Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1065f2b1-5696-3c0c-b381-eec1becb046e.roa
File:                     1065f2b1-5696-3c0c-b381-eec1becb046e.roa (raw, json)
Hash identifier:          o4Ps4k6aGrsl/oRca97UnWqNgNf87YKa82k+DKb2ArI=
Subject key identifier:   E6:57:EE:22:5F:8A:24:34:14:A6:3A:3C:05:97:5B:7D:39:C1:F2:B2
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584B6A61F5221F8EE0E8C2A7B350
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1065f2b1-5696-3c0c-b381-eec1becb046e.roa
Signing time:             Sun 05 Oct 2025 01:00:32 +0000
ROA not before:           Sun 05 Oct 2025 01:00:32 +0000
ROA not after:            Sat 03 Jan 2026 02:00:32 +0000
asID:                     13335
IP address blocks:        150.48.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6a:61:f5:22:1f:8e:e0:e8:c2:a7:b3:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct  5 01:00:32 2025 GMT
            Not After : Jan  3 02:00:32 2026 GMT
        Subject: CN=b985f240-e5cf-4c18-923a-3b78cbe41a86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ae:be:08:88:e9:e7:ef:39:25:a1:97:8f:5f:
                    88:e4:86:21:b6:59:73:22:cf:d0:a2:2c:d9:a2:0f:
                    5e:9c:ea:fa:60:db:40:ef:ca:52:50:f3:1b:98:57:
                    4b:c8:19:89:75:48:7a:c2:e7:b7:68:e5:c4:8b:a7:
                    63:ac:4a:1f:bb:6c:6c:4b:65:d6:df:3d:f1:ca:8e:
                    5c:99:d7:3b:98:34:11:4e:8e:d7:8c:40:ce:e2:f2:
                    8e:d8:a8:fa:0f:60:9d:c6:6b:56:49:79:7b:9d:1f:
                    56:4e:b0:1a:ed:a6:2f:a8:52:b4:15:cc:cd:d4:3f:
                    48:db:89:57:1b:96:9a:d7:fc:1d:25:4f:81:06:eb:
                    9f:99:27:fb:a4:09:79:cf:e4:9f:f8:79:8e:ca:70:
                    a4:e6:bd:08:43:11:89:88:d8:c7:05:b5:51:ba:7f:
                    1d:6e:76:e6:64:de:18:eb:b6:92:9d:36:c8:8c:06:
                    be:90:57:d2:55:da:7f:b4:99:51:99:b1:dd:53:11:
                    e7:42:20:d4:2b:14:94:d3:ef:76:5f:29:0f:03:73:
                    84:04:ae:4f:a0:ea:65:c3:ae:2b:4e:e9:74:7f:67:
                    c0:f2:b6:70:12:77:e7:17:a6:55:bf:c1:f7:9c:35:
                    c1:84:68:cc:f0:bc:b3:8b:0f:44:ff:2f:00:ae:d5:
                    5c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:57:EE:22:5F:8A:24:34:14:A6:3A:3C:05:97:5B:7D:39:C1:F2:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1065f2b1-5696-3c0c-b381-eec1becb046e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.48.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:aa:53:2f:a8:b7:99:94:e3:bf:18:68:c1:10:71:0d:2d:70:
         7d:61:e6:77:2d:3f:c2:6c:16:d7:6b:a0:41:7e:91:32:ee:9e:
         04:c3:95:02:89:ab:fc:85:23:95:91:34:23:9e:3b:4c:1b:c2:
         4d:10:7c:f3:6b:82:59:c4:15:3c:25:c6:6d:82:11:73:4a:76:
         b1:f8:36:77:7d:2d:0d:69:ce:04:a5:a0:4f:db:9d:e0:50:ed:
         34:3f:d3:0b:7d:d1:c6:d6:c1:9f:56:e5:49:6b:9b:cd:49:e5:
         4f:7d:81:24:05:7d:b2:39:06:5d:15:cf:dc:ac:88:83:5f:29:
         f2:8a:35:60:3c:ce:1a:8d:22:71:32:75:0c:78:f4:08:d8:56:
         79:33:25:61:e2:58:02:e4:93:a9:52:dc:3e:14:b8:e8:dc:76:
         ef:d3:db:64:5e:76:49:97:92:e5:b6:46:05:2c:54:ee:19:66:
         4e:cd:ad:ba:c7:26:3d:bd:8b:c6:1d:18:2e:fc:34:c9:4c:3e:
         98:5a:e6:a1:b1:4f:5c:04:54:ea:08:fa:e8:aa:7f:db:d6:b1:
         ab:e8:27:fb:ee:5e:59:e1:de:97:90:9f:e4:4a:77:9c:2e:61:
         b3:f1:9e:de:d5:53:8b:a3:a5:46:e9:39:4f:27:99:e5:6c:59:
         11:8b:fa:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:11:58 2025 by rpki-client