Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fc07dfcd-e424-31b3-b7b9-ea11907359a0.roa
File:                     fc07dfcd-e424-31b3-b7b9-ea11907359a0.roa (raw, json)
Hash identifier:          eTeBKzxW6w0M+8GeNiw7K88V+O9E/gLYEXI5er2KQoY=
Subject key identifier:   DE:6A:9B:98:7F:4A:98:ED:33:35:33:BE:0B:7E:4F:7F:A7:4C:98:BA
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584B6A61F4BAA0A7C2CDB19BEC80
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fc07dfcd-e424-31b3-b7b9-ea11907359a0.roa
Signing time:             Sun 05 Oct 2025 01:00:32 +0000
ROA not before:           Sun 05 Oct 2025 01:00:32 +0000
ROA not after:            Sat 03 Jan 2026 02:00:32 +0000
asID:                     13335
IP address blocks:        150.48.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6a:61:f4:ba:a0:a7:c2:cd:b1:9b:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct  5 01:00:32 2025 GMT
            Not After : Jan  3 02:00:32 2026 GMT
        Subject: CN=3bd32ccd-8f8c-4d21-9de9-6c2c5d9431e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4e:3d:cb:ec:df:25:92:9d:e5:d3:81:07:04:
                    ca:0b:c4:3e:02:c9:39:81:f0:66:1a:e9:46:dd:fe:
                    4f:d6:43:09:52:74:e1:01:13:3f:81:b7:0d:26:28:
                    23:16:54:5a:6b:11:4e:c9:c1:22:ff:3e:da:86:8c:
                    7e:c0:8c:e3:ff:20:9f:95:f0:e5:fc:bb:a3:6f:1c:
                    31:f7:4a:08:bd:e6:a9:b3:50:c7:23:92:65:66:93:
                    c6:08:27:91:1e:91:d5:a9:d1:56:4d:5a:de:41:c6:
                    e2:57:46:7e:9d:94:48:29:c5:1f:8b:14:fd:2a:32:
                    0f:6e:82:12:8b:fa:6e:81:5a:8e:89:bc:62:ea:24:
                    3b:2e:2f:eb:95:aa:ad:89:f3:3a:a5:f2:38:d3:a9:
                    14:f6:69:66:7f:52:8e:15:d1:42:e9:12:90:54:eb:
                    e8:dc:3d:31:db:73:5e:fe:e4:f1:a5:31:c8:df:c4:
                    5b:b9:38:ec:ab:86:75:10:9c:05:69:b4:d8:9b:ab:
                    31:62:39:e5:58:23:de:78:a7:cf:fd:c5:ca:d1:d3:
                    7d:d9:c7:10:a5:c2:47:3a:a5:7e:ae:93:c5:f9:a0:
                    9b:c4:b8:56:6c:a4:e5:1f:bc:be:2c:f8:97:d9:44:
                    ee:c6:e7:49:98:53:c4:a5:24:b0:7b:5a:c6:37:07:
                    fd:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:6A:9B:98:7F:4A:98:ED:33:35:33:BE:0B:7E:4F:7F:A7:4C:98:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fc07dfcd-e424-31b3-b7b9-ea11907359a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.48.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:5f:6b:b9:a3:49:2e:01:4c:7a:ab:48:9c:2d:c2:82:87:ba:
         96:c4:93:08:24:43:fb:31:e5:cd:77:e1:84:ac:d7:ce:88:b3:
         21:32:99:2e:db:f8:01:b2:9b:2f:d3:57:63:c1:89:5b:95:97:
         dc:35:e4:d6:f9:17:53:cf:c2:88:39:33:1f:23:38:fc:c2:49:
         eb:7c:39:37:13:a5:82:3e:21:c3:b3:d4:43:82:fa:0c:ad:c8:
         c2:4f:c1:7b:b5:ca:6b:18:b1:d7:f1:cf:8d:77:9f:d0:d4:28:
         68:21:ee:2a:58:6f:46:17:1b:a0:6b:9a:03:88:99:5a:ef:8e:
         4f:41:91:f5:b5:88:79:f6:33:bb:1f:da:e9:94:0a:49:36:ce:
         21:6d:47:40:78:b2:73:90:c0:ca:6f:bd:d8:7b:65:bd:70:db:
         97:3f:48:fb:5b:06:27:23:13:7d:1a:45:67:0c:83:2f:f4:51:
         25:96:65:4c:04:cf:e3:4a:9d:4d:b4:4c:c1:b6:21:af:d4:73:
         b8:44:85:7f:f3:33:aa:c6:d1:a8:32:da:29:d7:cf:86:8a:2a:
         ba:89:94:d2:51:c1:ba:27:62:89:5d:2e:d4:dd:cf:11:42:31:
         64:79:84:b0:79:77:80:4b:0b:aa:0c:39:4c:a1:84:3b:1b:08:
         30:6b:c4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:10:30 2025 by rpki-client