Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fe5555d2-10b2-39b3-ad7f-4101d3cb1bb1.roa
File:                     fe5555d2-10b2-39b3-ad7f-4101d3cb1bb1.roa (raw, json)
Hash identifier:          u7psyxabs0oUb5BDazz0vIUz7RaXzeBUEInPro5LrdE=
Subject key identifier:   55:ED:15:34:0C:72:87:7F:7A:13:27:32:20:00:71:75:3A:6A:C7:34
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584D2A74EFD39F235E91F8BE0080
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fe5555d2-10b2-39b3-ad7f-4101d3cb1bb1.roa
Signing time:             Sat 14 Mar 2026 13:00:40 +0000
ROA not before:           Sat 14 Mar 2026 13:00:40 +0000
ROA not after:            Fri 12 Jun 2026 13:00:40 +0000
asID:                     13335
IP address blocks:        150.48.172.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2a:74:ef:d3:9f:23:5e:91:f8:be:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Mar 14 13:00:40 2026 GMT
            Not After : Jun 12 13:00:40 2026 GMT
        Subject: CN=fee0698e-f544-446d-8bd0-739657559ec8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:dc:e7:f0:66:ca:5d:30:97:e5:82:74:01:0d:
                    80:72:32:4a:3a:2b:7c:ba:b2:e9:93:9f:a1:a7:9b:
                    3b:43:72:0f:d8:c8:a0:4d:fd:1b:09:02:62:9d:97:
                    eb:36:84:0d:76:a6:14:e1:8f:4f:74:5b:13:3c:76:
                    31:dc:28:94:4b:90:74:9e:e1:75:f0:70:56:7a:92:
                    61:03:62:46:a4:18:61:fc:1e:dc:07:b9:1b:ae:8c:
                    f4:63:7a:e7:b7:4c:98:c4:2f:48:43:c0:e8:eb:29:
                    22:37:70:b1:93:bd:5f:62:6f:62:d2:67:44:96:d7:
                    33:5a:43:24:49:c6:e0:33:da:b9:e9:dc:c9:df:73:
                    2c:2b:8a:93:8c:85:5c:4c:d2:76:71:8c:c1:7d:8a:
                    2d:0f:fc:9e:88:61:d3:25:44:81:13:67:07:cd:40:
                    e7:bc:c7:30:14:8e:7d:f9:74:c4:f7:79:3c:40:81:
                    cc:02:01:13:e4:0f:9e:17:bf:9b:a6:9e:13:4e:21:
                    1f:19:53:66:85:4b:1e:f0:4e:ef:65:bb:d0:77:ea:
                    10:99:e4:97:06:b3:e1:49:46:64:d4:99:0a:03:bb:
                    cd:76:15:4a:b1:32:75:61:18:2e:3f:a0:d3:44:a6:
                    76:a2:4e:76:2c:0e:22:75:5e:6a:7d:5f:4d:a7:62:
                    49:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:ED:15:34:0C:72:87:7F:7A:13:27:32:20:00:71:75:3A:6A:C7:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fe5555d2-10b2-39b3-ad7f-4101d3cb1bb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.48.172.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:6c:d3:c0:a9:10:93:b4:f0:2d:2e:e0:ac:ad:9f:cb:09:4b:
         c8:72:a6:88:32:9f:c2:b8:60:d2:f3:23:71:47:f2:0c:8a:dc:
         b2:d1:55:00:16:f5:d2:43:e0:0b:f5:99:59:37:30:78:f4:27:
         10:11:ca:16:ba:cb:b1:d8:a9:72:44:ac:f2:d5:bd:ba:80:f2:
         bc:8e:dd:37:f6:81:6a:1f:1b:c4:96:a1:08:4c:73:5f:ff:55:
         33:33:b4:33:cc:e8:07:73:d1:fd:bd:69:20:58:08:35:d4:c7:
         f7:ee:8f:15:09:3c:70:41:c9:37:07:e7:b2:d1:d5:f2:cc:c5:
         5b:e2:4c:eb:d9:08:1d:71:76:25:2b:f9:08:2c:ce:7c:82:7b:
         88:6c:73:92:bc:6c:64:db:6b:3b:88:7a:9e:b5:6f:fc:60:e7:
         66:f9:da:94:43:d4:c8:75:d2:7c:50:39:33:2f:b2:c8:24:7f:
         06:02:32:64:98:c0:cd:df:29:e7:3f:e0:d0:7f:c5:a8:57:47:
         3f:c0:15:11:f2:5f:b7:54:48:d5:99:55:e5:8d:9a:dc:e8:75:
         fa:28:41:d1:ed:43:31:2c:68:db:83:c4:4f:37:67:6a:ea:65:
         22:e2:99:3f:03:87:4d:85:00:e7:26:d5:60:49:7d:54:e5:28:
         00:41:d3:99
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdO/TnyNekfi+AIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk
ZmVlMDY5OGUtZjU0NC00NDZkLThiZDAtNzM5NjU3NTU5ZWM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitzn8GbKXTCX5YJ0AQ2AcjJKOit8urLpk5+h
p5s7Q3IP2MigTf0bCQJinZfrNoQNdqYU4Y9PdFsTPHYx3CiUS5B0nuF18HBWepJh
A2JGpBhh/B7cB7kbroz0Y3rnt0yYxC9IQ8Do6ykiN3Cxk71fYm9i0mdEltczWkMk
ScbgM9q56dzJ33MsK4qTjIVcTNJ2cYzBfYotD/yeiGHTJUSBE2cHzUDnvMcwFI59
+XTE93k8QIHMAgET5A+eF7+bpp4TTiEfGVNmhUse8E7vZbvQd+oQmeSXBrPhSUZk
1JkKA7vNdhVKsTJ1YRguP6DTRKZ2ok52LA4idV5qfV9Np2JJCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFXtFTQMcod/ehMnMiAAcXU6asc0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZmU1NTU1ZDItMTBiMi0z
OWIzLWFkN2YtNDEwMWQzY2IxYmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBljCsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHVs08CpEJO08C0u4Kytn8sJS8hypogyn8K4YNLzI3FH8gyK3LLRVQAW
9dJD4Av1mVk3MHj0JxARyha6y7HYqXJErPLVvbqA8ryO3Tf2gWofG8SWoQhMc1//
VTMztDPM6Adz0f29aSBYCDXUx/fujxUJPHBByTcH57LR1fLMxVviTOvZCB1xdiUr
+QgsznyCe4hsc5K8bGTbazuIep61b/xg52b52pRD1Mh10nxQOTMvssgkfwYCMmSY
wM3fKec/4NB/xahXRz/AFRHyX7dUSNWZVeWNmtzodfooQdHtQzEsaNuDxE83Z2rq
ZSLimT8Dh02FAOcm1WBJfVTlKABB05k=
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:33:29 2026 by rpki-client