Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bb11aac2-ed06-3bf1-af98-854fefea4da6.roa
File:                     bb11aac2-ed06-3bf1-af98-854fefea4da6.roa (raw, json)
Hash identifier:          vQbD6TR6xA/ipCLarOCqESYDUYucVZQsTrqJKcYPvDA=
Subject key identifier:   EA:1B:47:E8:2F:4B:28:F3:61:0D:D4:2E:05:C5:AC:92:22:D5:E8:EC
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584B6A61F7D778AECCFE5B334C58
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bb11aac2-ed06-3bf1-af98-854fefea4da6.roa
Signing time:             Sun 05 Oct 2025 01:00:32 +0000
ROA not before:           Sun 05 Oct 2025 01:00:32 +0000
ROA not after:            Sat 03 Jan 2026 02:00:32 +0000
asID:                     13335
IP address blocks:        150.48.180.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6a:61:f7:d7:78:ae:cc:fe:5b:33:4c:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct  5 01:00:32 2025 GMT
            Not After : Jan  3 02:00:32 2026 GMT
        Subject: CN=170b1ba0-a949-4074-ba9f-77d2abbfe16c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ca:73:3e:fd:6e:3c:c4:ba:ab:11:d0:ea:4f:
                    f9:d6:32:97:38:4f:41:2e:0d:7d:de:ba:2e:fc:8d:
                    a6:9a:99:61:c0:e9:2b:b9:7b:2d:33:d1:e8:9e:2a:
                    51:b0:a2:46:9f:28:51:3a:2d:46:bb:70:c9:0a:75:
                    95:4b:c5:78:7a:0d:12:b7:fd:e2:89:08:81:22:9c:
                    ad:1c:cf:43:f1:86:88:46:2d:0f:ff:e7:8e:9d:28:
                    2d:b1:8f:fc:37:f7:e0:c5:d6:81:ed:9f:5b:c2:1b:
                    cb:5b:f5:8e:c9:40:93:56:79:5b:bd:3d:7c:e0:fd:
                    27:5a:01:3a:f7:62:b3:ad:7e:f1:bf:3b:f3:cf:fd:
                    43:dd:f4:83:a2:71:1b:d5:e7:f1:37:8b:0e:0f:d0:
                    1e:1b:07:b1:65:07:49:ee:cd:f3:16:d9:e4:e0:51:
                    09:39:0b:0a:f8:bc:70:ea:e0:ac:c3:bb:6b:8e:2c:
                    64:df:66:98:ea:ce:20:6f:18:63:54:73:2d:77:84:
                    b7:16:b0:44:21:30:f9:f6:1b:63:f4:87:e2:ca:3d:
                    26:cb:e0:4a:17:e1:cc:39:6c:e1:05:a2:8a:a9:95:
                    96:58:05:2d:9b:52:be:00:3d:65:96:ed:6f:d6:42:
                    10:5e:39:5d:62:6f:c2:69:26:1c:bb:dc:3f:14:a2:
                    f7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:1B:47:E8:2F:4B:28:F3:61:0D:D4:2E:05:C5:AC:92:22:D5:E8:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bb11aac2-ed06-3bf1-af98-854fefea4da6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.48.180.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:39:ee:3d:01:e6:6b:8d:0d:fc:b4:f6:6a:88:66:bc:f8:fb:
         c6:d3:8f:8f:08:18:f9:eb:5f:51:73:0f:5e:1e:3b:b4:e7:56:
         d8:c3:31:b6:e8:d8:96:b0:2b:6b:11:83:3b:32:7d:f0:ed:01:
         c1:33:d9:5f:f6:29:60:9a:c1:54:a3:65:08:48:de:80:d0:9f:
         ab:2f:dc:e7:5a:fc:57:51:ee:54:d4:c3:9c:47:00:7f:8c:57:
         27:dd:62:ba:ca:9f:ab:f3:fa:cc:82:4f:22:3a:ec:a8:7f:7f:
         41:04:91:76:7b:9e:45:3d:b7:61:f8:fa:80:13:0d:e0:96:5c:
         5a:c7:87:bf:8c:f4:14:e1:6a:51:e9:12:93:ad:b5:63:57:6f:
         af:08:cd:16:72:ec:b8:9c:21:ea:d7:27:f1:45:43:9e:2f:19:
         2c:1e:6e:22:55:ed:55:f0:a5:f4:83:9f:ee:a1:b5:cf:ad:10:
         5f:e5:41:2a:f5:87:e2:d8:73:bf:56:18:6c:e5:44:1e:87:5f:
         89:77:ec:5a:0d:6a:f7:04:b3:1e:43:7d:51:70:3d:23:9c:b3:
         7c:34:0b:f9:58:a3:a9:35:a6:6c:d2:b9:81:b6:0d:c9:13:fc:
         2a:c2:e7:08:8d:35:f2:fc:4b:bf:ac:f3:9a:1b:12:46:b7:6e:
         84:93:d5:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:11:56 2025 by rpki-client