Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c22f2e88-bade-3751-bab2-b79ec6310d07.roa
File:                     c22f2e88-bade-3751-bab2-b79ec6310d07.roa (raw, json)
Hash identifier:          T1IiOvJbQpdCeWD/P/WVfZq6q+L7H9cUI5dc+lWJNDs=
Subject key identifier:   B7:29:EA:BD:0A:56:2A:3F:5C:DD:DA:03:E4:4F:BB:55:DD:55:4C:60
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584B6A61F99CAE65EE55292560C0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c22f2e88-bade-3751-bab2-b79ec6310d07.roa
Signing time:             Sun 05 Oct 2025 01:00:32 +0000
ROA not before:           Sun 05 Oct 2025 01:00:32 +0000
ROA not after:            Sat 03 Jan 2026 02:00:32 +0000
asID:                     13335
IP address blocks:        150.48.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6a:61:f9:9c:ae:65:ee:55:29:25:60:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct  5 01:00:32 2025 GMT
            Not After : Jan  3 02:00:32 2026 GMT
        Subject: CN=52653a1d-95b9-4c37-b5de-1d2eb3a36066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ba:4a:74:cd:a2:c8:b0:69:79:b4:61:ec:ab:
                    51:15:ac:fb:b8:7c:7a:f1:69:f9:14:f1:10:f8:b0:
                    50:d1:51:86:70:ba:8d:6c:8a:df:0f:de:6c:95:a1:
                    c8:77:c1:a9:c9:36:16:07:68:86:69:ac:5f:b6:d4:
                    27:9e:15:df:15:dc:88:b0:d6:3b:d1:93:61:44:79:
                    e7:85:08:f8:07:f7:45:cc:1d:c8:b0:17:d3:85:b4:
                    30:a1:87:6b:90:26:1e:8c:a1:23:0d:d4:ea:9a:79:
                    ef:38:6e:97:43:ab:ea:aa:d5:74:87:7e:87:8a:fe:
                    37:2b:87:96:dc:f8:a2:76:a4:62:6e:10:c6:26:ce:
                    74:c6:6e:6a:cc:fe:88:f5:79:05:31:af:58:76:09:
                    5a:ca:80:79:8a:90:f7:93:28:76:44:39:a2:db:07:
                    59:35:7f:a5:a4:11:86:49:19:75:ca:56:78:6c:62:
                    55:de:4e:e6:85:a8:23:91:66:ee:aa:f2:3d:10:f8:
                    a3:8e:35:8f:19:c9:9c:e1:8f:8e:52:a5:f8:78:25:
                    2a:1d:4d:bd:a9:1b:f5:3f:33:5b:07:5e:fe:c5:41:
                    e7:58:9d:f7:d2:fe:18:9b:04:56:3f:b1:3e:2a:85:
                    91:33:26:6f:34:fa:60:91:37:a9:61:f6:7f:3f:9f:
                    ed:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:29:EA:BD:0A:56:2A:3F:5C:DD:DA:03:E4:4F:BB:55:DD:55:4C:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c22f2e88-bade-3751-bab2-b79ec6310d07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.48.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:dc:7d:47:a3:95:20:48:a4:5e:82:7b:9d:6e:95:aa:dd:0d:
         d8:8d:d6:93:92:7a:b3:c1:bf:aa:3a:8a:95:ce:8a:aa:f7:e5:
         17:8d:33:9f:13:35:1a:f3:ea:5b:e5:46:1f:f3:5d:84:fc:a0:
         e2:12:85:94:fb:86:34:57:42:fb:50:92:a4:5a:df:73:4c:b6:
         a3:d9:77:d2:6e:3e:b4:c1:ff:bd:1e:39:7d:07:c0:ef:bb:c5:
         3f:b2:f8:f2:aa:21:af:b1:08:af:e2:75:be:de:b8:32:3d:aa:
         00:37:93:62:03:cd:c3:2d:5f:d9:e2:b0:90:dc:4a:35:b3:8d:
         02:20:12:ae:40:f2:11:86:91:bc:3f:4d:2e:61:de:08:f7:c7:
         27:f6:2d:71:48:ba:fa:1d:d1:af:e7:bc:1f:d1:fc:cb:9a:2a:
         e6:ae:c7:a9:1e:55:be:2c:ea:5c:3b:3b:25:f1:ac:10:0e:28:
         6b:f2:33:50:60:5f:4a:68:7c:82:74:66:0a:71:d4:e9:66:76:
         f5:08:34:6a:fa:77:5e:7a:e5:87:4e:c8:a7:f4:dd:48:95:f2:
         a7:d9:a5:40:50:87:21:0c:f1:04:51:a2:57:9c:a9:fd:63:32:
         8c:78:d2:48:a5:32:4c:bb:23:72:73:0e:15:95:48:9e:02:74:
         03:08:c1:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:06:17 2025 by rpki-client