Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/85852c49-c9ec-33cd-83f5-fe8aa1041d0c.roa
File:                     85852c49-c9ec-33cd-83f5-fe8aa1041d0c.roa (raw, json)
Hash identifier:          I+q986xZdBzxAEUxwNbMwskoIrRHO6LwznULuIByNTw=
Subject key identifier:   29:A4:03:16:17:44:28:67:61:1F:4F:9F:D4:88:2C:88:FA:F9:FD:F5
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584B6A61F41F96DE042DB327DB80
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/85852c49-c9ec-33cd-83f5-fe8aa1041d0c.roa
Signing time:             Sun 05 Oct 2025 01:00:32 +0000
ROA not before:           Sun 05 Oct 2025 01:00:32 +0000
ROA not after:            Sat 03 Jan 2026 02:00:32 +0000
asID:                     13335
IP address blocks:        150.48.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6a:61:f4:1f:96:de:04:2d:b3:27:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct  5 01:00:32 2025 GMT
            Not After : Jan  3 02:00:32 2026 GMT
        Subject: CN=19fd983e-0a4d-456e-a2a8-9647ce9e87aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:15:8e:2e:f0:5d:af:c9:0b:97:d0:3b:00:e1:
                    b6:24:90:1f:4c:ac:30:4a:fe:29:6f:a8:95:ba:48:
                    0b:41:80:a5:ed:f3:bc:b2:6a:56:65:7d:ea:87:57:
                    99:a4:a7:64:81:22:2b:24:55:9a:b3:2c:99:b5:c8:
                    f2:c5:b4:28:2c:03:5b:78:38:fc:f4:c6:d8:4f:2f:
                    23:14:b1:90:74:8b:03:63:04:87:63:e6:3e:21:0e:
                    fd:d5:d4:64:c7:f4:cc:60:d1:a7:da:25:1c:9d:2f:
                    72:c9:d0:a8:78:14:04:0d:12:05:9b:9d:ed:3f:86:
                    f6:e3:23:c4:0f:ce:db:49:9a:d3:01:d2:c8:92:cc:
                    12:bd:49:fb:35:9f:16:74:c7:28:0a:f3:1c:55:ca:
                    f7:1c:12:32:e1:81:d2:f5:ec:a6:cd:a1:d6:aa:45:
                    6f:00:9c:ad:f5:d8:c6:2c:7d:8d:56:b4:f8:83:e3:
                    a8:84:9e:01:87:4d:b7:f8:d2:96:b3:8a:16:7b:c1:
                    de:61:d7:e5:90:b3:54:4c:cc:cd:37:05:e0:3f:2b:
                    cd:1b:a6:b8:2e:03:04:19:98:32:86:d1:09:d2:f1:
                    6c:0f:14:8f:54:89:02:9b:fa:db:d4:fe:bf:1c:05:
                    4d:38:70:d7:5c:b6:e6:80:3c:ab:4c:54:b6:fe:42:
                    ed:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:A4:03:16:17:44:28:67:61:1F:4F:9F:D4:88:2C:88:FA:F9:FD:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/85852c49-c9ec-33cd-83f5-fe8aa1041d0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.48.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:c6:f0:0d:98:72:58:4c:bb:c4:b5:b8:87:8c:c6:2e:92:85:
         03:24:5a:2d:82:4a:54:e1:2b:cb:ef:32:60:75:df:5e:fa:90:
         96:6f:53:00:be:2c:b1:ba:3e:11:78:33:32:ff:86:f0:44:5d:
         e6:8b:b9:0f:f9:ff:ba:16:3a:87:0f:f8:3a:bc:b1:ff:13:1b:
         39:be:3a:08:d7:e8:c0:a1:54:20:fd:4f:84:13:80:c4:50:b4:
         ba:0c:f7:62:6a:36:d7:af:16:aa:c0:97:cc:af:eb:eb:9e:71:
         a2:a2:91:76:b3:c5:ae:93:d7:b2:0b:99:81:ab:d0:75:cd:08:
         7e:35:c1:7b:0f:d3:e4:73:99:cd:0c:5b:7b:63:14:93:4e:4e:
         1a:a0:84:06:f8:0e:26:ef:8d:84:bd:f7:72:24:7d:ec:83:8a:
         d3:6c:e4:d7:df:19:49:b9:0b:3e:8d:a6:e8:75:0d:93:fd:d7:
         8a:8a:25:b9:d0:10:63:e6:58:6e:0a:13:10:08:34:29:0d:b5:
         10:c4:d0:2a:85:50:c9:7d:33:32:e2:73:4f:61:3f:c5:62:f6:
         6d:a9:1f:fa:3b:eb:df:df:e0:48:10:69:0d:b5:bc:4b:fb:6e:
         9a:77:52:05:ba:a3:72:88:d9:bc:b3:00:9e:f1:d4:14:6e:e5:
         4a:d6:16:9d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtqYfQflt4ELbMn24AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI1MTAwNTAxMDAzMloXDTI2MDEwMzAyMDAzMlowLzEtMCsGA1UEAxMk
MTlmZDk4M2UtMGE0ZC00NTZlLWEyYTgtOTY0N2NlOWU4N2FhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohWOLvBdr8kLl9A7AOG2JJAfTKwwSv4pb6iV
ukgLQYCl7fO8smpWZX3qh1eZpKdkgSIrJFWasyyZtcjyxbQoLANbeDj89MbYTy8j
FLGQdIsDYwSHY+Y+IQ791dRkx/TMYNGn2iUcnS9yydCoeBQEDRIFm53tP4b24yPE
D87bSZrTAdLIkswSvUn7NZ8WdMcoCvMcVcr3HBIy4YHS9eymzaHWqkVvAJyt9djG
LH2NVrT4g+OohJ4Bh023+NKWs4oWe8HeYdflkLNUTMzNNwXgPyvNG6a4LgMEGZgy
htEJ0vFsDxSPVIkCm/rb1P6/HAVNOHDXXLbmgDyrTFS2/kLtBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCmkAxYXRChnYR9Pn9SILIj6+f31MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvODU4NTJjNDktYzllYy0z
M2NkLTgzZjUtZmU4YWExMDQxZDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAljCNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAPG8A2YclhMu8S1uIeMxi6ShQMkWi2CSlThK8vvMmB13176kJZvUwC+
LLG6PhF4MzL/hvBEXeaLuQ/5/7oWOocP+Dq8sf8TGzm+OgjX6MChVCD9T4QTgMRQ
tLoM92JqNtevFqrAl8yv6+uecaKikXazxa6T17ILmYGr0HXNCH41wXsP0+Rzmc0M
W3tjFJNOThqghAb4DibvjYS993IkfeyDitNs5NffGUm5Cz6Npuh1DZP914qKJbnQ
EGPmWG4KExAINCkNtRDE0CqFUMl9MzLic09hP8Vi9m2pH/o769/f4EgQaQ21vEv7
bpp3UgW6o3KI2byzAJ7x1BRu5UrWFp0=
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:44:40 2025 by rpki-client