Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a164f3f8-de08-3892-95b9-f8fa26b50fe7.roa
File:                     a164f3f8-de08-3892-95b9-f8fa26b50fe7.roa (raw, json)
Hash identifier:          d2ka60A1UOkico2Bv7Y/zCE9dkvRmg1Z486otTRKrbw=
Subject key identifier:   1D:40:9D:B8:22:87:9D:EE:B8:5C:05:39:8A:B6:06:83:E2:66:78:08
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584E0A7004A4F025320838817DF8
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a164f3f8-de08-3892-95b9-f8fa26b50fe7.roa
Signing time:             Tue 02 Jun 2026 18:32:03 +0000
ROA not before:           Tue 02 Jun 2026 18:32:03 +0000
ROA not after:            Mon 31 Aug 2026 18:32:03 +0000
asID:                     13335
IP address blocks:        150.48.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0a:70:04:a4:f0:25:32:08:38:81:7d:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jun  2 18:32:03 2026 GMT
            Not After : Aug 31 18:32:03 2026 GMT
        Subject: CN=9911ddc4-b5f8-4c9c-a656-4c489653f26d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ce:1f:d8:f8:2c:46:11:d5:e4:18:f0:d0:87:
                    e1:ea:c6:d9:24:96:68:cc:93:9d:2f:36:4e:69:ea:
                    83:a8:22:55:ea:b5:ab:34:f6:d0:c8:7d:25:3b:72:
                    09:0e:f5:22:e1:ab:58:aa:ba:28:62:82:83:45:5f:
                    00:62:97:4f:33:92:4f:90:9a:0d:0e:68:98:6f:6c:
                    9a:0b:e4:51:2a:82:e9:b3:68:cc:cf:3c:59:99:5a:
                    50:52:c5:7b:7f:28:ac:c9:9f:dc:32:ae:a3:5a:b6:
                    95:05:28:e6:8a:83:f5:76:ac:1d:89:10:84:2e:36:
                    dc:fc:35:39:50:62:ef:14:b9:e2:37:e3:8b:19:a3:
                    f6:4d:b5:dd:8e:2a:64:3d:eb:6e:7f:87:23:89:8d:
                    de:dc:e4:97:2e:79:c7:68:38:74:25:b2:b4:27:65:
                    1d:7f:d3:dc:98:51:09:65:d0:53:1f:7d:60:b7:fa:
                    ba:10:fa:58:0d:4d:83:ca:31:89:66:c3:8a:05:d4:
                    da:0b:ea:d0:07:cf:df:09:55:ea:d5:f8:4a:5d:dc:
                    1d:68:a8:a7:aa:e4:dd:6f:d3:5a:ec:c9:cc:20:54:
                    d1:a0:8d:8f:55:6d:48:60:2a:e4:73:13:5a:5a:c4:
                    96:87:9c:bc:97:ac:a9:50:7d:53:82:5d:40:43:42:
                    42:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:40:9D:B8:22:87:9D:EE:B8:5C:05:39:8A:B6:06:83:E2:66:78:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a164f3f8-de08-3892-95b9-f8fa26b50fe7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.48.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:99:dc:55:a0:02:5a:8b:2a:cb:74:c9:83:b6:ce:79:bd:39:
         06:23:a1:b3:97:00:e2:51:78:6c:36:ac:16:64:6c:dd:12:99:
         06:84:a7:b4:64:31:83:be:7c:e5:8f:ae:6e:5b:17:c6:fe:9e:
         f3:5e:3d:58:1e:6a:d3:40:6a:e8:eb:f3:87:b7:a6:29:b7:8a:
         df:89:5d:12:1d:b5:24:75:db:0e:17:30:30:87:2a:55:0a:ad:
         af:92:4e:c9:30:a0:df:e1:12:af:6a:cb:11:25:95:bb:10:ef:
         bd:ef:8e:1c:ad:27:2b:2a:67:77:c4:d3:fc:6c:70:b5:4d:d1:
         d7:99:2c:56:a4:d1:42:75:40:b5:b0:56:75:54:ba:4a:f9:d3:
         c4:18:4a:e9:93:a2:b9:53:f1:78:2a:91:74:e0:9e:6e:a1:2a:
         14:00:ce:47:54:24:1e:2a:5a:3c:85:1f:af:8a:86:3a:1d:3e:
         4c:0c:0b:84:53:db:c3:79:58:b9:c4:3a:3e:19:9b:fc:0a:67:
         52:12:ff:ff:4f:9f:b8:5c:3a:6e:0a:f1:5f:bf:26:8b:41:40:
         f6:f0:2b:dd:00:07:d3:a6:6c:2c:c5:f1:83:b4:b7:dc:86:4b:
         05:9e:4f:b0:b8:67:7f:f3:78:69:b9:8d:61:95:78:8a:c1:0e:
         60:ea:24:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:59:00 2026 by rpki-client