Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/da629bdb-c64c-3cbe-ae9c-2824ba58bbb9.roa
File:                     da629bdb-c64c-3cbe-ae9c-2824ba58bbb9.roa (raw, json)
Hash identifier:          DTURDAHBufBdls8r9SV4GvI+5Mcu45dRfizP9oiXAYc=
Subject key identifier:   03:B4:EC:99:E0:6F:46:79:A6:95:70:3B:D1:56:D2:8E:47:20:71:B6
Certificate issuer:       /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Certificate serial:       010D0C9F4328584A920633045AF8CE37B1CF0B80
Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/da629bdb-c64c-3cbe-ae9c-2824ba58bbb9.roa
Signing time:             Sat 19 Jul 2025 13:01:04 +0000
ROA not before:           Sat 19 Jul 2025 13:01:04 +0000
ROA not after:            Fri 17 Oct 2025 13:01:04 +0000
asID:                     63199
IP address blocks:        148.153.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:92:06:33:04:5a:f8:ce:37:b1:cf:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
        Validity
            Not Before: Jul 19 13:01:04 2025 GMT
            Not After : Oct 17 13:01:04 2025 GMT
        Subject: CN=70e9b642-64fc-44ed-812c-a74ccac9838e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:0d:c8:61:e0:e5:72:d0:cf:c0:59:f2:87:16:
                    74:e7:80:c2:a6:d6:ea:86:6c:fc:ee:98:20:c0:0a:
                    e3:62:ee:2e:96:9a:6d:4a:5d:8a:6e:17:b1:25:f9:
                    5c:37:57:6a:31:dc:41:cf:68:ab:53:2e:ca:9a:3a:
                    51:69:1a:e2:90:7d:7c:34:e9:7b:de:a6:7c:c7:c2:
                    f8:c3:99:db:fb:30:4c:da:c3:ea:d1:4f:16:25:af:
                    0c:4b:e3:d2:88:d6:14:ee:e4:d6:19:e2:77:9b:64:
                    24:f9:c7:c2:1f:42:91:34:1c:b1:c9:ee:58:e7:8e:
                    8e:95:fa:2c:e6:96:a5:eb:d2:06:60:b8:d2:b7:e5:
                    9e:99:de:82:36:69:76:49:29:32:2c:b9:bb:22:ed:
                    71:2c:9a:5d:f4:a8:17:3b:bc:77:d0:99:19:3d:05:
                    b8:c7:15:04:17:9b:be:7c:48:5b:69:bc:d9:37:1a:
                    3a:a5:fe:aa:03:ac:37:ed:38:d1:b5:4d:87:10:21:
                    6b:21:09:84:41:e0:76:af:85:cc:6f:4c:b1:03:2b:
                    0b:5d:c2:30:ef:4b:64:cd:07:5c:c7:be:0e:e8:76:
                    40:5a:02:1f:06:30:13:41:b0:a8:af:e8:e1:34:4f:
                    dc:f2:f8:a6:33:b2:1a:71:1d:80:e3:7d:d3:c2:3a:
                    b5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B4:EC:99:E0:6F:46:79:A6:95:70:3B:D1:56:D2:8E:47:20:71:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/da629bdb-c64c-3cbe-ae9c-2824ba58bbb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl

            X509v3 Authority Key Identifier:
                keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.153.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:2b:37:65:49:0c:ff:91:79:30:ff:e9:7b:89:19:33:8a:2f:
         e0:2d:38:b4:b9:25:26:26:c9:eb:b9:b4:c8:e9:34:ee:ce:e5:
         cf:b1:f5:2e:b2:be:3c:4e:b1:cd:f1:7c:91:ac:87:03:f9:6b:
         ba:f3:6c:9a:d7:87:8a:1b:d8:da:75:7f:b2:9a:ca:38:6d:dc:
         d1:1e:f1:0e:6d:ca:6f:f0:36:52:18:d4:21:4f:64:d1:74:8f:
         50:1c:db:a3:b0:27:be:b8:9b:aa:3c:33:79:06:31:47:27:70:
         5c:58:a4:a9:17:b5:9a:3a:45:14:e2:16:d9:1e:5e:29:de:3c:
         be:40:7d:ca:59:d9:82:1a:5a:13:78:cb:82:eb:1c:2f:49:5e:
         35:d0:75:43:38:d0:16:31:33:0e:50:cc:75:77:c4:37:c9:1a:
         82:4d:46:8c:0b:c1:55:19:c6:24:aa:04:3f:22:ab:5d:cc:79:
         03:fc:b3:67:55:73:b1:c4:98:45:be:74:ef:74:55:c4:ed:23:
         1c:65:92:83:9e:c8:de:bc:07:6c:a6:97:ae:ba:2a:53:ce:41:
         f7:0a:45:b1:59:ed:8b:ad:f4:be:d9:96:7c:f0:b7:f5:2b:17:
         ee:91:86:95:8c:ec:c1:1b:3f:ea:2c:74:af:8d:81:fd:4e:1d:
         6e:a4:e3:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:19:22 2025 by rpki-client