Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a3041761-c249-34cd-970e-575d33cff570.roa
File:                     a3041761-c249-34cd-970e-575d33cff570.roa (raw, json)
Hash identifier:          jMNx+/MMcpzXVoLzdG+EXZTEcjxgEII/oh4eQlbYHLU=
Subject key identifier:   31:2D:D2:02:7B:16:3C:CC:E1:69:CF:4A:A5:72:9B:61:03:E1:8D:D3
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584E0A70048E33171FFEBBA3C980
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a3041761-c249-34cd-970e-575d33cff570.roa
Signing time:             Tue 02 Jun 2026 18:32:03 +0000
ROA not before:           Tue 02 Jun 2026 18:32:03 +0000
ROA not after:            Mon 31 Aug 2026 18:32:03 +0000
asID:                     13335
IP address blocks:        150.48.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0a:70:04:8e:33:17:1f:fe:bb:a3:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jun  2 18:32:03 2026 GMT
            Not After : Aug 31 18:32:03 2026 GMT
        Subject: CN=07682501-6dd1-4a4c-bcc0-30d64d41ee3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:0a:e9:cb:02:7d:a8:8a:5e:26:89:b4:c4:1f:
                    0e:1f:2e:c7:52:15:bd:78:4c:5f:b2:50:5b:62:9c:
                    27:d8:d9:d5:51:3c:bf:cd:a0:0c:48:0e:a1:7f:ba:
                    a1:de:9a:11:a1:b6:5d:d1:47:25:60:b7:75:06:d9:
                    04:0a:48:63:03:98:ec:84:63:62:7c:c5:a0:15:12:
                    6d:c0:e2:9d:98:6a:5a:07:70:da:55:1f:1b:bd:ac:
                    02:15:af:97:77:9a:bb:4b:49:f0:97:c4:e0:ab:34:
                    1c:64:62:57:c8:39:c2:f2:c9:42:37:45:38:19:82:
                    0d:c2:df:4e:0e:73:7b:23:98:a3:6f:7f:a6:80:25:
                    df:95:78:02:af:95:0a:29:80:1b:37:47:48:56:74:
                    a5:cd:f2:58:5c:bb:99:34:21:c1:c6:61:75:46:3a:
                    b7:6f:5f:c9:9a:49:c8:85:49:c6:28:7b:81:b2:7a:
                    83:fe:d0:0b:7e:6b:85:a9:a0:17:e6:d8:e0:5d:46:
                    8a:a9:57:9b:bc:00:b2:66:09:82:cd:10:91:fd:74:
                    42:4e:02:51:5d:10:3f:f3:f6:da:60:68:fa:44:48:
                    47:71:fe:25:c9:d4:54:39:0c:75:41:0a:e4:cf:ee:
                    a6:cd:d2:25:a9:89:ff:f1:e2:0a:d1:56:5d:ee:e2:
                    b3:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:2D:D2:02:7B:16:3C:CC:E1:69:CF:4A:A5:72:9B:61:03:E1:8D:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a3041761-c249-34cd-970e-575d33cff570.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.48.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:ad:70:28:a8:a0:bb:d5:5f:7c:4f:dc:93:75:8b:66:70:63:
         a4:33:b6:50:06:41:74:6c:f1:b9:fc:1f:ea:26:cf:31:2e:d3:
         cc:2f:5d:28:50:d5:b3:19:21:64:86:f5:47:79:51:e6:c3:0d:
         e8:11:2d:fc:fb:6a:cf:db:17:5b:0f:4e:75:36:cb:d9:ff:20:
         57:52:17:3c:a8:b0:a1:00:1b:59:60:ca:e4:e2:a1:6e:c5:0b:
         41:0a:1c:19:3a:c0:f8:fa:81:ae:98:1a:83:ec:8b:75:38:df:
         26:f9:53:09:6d:9f:46:50:e0:31:ea:05:da:ba:e7:e4:58:b2:
         71:d8:97:ea:5b:64:9a:45:b3:22:77:ae:6a:f1:c7:ea:a9:82:
         5c:81:7d:a9:84:c1:f8:04:f8:bf:c5:0d:b6:c0:18:80:fd:d8:
         9e:a6:07:c2:fc:af:a1:22:9f:5f:99:1b:2e:77:dd:c0:62:1d:
         be:55:cc:ee:ba:8d:43:0f:b3:a2:61:0c:49:53:dc:a9:4d:b3:
         55:57:83:45:9a:1c:d7:dd:b0:f9:81:a2:1b:d3:72:13:bc:ec:
         20:61:e4:06:8a:5d:1f:a7:06:b0:f9:1c:8d:0c:3c:b8:4b:9c:
         e6:54:db:70:d5:e8:4f:f7:21:28:7e:da:51:42:7f:e6:d6:53:
         3d:71:b1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:43:35 2026 by rpki-client