Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1da1cbb5-b9c9-35f1-a1d6-c4c491a65e67.roa
File:                     1da1cbb5-b9c9-35f1-a1d6-c4c491a65e67.roa (raw, json)
Hash identifier:          vE2fpJW59jhdRiupVIAjAChpNGDwPaLVCR7TnmB9170=
Subject key identifier:   25:34:90:F4:5B:48:23:BE:7A:71:09:F3:D4:2D:03:18:F8:30:02:A2
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584B6A61F8F27953E9215A6B7240
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1da1cbb5-b9c9-35f1-a1d6-c4c491a65e67.roa
Signing time:             Sun 05 Oct 2025 01:00:32 +0000
ROA not before:           Sun 05 Oct 2025 01:00:32 +0000
ROA not after:            Sat 03 Jan 2026 02:00:32 +0000
asID:                     13335
IP address blocks:        150.48.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6a:61:f8:f2:79:53:e9:21:5a:6b:72:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct  5 01:00:32 2025 GMT
            Not After : Jan  3 02:00:32 2026 GMT
        Subject: CN=77087d22-414c-4310-94aa-46c84858f065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ef:ab:af:86:2e:61:05:91:47:79:b6:64:7b:
                    02:09:c0:1b:0b:40:77:30:20:8f:8e:9c:4e:e9:43:
                    b1:c5:f6:bd:49:53:0b:11:da:76:7a:be:26:7d:7a:
                    8b:4c:fd:ec:4d:61:86:a9:de:88:6c:f2:ed:49:13:
                    34:d0:cc:ae:c8:15:69:26:42:19:dc:f6:fc:34:ec:
                    7b:b4:27:ca:39:e2:5d:d3:98:b1:01:14:3d:0c:dd:
                    83:27:80:9e:4b:c9:33:9d:1e:2b:b8:76:30:6e:52:
                    1a:c3:f4:4c:ce:56:91:c7:e8:b1:a3:02:77:95:ba:
                    e5:3a:ce:ab:ea:b2:13:f1:5e:b0:7e:df:cf:69:a0:
                    ac:a6:a1:1b:af:d2:68:47:67:87:4a:f9:d6:da:06:
                    49:91:a0:b5:b4:15:f3:2a:24:34:c9:19:dd:ca:a7:
                    c6:71:73:d8:1f:f1:aa:25:29:2a:54:57:d6:70:f9:
                    a3:85:22:84:32:5a:a2:be:55:a7:9b:36:0b:70:d8:
                    ae:ca:30:f2:7e:19:48:fa:a7:3c:0b:9f:5f:70:78:
                    99:58:e7:e7:72:1a:9a:34:51:38:01:c6:7c:8b:d2:
                    54:ff:da:9b:ca:54:25:98:8f:d0:75:60:fa:e6:57:
                    5b:d7:cb:70:13:0e:71:24:8c:b3:8b:2d:52:de:4d:
                    22:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:34:90:F4:5B:48:23:BE:7A:71:09:F3:D4:2D:03:18:F8:30:02:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1da1cbb5-b9c9-35f1-a1d6-c4c491a65e67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.48.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:ef:ae:53:ca:b7:0f:65:78:f8:b2:7d:0d:4c:aa:92:b5:66:
         ee:c9:ac:3e:e9:9f:13:a8:1e:67:a2:81:0f:d5:c2:d3:64:0e:
         1d:5b:da:86:cd:2e:cf:7a:01:e6:bd:2e:18:44:41:59:4a:e7:
         c9:c2:7a:60:66:b1:84:17:8b:06:94:e3:ac:60:eb:b7:e9:5f:
         5d:bd:7d:7f:af:74:36:8f:cb:5f:08:81:2e:7b:b1:85:f6:85:
         0a:97:a2:7c:1e:d0:21:af:ba:3e:b2:1b:7b:5c:f2:eb:3e:93:
         19:3a:f1:dc:1d:04:d2:82:d8:81:e9:79:04:33:19:90:dd:68:
         43:39:2f:41:8d:0f:26:a5:04:b0:94:33:2d:7e:80:b4:e5:09:
         fe:bc:e4:14:c7:ec:34:05:dc:6e:f3:91:83:5c:f4:36:56:c6:
         74:21:25:5b:73:74:83:44:f2:a7:ad:0d:b6:af:53:6c:bc:df:
         28:35:52:bb:d6:a8:25:98:5b:97:a3:43:93:12:83:a1:39:4b:
         e0:ee:f0:56:87:47:1b:66:df:88:a0:ea:c4:6e:25:f6:3f:d5:
         3f:60:2c:2d:36:9d:ff:cc:da:dd:e3:63:43:8e:1c:88:21:45:
         aa:d2:d7:50:f3:67:5c:30:e2:19:ee:47:25:59:79:bc:a8:c0:
         f1:b2:f4:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:05:50 2025 by rpki-client