Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d46e8718-f337-388f-886d-31c98f75308a.roa
File:                     d46e8718-f337-388f-886d-31c98f75308a.roa (raw, json)
Hash identifier:          Uv3RSCITCBaTGKCV48brqbtyogt69rXbkraDrenQLbo=
Subject key identifier:   44:54:87:E6:98:77:94:BE:1D:FE:61:85:71:47:32:85:F3:EA:83:BB
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584A89A6229BFF905A25CD719E80
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d46e8718-f337-388f-886d-31c98f75308a.roa
Signing time:             Wed 16 Jul 2025 13:01:03 +0000
ROA not before:           Wed 16 Jul 2025 13:01:03 +0000
ROA not after:            Tue 14 Oct 2025 13:01:03 +0000
asID:                     13335
IP address blocks:        150.48.176.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:a6:22:9b:ff:90:5a:25:cd:71:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jul 16 13:01:03 2025 GMT
            Not After : Oct 14 13:01:03 2025 GMT
        Subject: CN=8e597fed-e896-4cd7-bdbf-d96e91ec437e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:14:b0:c6:a1:95:6a:63:32:af:f1:f9:db:21:
                    1e:43:36:4c:4f:4f:8f:a0:fa:94:5a:29:4b:2e:5c:
                    e7:71:b6:07:bb:dd:38:a7:06:1a:0b:b0:49:8b:59:
                    7f:3e:55:ce:a4:c7:4d:9c:01:db:97:ca:8b:44:0b:
                    05:b4:f9:2f:f7:2d:0e:2f:c5:e9:ce:fc:58:47:67:
                    bd:de:17:f6:39:da:2b:16:c6:ef:79:f5:c6:20:6d:
                    1b:ec:09:50:2b:a9:08:ef:18:a2:36:f5:60:bd:69:
                    25:2d:f3:ab:f4:60:36:06:6d:a1:9c:6b:b5:90:0c:
                    71:c5:57:58:a0:d2:34:e6:88:95:8e:8b:c0:98:9f:
                    fb:d2:9b:3f:05:70:51:d5:11:0d:01:e0:28:ee:d6:
                    9d:70:60:ed:28:14:d8:e8:cd:7d:dc:47:a0:ba:e4:
                    b4:6d:f9:96:26:fe:e4:ba:5d:ef:93:85:3b:3e:11:
                    c2:f4:8d:d4:cb:ff:50:14:16:df:3e:0a:d6:89:c2:
                    d9:f4:93:d3:25:1b:12:61:11:87:d8:db:51:4b:08:
                    8e:b3:dc:2a:61:3e:20:fd:61:85:b6:e7:69:45:e3:
                    f4:4d:b5:06:6e:47:e0:d9:f9:2b:6c:f5:23:a9:ca:
                    6c:06:07:49:ba:5b:01:d1:0a:35:51:8a:a9:45:90:
                    15:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:54:87:E6:98:77:94:BE:1D:FE:61:85:71:47:32:85:F3:EA:83:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d46e8718-f337-388f-886d-31c98f75308a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.48.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:2c:b3:71:f1:b4:5c:14:5a:b9:65:b9:08:da:75:bc:77:81:
         c6:3c:a7:c7:c0:fb:a9:ec:8e:f7:c2:7b:78:22:a3:91:9b:80:
         47:8e:5a:98:85:1d:eb:5b:f5:24:06:35:cd:49:9f:fa:88:4d:
         e2:bc:d0:47:df:9c:24:3a:e4:57:17:f0:d7:05:e1:7b:dc:84:
         e0:52:bd:e0:3b:79:d6:66:fb:79:2e:ca:6c:ab:2d:f0:fb:f4:
         5b:c7:8b:03:ba:71:4e:00:d5:33:47:17:92:e0:b2:c5:24:db:
         c6:3d:11:68:be:86:c9:c3:f4:2d:40:41:93:4d:28:64:57:5c:
         09:e8:ab:63:41:8d:28:ea:91:a4:92:2d:bb:45:12:56:cf:b5:
         d2:9e:0c:3d:59:88:06:c5:2a:43:d9:7c:89:91:39:85:c1:14:
         9d:d8:3d:4d:5f:e5:9d:e1:7e:35:c8:86:41:26:57:3c:d6:94:
         59:40:51:2e:14:be:88:d1:24:74:a6:12:17:a7:5e:d3:cf:a4:
         46:5b:03:5a:ad:6d:6a:bd:23:2c:d2:f1:75:47:6f:c9:1f:33:
         9f:d6:03:cc:75:5d:02:f5:fb:31:8f:dc:4f:b8:91:b9:c2:ac:
         84:1e:10:84:55:0f:b8:5d:09:48:8b:4f:af:b0:b1:4f:cc:d9:
         d9:aa:20:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 01:33:12 2025 by rpki-client