a4:4a:8a:da:87:6d:42:
         b5:e8:78:df:16:69:df:97:db:be:54:8b:5f:3e:31:53:f7:84:
         e4:4e:45:ac:5b:1e:ef:7d:01:13:c0:30:23:64:71:19:ac:5d:
         c1:86:26:61:80:10:8c:8b:d8:bf:36:da:78:71:89:64:70:cd:
         10:cd:bb:5b:cb:45:82:a3:1b:4f:e7:bf:53:fe:ce:92:87:cf:
         b4:1d:fb:f2:03:65:9e:fd:c6:52:a0:dc:ee:b7:7a:a7:6a:23:
         83:3c:ed:e7:fd:4c:6d:a0:46:d3:e4:4b:63:f0:c5:33:c0:96:
         1e:33:51:e7:07:65:39:12:04:8e:fc:ab:ea:6b:2c:5b:c6:be:
         62:a5:b2:88:18:e2:bf:b9:a5:4f:2a:da:9f:85:ec:3b:3f:30:
         ab:db:b2:30:f8:3e:9a:54:30:48:27:c7:9b:63:ac:30:ee:6e:
         d8:26:85:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 01:35:58 2025 by rpki-client