Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/badd067d-d8c6-3638-b8fc-51032051faf9.roa
File:                     badd067d-d8c6-3638-b8fc-51032051faf9.roa (raw, json)
Hash identifier:          RnVrSF2B/hbLick9DBHAmv29MNjyZdIcNb4RJ9pfWgw=
Subject key identifier:   1F:BC:45:2B:25:8F:D2:1B:FE:50:4D:1A:4D:36:EB:13:F2:85:38:A9
Certificate issuer:       /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Certificate serial:       010D0C9F4328584A03A551E991FA0372F33E6100
Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/badd067d-d8c6-3638-b8fc-51032051faf9.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     63199
IP address blocks:        148.153.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:51:e9:91:fa:03:72:f3:3e:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=d716366c-3ff9-4881-bd2c-c1e5cd8c2a85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:62:64:4e:a5:b5:ed:99:41:c2:af:8f:18:74:
                    19:84:4d:8d:e7:9b:f8:00:33:18:74:f0:a9:28:02:
                    f3:cd:c7:e7:ba:9f:66:be:91:e6:da:9a:bd:a0:f4:
                    ff:bd:aa:d8:b4:15:07:c1:b4:3f:84:a1:36:03:ad:
                    2b:5d:38:ef:62:39:8a:7a:29:25:04:79:ab:94:3b:
                    8b:86:b1:1f:2d:09:dc:55:e2:21:f4:ec:7d:17:6c:
                    ac:53:b3:3b:08:bb:28:ee:31:78:f5:d4:9d:07:d5:
                    a0:d5:b1:27:99:09:79:21:33:d1:0c:b1:56:4a:5d:
                    87:fc:ac:19:da:95:d4:34:70:2b:5d:35:6e:74:29:
                    e0:b9:33:1d:f5:21:03:30:55:ab:e2:51:87:df:9d:
                    9c:21:3b:ae:91:a0:9c:05:e4:d9:30:74:93:af:0e:
                    b5:fd:68:36:9f:86:00:ac:72:ef:45:6d:ac:f6:c9:
                    6f:23:b6:6b:1f:cb:99:79:7e:ff:fe:a8:e9:d3:e7:
                    d8:3d:02:44:7b:66:7f:87:8c:fd:fc:86:7a:30:55:
                    33:fc:01:35:d6:e6:ac:09:ae:12:85:41:20:53:88:
                    c7:fe:ca:b7:55:c9:5e:0e:a5:c2:a3:91:e2:40:43:
                    9b:ca:39:56:84:a9:a3:b6:38:bc:6c:31:ef:22:0c:
                    3d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:BC:45:2B:25:8F:D2:1B:FE:50:4D:1A:4D:36:EB:13:F2:85:38:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/badd067d-d8c6-3638-b8fc-51032051faf9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl

            X509v3 Authority Key Identifier:
                keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.153.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:ef:05:c6:f5:cf:53:f8:40:4c:73:13:c5:d0:79:50:da:ab:
         b6:7f:3f:38:63:76:06:17:07:20:7c:67:d3:2c:71:84:3b:f2:
         73:06:b3:3e:02:d8:f3:96:3c:6a:b7:13:ce:47:c4:10:cd:ce:
         b6:55:8e:9e:86:fe:76:cd:67:73:5e:11:e6:6f:a5:24:a4:ef:
         a0:37:bb:8a:c8:52:54:78:80:d7:19:42:9f:b1:2b:02:40:eb:
         72:5e:a6:b8:e1:a7:b5:0d:ff:d2:c8:3b:d3:f7:28:a5:7a:b1:
         16:6f:42:8f:8e:ec:5d:76:40:42:93:3b:27:cf:b1:da:0e:06:
         ed:5f:54:6a:2b:d5:f8:fb:ff:79:3f:db:c2:12:ee:02:da:7f:
         8b:b2:8d:31:ec:5b:2f:96:6e:b8:ef:62:02:85:39:60:79:c2:
         65:e2:52:58:0d:c2:a6:ee:6c:37:21:e0:78:0d:76:7c:71:9d:
         6c:56:28:ba:4f:f3:6e:9f:79:2f:2e:8c:ad:35:87:a8:95:90:
         a8:c7:36:7b:7b:fb:e3:f9:df:88:8c:8d:af:41:0d:43:d0:4f:
         6f:20:7a:1f:f5:88:21:e8:c7:30:83:01:03:1b:43:0c:1e:be:
         b6:2a:8c:80:be:2d:05:d1:f0:f2:d0:9d:64:4d:38:c0:c1:f8:
         b8:04:ea:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:50:31 2025 by rpki-client