Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d2d3eb7e-6abc-36a1-aca0-d876649bbbee.roa
File:                     d2d3eb7e-6abc-36a1-aca0-d876649bbbee.roa (raw, json)
Hash identifier:          QG8TilPn0lOzPMz5I7r3f4KyWLiMW39DL0LI0av+XuA=
Subject key identifier:   5F:BD:3D:2A:C5:24:E6:2C:17:97:E3:0E:6E:87:B9:E6:D6:F5:AF:D3
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584D2A74F5010E1AE8FC83400600
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d2d3eb7e-6abc-36a1-aca0-d876649bbbee.roa
Signing time:             Sat 14 Mar 2026 13:00:40 +0000
ROA not before:           Sat 14 Mar 2026 13:00:40 +0000
ROA not after:            Fri 12 Jun 2026 13:00:40 +0000
asID:                     13335
IP address blocks:        150.48.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2a:74:f5:01:0e:1a:e8:fc:83:40:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Mar 14 13:00:40 2026 GMT
            Not After : Jun 12 13:00:40 2026 GMT
        Subject: CN=fd9aa105-0d56-4f94-9961-2e62b2a11228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6c:ee:77:04:55:71:90:f8:60:0a:57:0a:1e:
                    e9:ae:c9:c2:d6:3f:0e:26:aa:7d:b7:d3:46:e5:2b:
                    e8:72:4b:b8:50:b3:82:3d:b4:e1:61:0b:6e:08:a2:
                    5f:40:8d:be:df:a6:10:f3:ec:4f:53:a7:7e:4b:d2:
                    0b:f5:1f:80:0e:53:fc:28:ab:d3:8d:ed:a1:03:20:
                    9f:3a:d0:51:aa:8d:78:77:a5:75:72:3d:f5:f2:e7:
                    c7:67:cd:47:84:9a:bf:82:46:a2:84:d8:2b:61:4a:
                    cb:1d:98:24:81:30:28:93:92:68:61:ad:8c:cd:9d:
                    33:fb:e4:e4:ea:46:79:7d:81:ae:f2:ba:44:be:5f:
                    15:e3:5d:18:15:78:68:a0:81:7a:5c:f2:f3:32:ce:
                    ab:08:3c:78:c1:84:74:f7:5a:e0:7c:1d:13:45:c5:
                    36:f2:06:d9:38:bb:68:54:a2:56:84:4e:2e:35:3e:
                    88:1b:b6:da:0b:4e:b8:9b:40:fc:0b:f6:19:06:df:
                    9d:53:d2:a3:9c:ce:6f:7f:4f:e8:5a:26:f3:22:eb:
                    cb:48:a4:43:e7:42:55:6f:0b:38:f7:c8:a4:5e:bf:
                    f7:8b:4c:1b:c6:39:b3:23:f3:10:b2:c6:21:da:b5:
                    2c:3d:76:83:85:60:9a:0e:9b:f6:31:b1:62:04:cc:
                    f7:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:BD:3D:2A:C5:24:E6:2C:17:97:E3:0E:6E:87:B9:E6:D6:F5:AF:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d2d3eb7e-6abc-36a1-aca0-d876649bbbee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.48.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:de:e8:44:cf:eb:1b:76:df:b4:7f:51:63:5b:8d:d4:47:af:
         ed:1b:49:7b:88:6b:08:3f:c0:32:41:23:7b:08:4d:23:d4:77:
         48:01:72:d9:51:5e:d9:e0:e8:e1:c3:9b:e4:74:fa:cb:84:a2:
         f2:b8:d7:55:89:a7:c0:5b:69:5c:7f:76:3b:96:24:8b:cc:eb:
         19:fd:b1:59:83:dd:88:1e:81:c9:65:d8:2b:14:b8:70:ae:7a:
         57:75:9c:74:7d:36:2e:79:44:18:de:1f:69:46:1d:f0:8c:7c:
         06:d0:6f:b8:14:81:77:69:16:28:31:e8:ea:c8:cd:f0:6e:6f:
         55:2a:25:0c:d4:f2:16:df:06:ae:4e:45:8b:25:fa:69:79:d4:
         ea:cc:6d:37:b5:72:2f:dd:a1:76:54:a3:da:e3:87:59:b0:73:
         b5:f2:3c:f5:12:47:2e:33:bc:c0:9e:f2:63:49:87:5f:5c:08:
         85:ad:52:5e:b0:f3:6a:27:c5:3b:fe:25:a4:92:13:89:49:07:
         45:b7:2d:6f:35:1c:a1:55:99:89:f8:36:96:d8:24:53:fd:24:
         95:38:51:55:ca:2b:08:13:4e:e6:bc:b7:49:56:e6:16:9d:82:
         2a:6d:26:cd:a7:8c:ee:95:77:0e:4b:c8:4a:6a:b1:8d:be:4c:
         33:46:8b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:25:30 2026 by rpki-client