Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2a29e3e0-690c-3577-801a-2ef87a2601f9.roa
File:                     2a29e3e0-690c-3577-801a-2ef87a2601f9.roa (raw, json)
Hash identifier:          3HwtjFDGRYFGA7KOZk9AbCj5Ufm6h3Yt3LXJGwQ2R54=
Subject key identifier:   6D:E8:1C:C3:46:E4:AA:F3:B0:DE:09:27:1B:0E:53:5D:A8:AB:D0:5D
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584B6A61F491F9EB15A1DDD68D00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2a29e3e0-690c-3577-801a-2ef87a2601f9.roa
Signing time:             Sun 05 Oct 2025 01:00:32 +0000
ROA not before:           Sun 05 Oct 2025 01:00:32 +0000
ROA not after:            Sat 03 Jan 2026 02:00:32 +0000
asID:                     13335
IP address blocks:        150.48.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6a:61:f4:91:f9:eb:15:a1:dd:d6:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct  5 01:00:32 2025 GMT
            Not After : Jan  3 02:00:32 2026 GMT
        Subject: CN=eeb28b3f-4a9d-4345-a01c-a2b418555df0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:94:5d:18:73:2e:89:20:fa:62:c5:99:c1:f0:
                    4a:a6:c1:aa:49:98:67:e9:3c:54:ee:10:4d:01:ac:
                    8f:b6:b8:ed:b2:88:b4:0d:17:49:44:cc:23:aa:a3:
                    0c:eb:b3:78:d8:12:ba:61:e7:36:83:69:9b:f9:d7:
                    fc:35:30:1e:3d:db:03:aa:dc:bf:16:51:cb:5f:9c:
                    b2:68:a3:a4:aa:6b:50:d2:a5:0a:95:d0:c6:f5:4c:
                    05:65:d9:aa:4b:a4:98:0c:6e:c4:aa:d5:83:6d:b9:
                    ca:f8:f6:c8:1d:03:a2:6d:d3:81:7e:e6:a1:88:33:
                    2e:ab:a5:09:ab:a7:d1:6a:8e:d9:23:d2:90:4d:46:
                    10:26:dd:0b:d8:7f:37:67:d3:15:84:46:c8:a3:ca:
                    e8:52:91:a0:96:ce:61:9e:3d:02:aa:4f:4b:69:5a:
                    e1:bc:b4:a5:94:71:ce:29:67:ce:61:1b:37:6d:82:
                    68:d3:59:2b:8c:3a:e2:fd:be:4d:94:0a:a4:db:13:
                    11:d5:71:c0:8c:cc:4e:4e:9f:54:e2:15:e0:4e:2e:
                    69:81:03:df:bd:a9:8f:92:87:46:45:ea:c1:d3:4f:
                    8a:96:ed:38:29:31:d2:c3:be:44:b6:37:37:59:ab:
                    cb:48:f0:ef:4d:8a:d4:be:6d:b8:14:e5:77:d9:37:
                    5a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:E8:1C:C3:46:E4:AA:F3:B0:DE:09:27:1B:0E:53:5D:A8:AB:D0:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2a29e3e0-690c-3577-801a-2ef87a2601f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.48.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:4a:e3:32:5c:f5:22:41:45:2d:34:f0:3b:a8:44:16:10:9f:
         0e:de:e6:84:70:a9:d7:9f:aa:67:af:23:26:5d:ab:82:61:88:
         c0:57:dc:d8:f6:2f:1d:55:dc:02:dc:46:3f:ff:ff:b8:40:28:
         7d:c2:06:61:29:6d:21:89:59:3d:bb:34:41:bf:ba:49:07:78:
         bf:e8:3c:db:de:75:18:a3:36:e3:ca:d6:51:e3:dc:57:89:ae:
         8a:83:3b:17:28:1f:b8:41:72:49:98:3e:dd:c6:ca:e7:66:75:
         3a:e5:63:a2:4d:7b:78:c9:34:da:47:e7:75:a4:ee:e5:05:e6:
         ac:7c:3e:17:7c:56:ac:d9:ef:92:23:f8:84:d9:41:a7:47:c2:
         75:d4:ef:47:aa:8c:a2:a4:b7:04:13:80:84:0e:02:b9:fa:d9:
         7f:b9:bc:90:cf:f2:3e:d0:2d:9b:ae:a6:f0:36:5a:2a:da:b2:
         25:00:f1:50:05:d4:d3:81:b6:fa:fb:57:f0:06:cb:05:2d:e1:
         45:c9:4d:94:b1:12:93:b9:98:9a:1c:95:3a:73:91:e8:77:7e:
         58:6c:9b:6d:ce:b2:4e:5b:c0:7e:ca:aa:9b:3e:da:8e:03:85:
         bc:90:ef:a7:d1:6a:42:98:ee:37:5e:11:ea:90:9f:d9:c5:f8:
         e3:60:ef:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:53:41 2025 by rpki-client