Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/308125ed-26c0-3e5f-92b0-8e2ed9e56197.roa
File:                     308125ed-26c0-3e5f-92b0-8e2ed9e56197.roa (raw, json)
Hash identifier:          kn9xAC94FmT0tB1l7BC3JlYn+uiTbrdVAFCcI17wWSs=
Subject key identifier:   52:9A:D2:03:74:2C:0D:1E:24:FE:BC:3A:61:A5:04:00:6D:4D:9A:8A
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584B6A61F3D06F6E3BA017EBD900
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/308125ed-26c0-3e5f-92b0-8e2ed9e56197.roa
Signing time:             Sun 05 Oct 2025 01:00:32 +0000
ROA not before:           Sun 05 Oct 2025 01:00:32 +0000
ROA not after:            Sat 03 Jan 2026 02:00:32 +0000
asID:                     13335
IP address blocks:        150.48.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6a:61:f3:d0:6f:6e:3b:a0:17:eb:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct  5 01:00:32 2025 GMT
            Not After : Jan  3 02:00:32 2026 GMT
        Subject: CN=9b12330f-20bb-4e54-a712-a99f174a27d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:5a:68:c5:34:28:74:48:2c:7d:21:cf:3f:55:
                    2f:a9:1f:c8:da:d5:38:3e:86:33:e7:90:9f:b3:f8:
                    8e:c9:08:66:d7:05:f0:a0:78:11:0e:74:f4:b1:83:
                    5b:15:b0:5d:24:48:96:89:e6:09:e3:43:fe:16:94:
                    f0:e0:0c:ff:8e:bd:71:58:d5:4d:b5:d5:88:a6:4f:
                    ab:5b:4a:6b:6a:95:cb:e0:ec:b2:7a:56:72:c5:83:
                    64:28:06:a5:c0:70:3f:76:01:68:12:91:d1:bb:da:
                    c5:e8:a6:c2:b2:c7:ca:38:74:fe:99:3a:91:41:ee:
                    29:10:09:4a:4d:39:0a:ce:59:8b:09:8b:1e:d6:6b:
                    1b:22:f2:91:2b:22:f2:ee:27:ea:f9:fc:70:78:19:
                    1c:31:79:34:3f:78:e2:0d:5c:d3:2e:df:c2:6a:ac:
                    54:0c:c3:5d:77:f4:b2:3a:1e:f9:9e:48:94:6e:80:
                    6b:75:06:6e:31:49:4a:e2:b0:db:08:10:44:94:15:
                    e7:3a:14:ec:df:41:48:2c:b5:bc:b4:b1:d3:f9:9c:
                    d8:dd:68:92:ad:0a:00:b6:4d:99:b2:0c:5b:87:98:
                    1a:53:25:a0:a6:50:75:76:0d:39:08:e1:a6:2c:89:
                    8b:42:44:c1:2e:8c:7f:bb:f4:2e:e7:87:b8:02:e7:
                    c0:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:9A:D2:03:74:2C:0D:1E:24:FE:BC:3A:61:A5:04:00:6D:4D:9A:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/308125ed-26c0-3e5f-92b0-8e2ed9e56197.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.48.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:fc:3d:8b:55:74:26:69:07:77:a6:4c:ab:d0:8c:cf:0c:ec:
         58:3e:40:8f:a7:f7:31:92:d2:6d:f7:ab:b1:52:1e:19:52:24:
         bd:ba:c8:e6:38:fa:d2:cb:08:ec:07:1f:e6:d5:65:7b:b0:61:
         e1:6c:52:07:4b:db:32:3d:c9:63:91:c9:70:26:55:0a:e6:70:
         b4:ef:a5:c6:58:01:db:41:84:f1:cf:67:23:b6:ed:ed:54:15:
         73:bf:81:d6:4e:52:4a:fe:1e:0d:0d:16:40:99:ea:ed:a9:99:
         58:f0:6b:27:92:dc:af:d1:30:7c:5f:2e:f0:9c:d0:85:dc:be:
         65:d6:e4:f5:13:cf:e5:3a:48:70:d9:da:cc:dc:ee:15:0d:46:
         c5:d5:e2:ec:e0:b5:db:66:a7:be:b1:15:fb:3e:95:33:53:fc:
         95:0d:74:6a:73:54:b8:5b:66:d4:44:dd:9d:f2:34:a5:26:2e:
         2d:1c:ed:f8:c9:80:ef:9f:56:cf:2e:8c:c3:b0:8f:a4:c2:79:
         df:d4:ee:85:86:a0:29:6e:f4:9e:2f:ea:f6:43:2d:af:4a:26:
         a3:5c:db:9c:eb:e3:f9:c7:67:8a:6c:a4:fb:94:e5:3c:6a:f4:
         b3:f0:1d:cf:5e:bb:47:c8:b2:c7:ea:93:74:01:91:00:38:71:
         fb:10:94:59
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtqYfPQb247oBfr2QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI1MTAwNTAxMDAzMloXDTI2MDEwMzAyMDAzMlowLzEtMCsGA1UEAxMk
OWIxMjMzMGYtMjBiYi00ZTU0LWE3MTItYTk5ZjE3NGEyN2Q4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFpoxTQodEgsfSHPP1UvqR/I2tU4PoYz55Cf
s/iOyQhm1wXwoHgRDnT0sYNbFbBdJEiWieYJ40P+FpTw4Az/jr1xWNVNtdWIpk+r
W0prapXL4OyyelZyxYNkKAalwHA/dgFoEpHRu9rF6KbCssfKOHT+mTqRQe4pEAlK
TTkKzlmLCYse1msbIvKRKyLy7ifq+fxweBkcMXk0P3jiDVzTLt/CaqxUDMNdd/Sy
Oh75nkiUboBrdQZuMUlK4rDbCBBElBXnOhTs30FILLW8tLHT+ZzY3WiSrQoAtk2Z
sgxbh5gaUyWgplB1dg05COGmLImLQkTBLox/u/Qu54e4AufAHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFKa0gN0LA0eJP68OmGlBABtTZqKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMzA4MTI1ZWQtMjZjMC0z
ZTVmLTkyYjAtOGUyZWQ5ZTU2MTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAljC6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAf8PYtVdCZpB3emTKvQjM8M7Fg+QI+n9zGS0m33q7FSHhlSJL26yOY4
+tLLCOwHH+bVZXuwYeFsUgdL2zI9yWORyXAmVQrmcLTvpcZYAdtBhPHPZyO27e1U
FXO/gdZOUkr+Hg0NFkCZ6u2pmVjwayeS3K/RMHxfLvCc0IXcvmXW5PUTz+U6SHDZ
2szc7hUNRsXV4uzgtdtmp76xFfs+lTNT/JUNdGpzVLhbZtRE3Z3yNKUmLi0c7fjJ
gO+fVs8ujMOwj6TCed/U7oWGoClu9J4v6vZDLa9KJqNc25zr4/nHZ4pspPuU5Txq
9LPwHc9eu0fIssfqk3QBkQA4cfsQlFk=
-----END CERTIFICATE-----
Generated at Sun Oct 19 19:11:54 2025 by rpki-client