Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e3e28f2c-2884-35db-9311-41f992dabd4c.roa
File:                     e3e28f2c-2884-35db-9311-41f992dabd4c.roa (raw, json)
Hash identifier:          61AxjAvLoWIVtW8q/UzqOPTh5Vl70QQHg0D2OImf91I=
Subject key identifier:   1C:7D:58:A8:D7:E4:A3:F5:C7:AA:0B:08:3F:76:40:AA:AE:89:23:8A
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584EAD1C64378295ACB675D78700
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e3e28f2c-2884-35db-9311-41f992dabd4c.roa
Signing time:             Fri 31 Jul 2026 01:00:11 +0000
ROA not before:           Fri 31 Jul 2026 01:00:11 +0000
ROA not after:            Thu 29 Oct 2026 01:00:11 +0000
asID:                     13335
IP address blocks:        150.48.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ad:1c:64:37:82:95:ac:b6:75:d7:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jul 31 01:00:11 2026 GMT
            Not After : Oct 29 01:00:11 2026 GMT
        Subject: CN=62941283-3546-4e13-b854-95e05c16251f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f1:37:df:71:03:1b:dd:be:e9:74:01:dc:35:
                    8f:e5:4f:65:14:60:01:f6:ab:dc:01:e8:6b:c2:36:
                    04:fd:31:b9:9d:35:fd:97:19:d5:b1:d9:66:20:e2:
                    5d:9c:ed:0f:02:9b:bd:bd:1d:63:8a:47:ff:e8:c0:
                    c1:a5:a3:53:cd:0d:05:9b:f4:34:ce:39:59:71:2f:
                    bf:6c:c7:ef:d9:62:bb:d2:50:46:6f:f0:8d:8e:bc:
                    98:68:4b:c4:0a:f4:b5:44:8c:b6:ca:40:1a:04:84:
                    9f:4b:50:1e:30:13:d4:50:e1:aa:db:88:a1:3e:d7:
                    45:5c:5b:2c:89:4e:bf:29:b3:a8:c2:b3:d5:d5:b9:
                    60:91:a0:49:04:7f:67:8b:bd:22:5b:d5:13:1e:9b:
                    31:91:2a:91:96:b6:49:25:01:e0:c8:ab:12:5a:c9:
                    1f:64:c1:c9:47:b7:c5:8c:72:ba:98:04:8e:61:9c:
                    80:e5:b8:2a:f3:d0:63:ef:71:f4:1a:d0:a3:72:ec:
                    cd:81:d7:ea:84:41:f7:3e:df:e1:1e:93:1d:47:a7:
                    54:4c:e0:12:36:c3:35:5a:fd:98:d4:fe:f5:6b:1a:
                    90:ba:47:92:78:8d:28:fc:70:8c:ff:4a:9f:a6:d2:
                    ad:94:db:88:8e:8e:6a:b4:d3:0c:ec:02:7e:48:c5:
                    4c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:7D:58:A8:D7:E4:A3:F5:C7:AA:0B:08:3F:76:40:AA:AE:89:23:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e3e28f2c-2884-35db-9311-41f992dabd4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.48.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:1e:12:09:b3:88:40:5b:68:5b:1a:1b:3d:44:4e:3a:88:fe:
         37:a9:04:d5:4e:47:94:24:bd:60:1e:08:52:a2:ab:e4:bd:59:
         86:0f:f9:c6:bd:e0:4e:7f:74:8d:44:72:03:f1:b4:18:4a:18:
         6a:18:4a:ba:6e:72:a7:20:3f:aa:2f:e7:80:93:b7:d1:25:4a:
         be:29:bf:f2:43:3b:98:48:35:bd:ff:5d:06:52:7b:0f:c3:d9:
         16:c3:da:7e:20:a9:34:fe:7b:9f:0f:db:73:4e:11:23:a0:46:
         04:02:0a:84:af:b4:83:45:c5:11:6a:f5:5c:cd:0c:86:b7:3c:
         26:fb:76:10:ab:13:b4:34:9c:a1:8e:20:b8:a0:86:f6:5a:84:
         93:ca:cc:03:38:cf:0e:37:dd:42:ac:56:0b:24:5f:65:7e:66:
         5d:f0:89:47:8c:67:e6:c5:e6:39:55:f1:6c:55:f1:6e:2e:51:
         e7:b6:1d:10:e7:38:d3:25:1f:81:0f:cc:e2:32:87:45:14:da:
         e9:e5:b0:d3:14:97:47:b1:41:54:09:40:17:47:0d:a2:32:ed:
         b2:e7:12:47:76:83:c0:10:0e:cc:78:d0:ea:67:4c:0e:fe:d1:
         47:a4:f6:67:9e:94:24:fa:9f:a5:d8:35:70:9b:12:43:fd:8a:
         cd:e4:1f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:56:22 2026 by rpki-client