Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d151f0c1-27be-3864-989c-99d16deb0f88.roa
File:                     d151f0c1-27be-3864-989c-99d16deb0f88.roa (raw, json)
Hash identifier:          AfPQBhmUkCIn6jJWAMJsN/yYKAAG4dWHNMNNNWZ8C2A=
Subject key identifier:   01:18:25:BC:A1:D2:10:94:9A:FC:19:C5:11:61:DB:32:53:C8:8B:90
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584B6A61F61DA9C46E377CD7D5D0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d151f0c1-27be-3864-989c-99d16deb0f88.roa
Signing time:             Sun 05 Oct 2025 01:00:32 +0000
ROA not before:           Sun 05 Oct 2025 01:00:32 +0000
ROA not after:            Sat 03 Jan 2026 02:00:32 +0000
asID:                     13335
IP address blocks:        150.48.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6a:61:f6:1d:a9:c4:6e:37:7c:d7:d5:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct  5 01:00:32 2025 GMT
            Not After : Jan  3 02:00:32 2026 GMT
        Subject: CN=158f6f8f-b474-4451-aab1-3271a8577c82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:15:29:cf:3f:52:85:69:6e:d6:fd:1b:d6:b6:
                    63:04:42:29:63:f7:97:a8:85:88:d1:0d:2f:28:4f:
                    7b:1a:a9:79:1e:30:f8:39:f4:58:2a:49:e7:b1:fa:
                    d9:33:0c:29:f8:83:88:e8:6d:9e:94:10:79:43:c2:
                    84:4e:30:22:d9:77:56:84:2d:fb:12:c5:23:bc:b8:
                    35:cb:a4:91:0b:7c:5f:f5:7c:61:20:d4:9b:fd:21:
                    f9:ca:9f:2c:a9:a9:0c:49:f0:97:11:58:2c:a8:78:
                    f6:bd:e0:5d:6e:a4:f0:02:47:73:23:37:92:00:45:
                    c9:00:77:ae:0b:44:e8:f9:84:8f:f6:ed:dd:3f:cd:
                    75:9d:03:5e:81:58:a0:7b:72:b2:e3:41:70:31:d6:
                    e2:a1:2d:59:fb:4f:c1:70:5f:37:52:2a:41:6a:6b:
                    5d:93:91:f2:d0:48:a3:72:a8:42:65:9d:d3:01:cc:
                    a0:f7:64:ac:f2:b7:c4:88:05:3d:4d:11:03:8e:ef:
                    fb:90:c1:46:00:d7:a0:f7:5e:df:04:c2:1d:1b:01:
                    8e:d0:11:e2:7c:4a:11:6a:4f:54:fe:2a:fd:01:45:
                    5b:75:e0:72:9c:21:74:e3:be:36:8d:f6:7b:82:04:
                    d9:3a:3c:20:3e:c2:ef:1c:cf:a0:0b:e0:db:a5:ca:
                    9f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:18:25:BC:A1:D2:10:94:9A:FC:19:C5:11:61:DB:32:53:C8:8B:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d151f0c1-27be-3864-989c-99d16deb0f88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.48.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:bb:e8:b7:93:ea:c7:3a:6e:e3:6f:28:59:b5:d4:75:20:3b:
         c0:87:58:ff:cf:78:8e:e4:1b:74:7a:a6:07:54:24:6a:4d:51:
         15:e8:3c:64:82:63:05:28:a2:fc:85:d1:54:c4:f8:57:06:d6:
         a1:37:62:0f:b3:c7:17:1a:e6:3b:8e:e4:3a:59:82:0f:5f:65:
         52:6e:fc:0a:f9:34:63:a5:cc:ed:9f:d2:34:a8:90:90:97:68:
         68:d4:d4:32:08:c0:90:05:4e:ee:5a:0e:26:d0:a7:0b:6f:76:
         ea:99:f8:bd:bc:2f:d8:34:e0:aa:07:d6:09:16:ee:c2:ed:e3:
         f0:3b:c2:f0:41:63:e8:2f:9c:b9:0d:5a:73:01:98:ae:43:5f:
         2d:67:6b:85:88:ee:73:85:d3:c0:0c:90:6d:5f:7e:5f:f6:ed:
         f1:30:84:df:9c:f5:95:68:6f:4a:f3:15:0a:1c:3e:94:ba:8e:
         8b:c3:ee:b8:eb:3d:d0:9c:4c:3d:e9:46:31:57:91:82:7d:0e:
         75:06:fa:09:cc:fe:4d:4a:3f:ef:60:ea:f2:f9:47:51:4c:f6:
         01:f0:fb:8a:f6:68:84:9d:5a:55:6d:83:ef:50:63:5d:19:fe:
         90:7f:59:05:d5:f8:49:27:24:a9:a8:dd:c5:da:5f:0e:a8:59:
         73:6f:71:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:11:52 2025 by rpki-client