Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2df453b3-0f69-3b66-ad7c-f4b5dba10c2e.roa
File:                     2df453b3-0f69-3b66-ad7c-f4b5dba10c2e.roa (raw, json)
Hash identifier:          7/uE5SN4YuApCd5jQW/fEIr6faym6YL5NXHE/QniyUw=
Subject key identifier:   79:85:B9:79:27:52:2F:A3:02:DF:94:15:53:CC:94:06:62:EE:35:7F
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584EAD1C5F5E9AA7E46203D9A3C8
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2df453b3-0f69-3b66-ad7c-f4b5dba10c2e.roa
Signing time:             Fri 31 Jul 2026 01:00:11 +0000
ROA not before:           Fri 31 Jul 2026 01:00:11 +0000
ROA not after:            Thu 29 Oct 2026 01:00:11 +0000
asID:                     13335
IP address blocks:        150.48.178.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ad:1c:5f:5e:9a:a7:e4:62:03:d9:a3:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jul 31 01:00:11 2026 GMT
            Not After : Oct 29 01:00:11 2026 GMT
        Subject: CN=3219d37c-e1e4-42bf-83f3-160ee75786ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ab:61:5a:d1:26:ff:ec:68:2d:ef:b6:1d:00:
                    01:ae:ab:b4:4d:e1:40:30:69:de:e2:89:71:ed:00:
                    4b:2f:9b:96:9a:8b:af:1c:7e:b5:57:94:76:8e:ac:
                    85:0e:d1:f4:c3:87:7e:16:d8:9b:10:87:37:d6:5e:
                    e8:96:97:12:c5:0c:5a:d7:bd:4c:03:ed:43:aa:2b:
                    f0:54:cc:d5:f5:35:b8:c6:93:2d:10:99:74:b3:aa:
                    6c:65:1b:e1:39:98:b8:94:33:4f:f9:35:3a:6c:14:
                    37:dc:c7:30:38:1b:40:4c:ce:1b:96:a8:33:35:b8:
                    83:5f:1b:a3:43:91:e8:60:89:09:99:d0:07:16:c5:
                    83:9a:88:de:09:06:1b:a9:db:57:3b:4e:f6:b8:41:
                    78:54:8c:03:2a:5f:d8:c8:eb:78:99:17:f7:9f:cb:
                    fc:d6:d7:a1:b5:06:80:14:de:89:8e:35:86:d0:95:
                    b1:59:a2:5b:e4:75:9b:c9:81:6d:9f:a0:7a:99:46:
                    88:36:24:c3:71:34:94:b2:2e:d0:06:3b:e0:7d:54:
                    da:36:21:a6:31:65:aa:8b:68:ce:f1:3f:63:c3:af:
                    cc:0a:85:37:30:67:6c:4c:08:22:0d:c0:ac:0f:ce:
                    e7:5a:81:67:28:c5:c1:88:47:bd:2b:1b:e6:15:3a:
                    51:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:85:B9:79:27:52:2F:A3:02:DF:94:15:53:CC:94:06:62:EE:35:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2df453b3-0f69-3b66-ad7c-f4b5dba10c2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.48.178.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:4a:5e:d4:2a:09:94:af:c0:94:d0:93:71:7d:51:57:92:ed:
         1a:84:b5:64:05:13:a5:c2:b1:7d:39:b7:37:90:91:62:c9:4f:
         b0:23:86:ac:e5:b8:f8:b0:fe:5c:dd:af:8b:d1:68:ed:e9:3c:
         39:52:76:7d:aa:21:ed:65:1e:c3:eb:4f:6f:31:e7:05:99:fc:
         01:51:5c:c6:45:f7:c8:8e:f3:47:d8:bd:68:74:c3:a9:23:7a:
         f9:65:6b:f1:20:00:cb:8f:2d:e0:c7:62:65:c9:90:b3:4e:23:
         61:46:37:8d:f8:3b:74:de:eb:65:48:5e:4f:9f:89:41:cc:69:
         7f:2e:8d:09:d8:f7:a0:92:ef:7e:a4:40:79:ee:dd:2f:1d:30:
         3b:24:19:d2:6f:de:17:12:7a:a0:3d:0f:4f:8c:75:bc:1d:9a:
         9b:ee:3a:71:b3:ca:ca:1c:67:03:35:13:4d:5f:5e:a7:e6:d5:
         1d:e3:f1:0b:a0:8b:07:49:f3:13:ff:0c:25:18:43:83:3e:a8:
         2a:c4:f1:9a:f6:c1:92:33:38:2b:7f:b1:47:70:05:44:bf:28:
         78:cf:79:bd:fd:e7:3e:f9:20:dc:93:3d:cc:55:10:ec:d7:dc:
         9a:e1:52:44:5c:55:32:f8:cd:0b:2b:77:64:d7:ae:da:b1:dc:
         35:0b:b2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:09:50 2026 by rpki-client