Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/8df737c6-98b9-37d9-8f54-eac86a54a274.roa
File:                     8df737c6-98b9-37d9-8f54-eac86a54a274.roa (raw, json)
Hash identifier:          QppDM861imzmacXhRWLx+ADsR9rk+yC9G92iG3gISqU=
Subject key identifier:   39:D0:FD:E5:C9:E5:52:22:DD:09:F0:DD:44:02:CB:54:82:ED:6B:9A
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584EAD1C5DD96D4D52D65100A580
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/8df737c6-98b9-37d9-8f54-eac86a54a274.roa
Signing time:             Fri 31 Jul 2026 01:00:11 +0000
ROA not before:           Fri 31 Jul 2026 01:00:11 +0000
ROA not after:            Thu 29 Oct 2026 01:00:11 +0000
asID:                     13335
IP address blocks:        150.48.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ad:1c:5d:d9:6d:4d:52:d6:51:00:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jul 31 01:00:11 2026 GMT
            Not After : Oct 29 01:00:11 2026 GMT
        Subject: CN=258f73e0-b505-466e-8e21-3132fb082916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:09:41:d3:44:a2:18:fb:65:62:30:d1:5e:bd:
                    1c:2c:eb:b0:93:3e:23:fe:70:dd:4e:8c:d0:72:64:
                    00:9d:cd:43:5b:ec:2a:91:cc:b5:21:90:50:72:ab:
                    3f:aa:4c:68:2e:85:a9:b6:61:69:ad:b5:3e:71:1e:
                    8b:b3:94:4f:d7:2f:e0:be:5c:24:f7:95:6d:c6:47:
                    7d:67:04:f2:de:32:52:91:fa:d8:55:7f:16:cd:00:
                    a1:fc:e9:a1:c1:e3:36:72:f7:76:d5:db:1b:7f:14:
                    20:0c:33:c7:6a:4c:73:6f:58:33:ba:52:29:d0:c9:
                    2e:94:e1:7f:2d:8e:11:13:60:49:4b:32:e2:84:38:
                    9b:26:fe:88:78:f3:3c:ec:33:a8:a0:fa:c2:e9:30:
                    0a:26:de:1b:b9:b4:f9:82:da:45:c9:79:f5:f6:38:
                    7b:3e:75:9c:a4:7d:84:10:d5:1f:78:d4:2f:ba:cf:
                    37:a8:30:76:e1:79:e6:4b:cf:1b:4c:e9:ad:63:79:
                    c0:43:09:7d:03:bf:4e:a0:5c:6d:a8:c5:4d:e9:12:
                    42:64:2b:8e:eb:5e:b5:c3:e7:f9:de:6f:a8:6b:f6:
                    d4:70:8a:5d:bf:0b:ab:63:2d:f1:71:40:2f:fa:bb:
                    63:18:35:c0:67:5a:1c:a6:e4:c4:49:fb:d9:f8:d7:
                    29:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D0:FD:E5:C9:E5:52:22:DD:09:F0:DD:44:02:CB:54:82:ED:6B:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/8df737c6-98b9-37d9-8f54-eac86a54a274.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.48.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:f1:b1:82:c8:f5:08:43:25:77:24:cc:a9:d8:9c:ba:e3:5b:
         2d:7e:9f:a6:da:dc:9c:ab:ea:bc:77:ca:fb:c6:6b:b3:47:2d:
         6c:f2:0b:f4:7d:56:21:ff:0f:62:e0:b7:61:81:60:5f:81:56:
         76:af:7e:ef:96:9f:1b:20:a0:47:5a:0c:70:53:0c:76:e9:57:
         f0:d2:2c:d8:60:ba:5f:0f:54:be:ea:d0:5b:87:3d:42:c4:55:
         ce:1e:19:1c:f0:a4:95:b3:c4:55:d5:08:b0:e9:ef:dc:69:06:
         81:d5:c8:fe:d1:b0:8d:2e:e6:be:56:bc:12:6c:c2:e2:9d:03:
         5c:75:74:ce:59:bc:51:86:4a:46:1e:9a:b9:c5:c0:da:f7:ee:
         1c:ab:b9:6d:79:41:d7:c8:68:75:ec:ef:6f:a4:a8:2c:86:c4:
         59:e3:d1:0b:dd:ff:23:b8:de:b0:3a:5d:89:28:ae:92:17:f4:
         32:65:8e:41:87:87:11:e2:5d:68:44:99:c8:d6:39:5c:19:48:
         12:58:63:ca:4e:40:be:a7:aa:c7:be:5d:76:df:08:f3:05:c1:
         bb:d3:f3:64:28:62:f1:af:b1:f9:ab:1c:dc:dc:15:8e:ee:0a:
         fb:70:55:68:23:39:e6:7d:ac:d3:f6:14:2b:50:c5:61:32:74:
         b0:49:4e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:56:39 2026 by rpki-client