Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1e186e99-dae1-3c0e-9e90-df8bcc20c0ec.roa
File:                     1e186e99-dae1-3c0e-9e90-df8bcc20c0ec.roa (raw, json)
Hash identifier:          FFpXBwPHi/iUnpANyUtEXxmscGRc1tup3GZi/KryOjc=
Subject key identifier:   79:59:7A:CA:38:CF:A4:34:BC:34:E8:CA:53:7C:2E:54:EA:5C:65:77
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584D2A74F14F12E810E8642458C0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1e186e99-dae1-3c0e-9e90-df8bcc20c0ec.roa
Signing time:             Sat 14 Mar 2026 13:00:40 +0000
ROA not before:           Sat 14 Mar 2026 13:00:40 +0000
ROA not after:            Fri 12 Jun 2026 13:00:40 +0000
asID:                     13335
IP address blocks:        150.48.164.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2a:74:f1:4f:12:e8:10:e8:64:24:58:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Mar 14 13:00:40 2026 GMT
            Not After : Jun 12 13:00:40 2026 GMT
        Subject: CN=7f8d11e2-f604-4ccb-9bc6-f07e85638412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e4:97:7b:42:10:e8:ab:3b:80:1e:39:29:b9:
                    7b:63:2a:03:82:44:32:bf:c9:55:b9:de:f9:49:6b:
                    1c:1e:85:3b:82:53:13:8a:b5:bc:37:46:86:a4:56:
                    3c:2b:3f:14:5a:bf:31:01:92:02:d1:b2:5c:0b:0b:
                    a1:4b:6e:59:c6:f7:7a:90:61:01:7d:8e:7c:cd:55:
                    30:8f:08:76:99:be:db:9b:c9:7d:1c:b0:2b:e0:d4:
                    8a:18:c6:68:d6:ce:7c:89:92:3b:e1:5b:04:2e:2d:
                    41:0b:d6:73:73:01:fa:94:f3:70:dd:1f:cd:67:62:
                    83:2d:0a:4b:56:76:a5:a6:fb:02:5c:49:01:49:0c:
                    51:98:cf:d5:cf:36:84:a6:a5:b6:2b:26:07:76:51:
                    0b:27:a2:7d:8f:c3:3e:6d:23:21:f9:3f:0d:6d:fb:
                    a2:a9:13:82:1a:ef:ea:e1:5b:0c:5d:83:fb:df:d5:
                    e7:48:be:02:82:e9:eb:bc:5b:e9:87:6a:2d:dd:cf:
                    0f:cd:b3:9b:d7:88:26:4c:b2:5b:0f:c5:d9:0d:4a:
                    1f:d1:84:3f:6d:7d:95:81:e8:d8:ab:1a:d6:b7:66:
                    af:f1:42:1d:fa:cc:1c:93:35:85:5b:de:e6:b6:cb:
                    6c:8b:a4:02:50:00:f1:5c:13:37:0b:04:92:7c:ed:
                    cd:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:59:7A:CA:38:CF:A4:34:BC:34:E8:CA:53:7C:2E:54:EA:5C:65:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1e186e99-dae1-3c0e-9e90-df8bcc20c0ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.48.164.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:84:c4:ba:6a:a0:a9:b6:d6:86:47:a2:40:bd:f9:ef:25:23:
         29:de:9b:37:ac:33:e1:34:73:92:6f:63:0e:28:46:75:d9:6b:
         45:02:28:a8:52:1f:28:e9:9a:6f:7f:28:b7:d8:92:6a:fe:88:
         01:76:45:ef:b8:2d:26:64:81:38:ff:f7:cd:95:f1:41:f4:42:
         88:31:d0:92:c1:24:6c:5f:c4:69:96:95:cc:70:d5:e0:2e:59:
         22:b0:69:19:ef:b0:6d:f0:e0:01:46:47:6a:7b:31:1d:40:18:
         b5:84:fc:4b:a5:d6:ef:1a:04:44:69:23:ac:d5:e7:8e:c9:54:
         df:47:62:3f:a8:9a:02:89:81:db:07:bc:d0:08:6d:f6:fe:77:
         13:32:74:ec:58:41:cb:dd:5d:f0:e7:a7:04:6a:89:39:03:c6:
         7d:64:7c:e5:b3:4f:dd:12:1b:6d:03:f8:79:3a:1e:a6:ed:9a:
         4f:e3:6f:77:be:66:50:a2:15:c1:da:e8:4d:bc:6d:b3:09:72:
         3a:8d:cd:41:57:24:9c:d6:f7:a5:12:a3:a3:aa:26:04:2b:f3:
         c6:bc:50:ea:cf:c5:9e:c0:33:20:ed:44:6d:d2:1e:0b:ea:9c:
         43:3b:a5:d2:e5:7a:1c:15:9a:dd:ce:19:00:b6:4e:85:9c:81:
         c1:ed:4f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:28:04 2026 by rpki-client