Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/787db202-c2ef-30bc-945a-9af856fd0553.roa
File:                     787db202-c2ef-30bc-945a-9af856fd0553.roa (raw, json)
Hash identifier:          0rfUvyA4D3HfUBX3O2P9S7viIdyVJWvmZzYIViXyhnw=
Subject key identifier:   8A:7A:06:72:5A:7D:8F:7E:6C:79:ED:7D:06:A8:EF:6A:46:3B:6A:1D
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584F4F082174F181E22D4333EFE8
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/787db202-c2ef-30bc-945a-9af856fd0553.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     13335
IP address blocks:        150.48.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:08:21:74:f1:81:e2:2d:43:33:ef:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=904dc5b1-87a0-48b7-91d5-bca4c200a0bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cc:99:10:0c:a5:93:65:db:ff:30:36:5a:4f:
                    8c:9f:c3:87:be:64:25:60:5f:3e:0f:d6:12:33:69:
                    d7:45:c1:42:2a:97:85:5b:e8:18:2a:5a:f4:55:a0:
                    a5:7c:d2:a2:4d:53:d0:ce:29:58:91:fe:e3:a0:df:
                    f8:83:60:73:7a:ce:c2:10:dc:f3:28:de:36:00:f2:
                    ca:b6:69:dc:ed:bd:fc:4c:07:69:87:6d:9c:ae:6c:
                    7f:7c:af:a5:5a:a5:00:b6:48:c9:60:5a:08:e6:dd:
                    57:7f:2e:d9:eb:d5:d1:6e:35:a0:7c:3a:44:99:69:
                    f2:3a:f4:38:f9:20:52:8b:6d:52:b2:46:18:33:5a:
                    4c:59:67:69:e4:9a:16:ed:8f:53:95:37:22:cb:a1:
                    cb:d6:34:65:ca:62:cf:9c:cd:33:9d:2e:f5:b2:00:
                    d5:0b:b7:85:59:1a:72:b9:f2:2f:4c:83:bf:7a:92:
                    cc:4f:58:92:eb:c8:14:d2:87:dd:4a:86:6d:b9:d6:
                    84:29:90:2e:fa:50:60:1e:0f:fc:11:e7:cb:ed:bd:
                    60:a8:de:5f:84:e9:04:4e:33:b5:19:03:77:87:f4:
                    b1:f3:8e:a8:79:3c:8b:2f:47:1e:58:d4:48:9f:4f:
                    ff:a5:13:83:37:f2:cc:13:9b:a3:2a:a3:58:3d:dd:
                    d8:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:7A:06:72:5A:7D:8F:7E:6C:79:ED:7D:06:A8:EF:6A:46:3B:6A:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/787db202-c2ef-30bc-945a-9af856fd0553.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.48.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:4d:30:73:a2:d6:34:09:a3:e2:b6:65:15:80:1f:8d:e7:8e:
         b7:6a:cb:b5:20:91:a2:ce:d0:0e:bf:5e:58:01:83:e4:93:b8:
         e1:7e:a6:8e:8d:77:16:57:9f:81:02:67:45:04:eb:b3:b5:17:
         30:35:ae:2b:e2:c8:9a:cc:90:ea:ee:1a:59:94:b9:37:b7:37:
         f7:15:37:17:64:e7:53:f2:62:c6:23:22:14:97:62:68:0c:2f:
         15:fc:74:2b:03:ca:55:b8:c6:b7:b6:84:03:ca:59:8a:91:db:
         90:b5:1e:41:f6:9d:4b:bc:fb:0f:84:3a:7b:8e:17:6b:f7:35:
         e2:2e:ea:b8:e3:99:d0:84:bd:b2:0e:8e:c9:a8:44:8d:f9:2f:
         dd:90:36:cd:82:8e:87:21:16:52:b4:76:ba:df:58:7b:44:41:
         2e:5e:dc:9b:fa:d6:eb:82:b6:c4:c0:fc:14:93:e5:38:da:bd:
         3c:35:7e:6d:ce:ce:7c:b3:5d:ea:b1:cf:99:0d:01:24:40:a4:
         34:c6:f0:25:6c:d7:b6:f4:0c:3c:27:be:46:e1:d3:c6:b7:5c:
         70:b9:c8:bc:e2:b1:12:58:8b:0a:f3:ef:cf:a3:e1:63:2e:3d:
         98:8b:3a:ed:1c:ab:64:86:79:73:ce:0a:74:0e:f0:44:6b:31:
         0d:14:f5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 19:28:51 2026 by rpki-client