Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b9b23714-d100-3758-93af-7e3eadae7a81.roa
File:                     b9b23714-d100-3758-93af-7e3eadae7a81.roa (raw, json)
Hash identifier:          EzoPSNA6prT2gladiey0cLA0xcP9XVrssO4pulVnoJ8=
Subject key identifier:   11:B9:42:BB:6B:58:A8:B3:E9:54:E8:02:46:2C:FC:C6:84:FA:9C:67
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584F4F082077414314A2C6BF8540
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b9b23714-d100-3758-93af-7e3eadae7a81.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     13335
IP address blocks:        150.48.186.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:08:20:77:41:43:14:a2:c6:bf:85:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=e311d885-2c8f-4f35-a625-725252cd2ec6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:89:81:a4:bb:5d:2e:97:e5:ca:35:b1:6f:62:
                    d6:4e:ef:19:1c:3a:a9:ec:e0:10:ee:8f:fb:75:5b:
                    3f:4d:14:db:21:13:8d:37:5d:d5:a7:7b:18:68:61:
                    25:c0:22:cf:59:57:11:39:b9:98:74:65:0c:cb:5a:
                    b7:33:64:b4:4c:f5:ae:06:2c:c2:95:06:f3:0f:65:
                    f4:ae:3d:6c:2e:5a:72:81:cb:fc:3b:71:9d:2f:e3:
                    85:9a:8f:4f:12:03:60:0d:1b:98:18:ed:e8:69:13:
                    22:a6:20:78:19:fd:7d:4c:43:c9:ca:6c:a0:b7:62:
                    34:6c:33:a3:e9:52:2d:39:7f:ee:7f:3e:c3:e1:f9:
                    d0:56:1c:f4:43:96:b1:ce:e2:ad:d7:23:d1:6a:55:
                    ba:07:2e:87:0b:3e:73:a0:cd:5d:ed:c0:1f:f1:56:
                    d9:7d:31:cf:5d:df:14:3c:2e:81:84:71:91:77:74:
                    cb:9e:6f:65:e7:03:e5:5d:50:dc:20:64:21:e4:1b:
                    0b:fd:47:a2:92:b2:f0:06:a9:dc:d5:df:e4:46:02:
                    86:0f:ec:d7:eb:93:a6:f7:54:e7:fa:71:ea:80:72:
                    bd:54:61:68:39:c6:42:50:28:53:39:d5:05:4f:55:
                    6a:3c:45:a7:d0:14:7d:a4:97:85:3c:fe:2c:c8:8f:
                    28:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:B9:42:BB:6B:58:A8:B3:E9:54:E8:02:46:2C:FC:C6:84:FA:9C:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b9b23714-d100-3758-93af-7e3eadae7a81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.48.186.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:11:1d:41:3a:4d:4e:61:61:f5:07:44:76:82:55:1d:e0:5b:
         36:03:25:44:35:99:15:be:27:e7:3a:58:de:0e:5d:6c:b8:61:
         3c:78:21:02:bc:e3:a0:f2:95:df:a9:37:93:bb:64:0c:a5:6d:
         d8:52:1c:8d:f6:25:df:bf:9a:79:b8:5a:bf:6d:34:3a:5f:21:
         13:c4:52:21:6e:36:98:c4:4b:0d:d8:35:46:61:ab:3e:d5:d6:
         41:c0:81:37:a6:24:e9:31:ca:01:7f:78:07:bd:35:21:4f:c0:
         2a:ee:56:62:32:7c:f2:ad:a4:43:8c:c0:f8:26:3f:6f:3c:28:
         8d:94:95:51:65:55:64:29:d1:e6:6b:d5:45:c5:d6:d2:32:c4:
         b8:0e:87:d3:75:86:95:26:47:63:69:63:0a:1f:c1:57:72:44:
         8a:d4:78:7d:ca:79:f4:9f:ea:a3:2a:ba:c2:87:00:62:05:01:
         87:73:cc:d1:df:c1:0d:1e:ed:8e:e7:74:5a:b2:f8:e3:eb:af:
         5f:d3:8b:7b:01:f4:5f:99:67:48:d2:9c:7d:f6:9d:8c:7c:9d:
         67:c0:43:87:e1:08:a9:e0:be:66:0b:64:d7:97:8f:9f:2d:6d:
         4b:75:b8:b1:e2:3a:ef:b6:30:0e:cb:e0:ef:57:e6:35:0c:cf:
         93:78:90:7b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9PCCB3QUMUosa/hUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk
ZTMxMWQ4ODUtMmM4Zi00ZjM1LWE2MjUtNzI1MjUyY2QyZWM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqImBpLtdLpflyjWxb2LWTu8ZHDqp7OAQ7o/7
dVs/TRTbIRONN13Vp3sYaGElwCLPWVcRObmYdGUMy1q3M2S0TPWuBizClQbzD2X0
rj1sLlpygcv8O3GdL+OFmo9PEgNgDRuYGO3oaRMipiB4Gf19TEPJymygt2I0bDOj
6VItOX/ufz7D4fnQVhz0Q5axzuKt1yPRalW6By6HCz5zoM1d7cAf8VbZfTHPXd8U
PC6BhHGRd3TLnm9l5wPlXVDcIGQh5BsL/UeikrLwBqnc1d/kRgKGD+zX65Om91Tn
+nHqgHK9VGFoOcZCUChTOdUFT1VqPEWn0BR9pJeFPP4syI8ojQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBG5QrtrWKiz6VToAkYs/MaE+pxnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYjliMjM3MTQtZDEwMC0z
NzU4LTkzYWYtN2UzZWFkYWU3YTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBljC6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABkRHUE6TU5hYfUHRHaCVR3gWzYDJUQ1mRW+J+c6WN4OXWy4YTx4IQK8
46Dyld+pN5O7ZAylbdhSHI32Jd+/mnm4Wr9tNDpfIRPEUiFuNpjESw3YNUZhqz7V
1kHAgTemJOkxygF/eAe9NSFPwCruVmIyfPKtpEOMwPgmP288KI2UlVFlVWQp0eZr
1UXF1tIyxLgOh9N1hpUmR2NpYwofwVdyRIrUeH3KefSf6qMqusKHAGIFAYdzzNHf
wQ0e7Y7ndFqy+OPrr1/Ti3sB9F+ZZ0jSnH32nYx8nWfAQ4fhCKngvmYLZNeXj58t
bUt1uLHiOu+2MA7L4O9X5jUMz5N4kHs=
-----END CERTIFICATE-----
Generated at Mon Oct 19 01:44:36 2026 by rpki-client