Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bb11aac2-ed06-3bf1-af98-854fefea4da6.roa
File:                     bb11aac2-ed06-3bf1-af98-854fefea4da6.roa (raw, json)
Hash identifier:          vI4fwUuplXV4shFuHQZG/7Qvd1CJqhS21DlBdDk4mt4=
Subject key identifier:   1F:65:84:24:2E:10:18:CE:AC:D0:0A:6B:BF:D1:BE:38:D1:34:61:4D
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584E0A700279495AA1F0A622D980
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bb11aac2-ed06-3bf1-af98-854fefea4da6.roa
Signing time:             Tue 02 Jun 2026 18:32:03 +0000
ROA not before:           Tue 02 Jun 2026 18:32:03 +0000
ROA not after:            Mon 31 Aug 2026 18:32:03 +0000
asID:                     13335
IP address blocks:        150.48.180.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0a:70:02:79:49:5a:a1:f0:a6:22:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jun  2 18:32:03 2026 GMT
            Not After : Aug 31 18:32:03 2026 GMT
        Subject: CN=4959a5e8-1ece-4011-940d-bae1b31ef342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ce:5e:d4:6b:8e:27:ef:e4:72:04:f9:cd:fb:
                    0b:d9:60:9c:a8:53:17:c0:63:5f:bd:f8:37:f7:29:
                    d5:9f:6c:76:94:0c:03:c5:37:ee:83:03:fe:ce:4c:
                    50:0b:ac:ae:9c:a7:56:18:0c:98:5b:98:8c:c2:cd:
                    29:fe:2a:4b:9d:b0:ff:3c:b5:d0:f8:2b:6f:16:b5:
                    d9:72:66:89:f8:03:28:0d:af:18:4c:4f:1a:6d:01:
                    6a:23:53:f6:8a:dc:28:97:e1:33:2d:09:53:54:39:
                    50:1f:88:6c:70:3e:fb:01:36:6e:f2:0e:fa:3d:ad:
                    0c:5e:72:bb:8c:40:6f:f3:ec:ea:ef:e5:b9:18:08:
                    7d:13:c1:ab:9f:40:80:b6:57:cb:3d:82:db:45:6f:
                    39:96:48:e7:cc:37:39:bb:ef:74:d0:af:03:ee:ed:
                    d4:8c:83:ec:5f:cd:04:47:db:00:59:6d:67:f8:4e:
                    87:57:92:00:94:42:b7:2a:0c:af:bf:13:38:4f:67:
                    6b:11:1e:2b:4a:f4:2b:80:3f:ba:8a:2d:ad:90:c7:
                    e2:d5:9a:cf:e3:86:05:e6:41:aa:55:ac:d2:19:09:
                    9b:dc:9b:e6:d4:08:eb:56:22:fb:dd:17:b7:d3:f8:
                    26:3d:c0:68:cb:bc:d2:64:93:2a:c2:70:8a:45:45:
                    64:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:65:84:24:2E:10:18:CE:AC:D0:0A:6B:BF:D1:BE:38:D1:34:61:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bb11aac2-ed06-3bf1-af98-854fefea4da6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.48.180.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:fb:8c:82:72:61:17:61:ab:3c:bc:b9:d9:0f:f7:52:50:c7:
         7d:71:67:bc:82:f9:b1:a0:ab:f3:2c:61:d6:ed:53:ed:82:d7:
         e9:c6:ff:2c:6e:da:1d:6c:6f:02:15:79:e5:a8:2e:e0:e5:fd:
         0d:e3:46:45:a9:4a:26:6b:c9:1b:2c:0e:8d:9b:fc:a6:65:35:
         04:bb:d9:63:37:db:49:d5:41:01:42:f6:7a:60:d1:f0:43:f3:
         39:74:b7:be:57:0e:24:6c:10:43:ee:27:ac:84:d2:37:4f:25:
         c3:3b:cd:80:13:24:3d:24:80:92:e2:9f:c4:a5:47:8d:28:3b:
         88:9e:df:bf:25:dc:0e:5d:40:f6:61:3b:17:3c:ad:12:90:d1:
         bd:68:8d:15:4d:af:f3:4d:94:48:6b:03:c0:fd:12:74:9f:77:
         3a:a0:f7:e0:97:53:ac:0d:66:3f:4e:fd:b6:1a:95:f8:28:69:
         62:88:3f:31:a0:5f:cc:ea:e6:d8:7c:63:88:24:81:3e:92:5e:
         37:99:fd:4f:83:b9:99:cc:35:e8:57:71:46:bc:b2:19:12:2f:
         c8:d3:3e:87:7d:8b:f4:ee:69:7a:8d:64:10:17:87:48:1f:28:
         da:00:3e:70:ac:dc:3b:60:bb:12:c4:1c:42:88:51:c6:23:a7:
         ad:e5:10:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:43:27 2026 by rpki-client