Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6c80e3d5-346d-3567-9003-79a6e213a98d.roa
File:                     6c80e3d5-346d-3567-9003-79a6e213a98d.roa (raw, json)
Hash identifier:          2oMCHrIBanrCRkjMoKTqEbPUK/NurKvWaeVOebBbtS0=
Subject key identifier:   59:BE:D2:27:CB:99:B9:70:51:55:D3:2E:5C:00:00:A9:FB:B0:F1:76
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584B6A61F79D78976FB4AF43EF20
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6c80e3d5-346d-3567-9003-79a6e213a98d.roa
Signing time:             Sun 05 Oct 2025 01:00:32 +0000
ROA not before:           Sun 05 Oct 2025 01:00:32 +0000
ROA not after:            Sat 03 Jan 2026 02:00:32 +0000
asID:                     13335
IP address blocks:        150.48.152.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6a:61:f7:9d:78:97:6f:b4:af:43:ef:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct  5 01:00:32 2025 GMT
            Not After : Jan  3 02:00:32 2026 GMT
        Subject: CN=8a438a32-a40b-4135-b60f-ed5ddeef0463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:87:59:7b:46:5d:26:08:db:af:03:ab:91:e4:
                    f7:84:c5:98:52:00:31:23:60:d1:11:1a:5d:fe:40:
                    f0:33:cc:77:31:e0:20:8d:48:ee:cd:e3:a4:6b:1e:
                    73:6e:6f:c7:4e:63:1b:85:a7:29:c6:ff:72:76:3f:
                    1b:41:08:60:d8:3a:f0:e1:02:1c:e2:bd:c5:ac:f4:
                    09:2a:6a:95:af:a3:23:94:7c:fd:5b:78:f8:29:a6:
                    08:6a:5a:80:46:c5:16:aa:7b:07:6b:f5:66:03:3d:
                    82:09:06:2b:ab:47:17:e2:51:30:4e:7c:06:6f:13:
                    d0:53:7c:0a:58:e4:be:73:5a:70:f7:8f:46:bd:00:
                    95:a8:ab:52:cd:1a:de:60:94:3f:b6:10:16:8d:c5:
                    7b:c1:1f:34:c1:69:28:87:50:18:10:52:5a:8a:bb:
                    4e:f4:f5:77:14:c0:0d:d2:0b:60:2c:f0:03:9e:60:
                    64:28:d3:0b:b8:99:fa:93:a2:e7:25:72:45:18:59:
                    37:b6:da:1b:5f:e6:24:c8:54:7e:31:70:72:09:af:
                    69:fb:1d:ec:61:8e:41:68:bd:fd:91:60:e0:63:16:
                    71:59:4d:f6:7a:60:47:33:42:ec:90:4e:70:43:0f:
                    96:43:71:89:9e:20:6d:77:27:a1:50:3f:26:cc:11:
                    37:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:BE:D2:27:CB:99:B9:70:51:55:D3:2E:5C:00:00:A9:FB:B0:F1:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6c80e3d5-346d-3567-9003-79a6e213a98d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.48.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:c7:49:3a:c8:5b:5d:5a:d3:6b:ae:ac:c4:65:e3:46:cd:5b:
         69:ef:63:d2:d5:d6:78:ab:a0:4b:b1:99:2b:11:d4:ea:4e:ae:
         9a:c9:48:97:e1:72:bb:aa:ef:fe:3a:16:77:f0:a3:d5:58:7b:
         69:f9:f0:7d:4d:58:cf:4b:e2:af:27:f5:d0:7f:6c:82:40:0c:
         41:13:07:e7:11:3a:ca:5a:5a:89:3a:95:a3:cc:c7:24:9c:a4:
         ee:97:fb:f4:05:f9:dc:90:f3:8a:5e:d5:87:97:cc:6f:53:96:
         10:a7:4f:b8:0d:14:4d:30:ed:97:26:48:1d:9c:01:90:3f:cf:
         03:26:7c:6b:3a:03:c5:d9:95:23:fe:ef:00:89:4e:60:1e:a7:
         2f:fc:be:28:bc:a7:b7:21:a5:98:c6:ba:12:1b:88:68:4e:ea:
         43:8e:d7:a0:4c:41:7d:5f:38:5b:d9:44:e8:15:81:d2:8c:dc:
         c1:0a:bc:80:2f:e4:33:e1:83:c0:f9:31:c6:3f:34:d0:e3:9b:
         14:0a:81:40:4e:f3:33:16:2f:83:67:24:0b:23:8e:aa:2a:bc:
         cf:78:d4:f7:b4:5e:e7:33:cb:6a:d1:ce:e9:13:9b:a6:79:6e:
         02:09:7e:d0:51:fc:04:85:7b:8e:b5:0c:ab:53:ce:0c:d4:91:
         e5:a0:83:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:41:09 2025 by rpki-client