Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6545a06e-7f40-3f2e-ba2b-6d74cee4d4fd.roa
File:                     6545a06e-7f40-3f2e-ba2b-6d74cee4d4fd.roa (raw, json)
Hash identifier:          6TUz4FdSMIWW7txWTGIgblH4HCXNon74q34wpx9FJik=
Subject key identifier:   BF:E7:7E:98:80:68:F9:C7:BC:6E:D4:66:C6:90:E0:E2:3A:48:C8:7D
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584D2A74F3D3A2BDCF3F5B7D0D00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6545a06e-7f40-3f2e-ba2b-6d74cee4d4fd.roa
Signing time:             Sat 14 Mar 2026 13:00:40 +0000
ROA not before:           Sat 14 Mar 2026 13:00:40 +0000
ROA not after:            Fri 12 Jun 2026 13:00:40 +0000
asID:                     13335
IP address blocks:        150.48.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2a:74:f3:d3:a2:bd:cf:3f:5b:7d:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Mar 14 13:00:40 2026 GMT
            Not After : Jun 12 13:00:40 2026 GMT
        Subject: CN=60077c05-f90a-490b-94ab-db05d1dd6628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d1:4c:de:b4:31:2f:ef:a7:0e:5a:80:f6:d4:
                    78:e0:fe:e9:14:62:d7:88:ac:80:56:80:91:03:26:
                    32:e4:b4:4c:70:68:62:3d:2f:48:fc:d4:1e:00:66:
                    99:e8:8d:30:6e:3e:27:05:91:47:0e:3b:a4:01:d1:
                    39:df:a1:cc:77:06:bf:cc:9a:3d:58:77:f3:7e:9b:
                    e7:af:c2:4c:96:3e:da:f2:87:ad:fa:9a:8d:b7:86:
                    8e:d5:6c:e8:72:a2:b0:e3:d2:43:a8:01:e6:86:15:
                    26:02:cd:8e:c5:78:f0:9a:f3:c4:88:1b:e9:7b:e0:
                    89:78:7d:75:71:ba:3b:de:64:ee:69:6c:d0:98:9d:
                    8f:55:f9:12:21:a8:4c:31:36:7e:ea:62:f3:df:79:
                    ed:7e:aa:e3:08:41:8c:41:e3:3f:c6:09:4a:bf:7c:
                    fb:be:52:3a:16:3f:f6:6b:98:78:56:cd:dc:fe:2f:
                    a7:59:0d:3a:7a:8f:69:c8:b9:01:44:de:51:de:a5:
                    be:dc:eb:0d:83:d6:bf:3c:02:18:6c:f0:77:34:ec:
                    05:73:63:0a:97:62:d0:0d:bc:39:c2:f2:c7:6e:88:
                    af:1b:d4:1d:19:20:75:d6:81:38:8d:80:b8:2d:b0:
                    a8:a9:c3:d7:e1:ba:9f:f4:80:82:05:62:93:31:22:
                    80:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:E7:7E:98:80:68:F9:C7:BC:6E:D4:66:C6:90:E0:E2:3A:48:C8:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6545a06e-7f40-3f2e-ba2b-6d74cee4d4fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.48.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:5d:44:f6:52:8f:21:20:32:b8:7f:30:43:7d:6b:0b:57:75:
         37:c0:30:11:0d:50:ea:66:ea:a1:e5:81:74:73:13:f9:da:1e:
         3a:d0:ae:97:de:44:bb:8b:33:88:d0:58:c7:14:b1:1f:46:67:
         2e:9e:54:e8:c4:45:47:b9:d1:e2:c9:0d:e3:74:c5:90:b1:80:
         36:c8:60:aa:95:24:51:97:15:8a:6d:53:3d:19:1f:0b:fa:1f:
         c3:dc:94:e4:f8:57:be:ee:d2:25:a0:e9:7e:37:5f:45:d2:06:
         be:8e:19:4b:07:d3:ab:97:d0:39:36:6a:18:67:64:ff:98:02:
         fe:e5:12:d2:da:86:c7:fc:50:fd:1a:dd:31:a1:d5:18:1e:9e:
         aa:19:89:ae:71:ef:01:3a:d9:dc:ca:ef:1a:10:c4:97:d0:3e:
         d3:3f:8e:29:96:ed:ec:b7:05:0a:7b:4c:27:2b:f5:1b:c0:49:
         07:ef:db:a1:2d:20:1c:28:8e:27:cf:c1:2b:10:26:b6:bd:16:
         9f:fd:c3:7d:28:10:97:8e:70:a3:31:b9:d4:74:a2:fe:c3:83:
         5a:b4:03:b1:ef:b0:26:61:37:69:e8:a5:ee:44:49:c6:06:78:
         90:3e:20:08:ba:bc:51:99:28:73:1d:f8:5f:bd:f7:7b:9a:27:
         cf:38:77:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:11:21 2026 by rpki-client