Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/256ff6dd-98f4-38af-9967-1854f3035beb.roa
File:                     256ff6dd-98f4-38af-9967-1854f3035beb.roa (raw, json)
Hash identifier:          3RlrwveMGpCoT2KVFBWtlc63o8HkjK6+sWa7r74leSA=
Subject key identifier:   D1:13:35:8B:2B:3E:46:DB:05:E1:D6:C8:69:04:88:43:5E:7C:09:B8
Certificate issuer:       /CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
Certificate serial:       010D0C9F4328584A03A54A73330FB457A2FA8580
Authority key identifier: 05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/256ff6dd-98f4-38af-9967-1854f3035beb.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     14163
IP address blocks:        148.77.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:4a:73:33:0f:b4:57:a2:fa:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=79f1a872-5420-4ddf-b961-b22dbe1f4ddb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b6:04:bc:b5:3e:c5:94:39:7a:c3:3b:7b:60:
                    64:cd:bb:a8:f3:ba:63:9e:2b:8d:fd:2b:e1:30:8c:
                    b1:15:40:a9:2c:d1:d2:df:57:df:2e:56:d6:a7:b5:
                    09:87:bb:67:49:b7:9c:8e:5d:44:93:b3:23:c3:c0:
                    f0:8c:9b:69:51:55:e9:c1:0f:ce:68:a2:be:0f:7e:
                    92:51:7a:c6:11:fa:94:c4:e0:7a:b3:01:df:10:63:
                    5b:7c:af:9b:0e:da:92:cd:76:f9:69:4e:88:a7:c8:
                    12:39:15:e8:a0:cc:a4:e7:2b:63:c8:67:ac:f5:ac:
                    6f:96:b6:7f:cb:7e:a4:dd:fa:e4:74:bc:fa:24:71:
                    c6:81:52:93:a8:aa:b2:67:4b:eb:d1:24:d1:b6:67:
                    ae:69:69:a2:55:32:6f:76:2e:92:a4:ab:2f:a0:9a:
                    da:cd:23:a2:d3:c6:48:7a:7f:da:99:01:f0:03:a1:
                    67:94:77:60:b3:ee:ff:00:ab:8e:16:4c:31:e4:c0:
                    3b:09:fc:82:eb:02:f8:f2:0b:82:af:ce:4b:1b:13:
                    8e:c8:2a:71:0f:84:e8:0a:0e:e7:96:d7:d1:d7:3e:
                    19:71:da:89:d4:a2:de:02:43:65:eb:92:e2:7d:04:
                    99:f3:8f:6c:74:2f:56:a6:83:75:30:f9:72:c1:c8:
                    42:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:13:35:8B:2B:3E:46:DB:05:E1:D6:C8:69:04:88:43:5E:7C:09:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/256ff6dd-98f4-38af-9967-1854f3035beb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl

            X509v3 Authority Key Identifier:
                keyid:05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.77.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:64:e6:3e:fe:73:7e:0d:d4:c0:f9:d7:fd:be:81:ce:12:70:
         04:98:a3:78:59:4b:78:22:aa:12:84:ba:4c:99:c3:58:da:6c:
         16:f5:7e:e6:67:63:a7:0e:21:f3:85:a3:3b:78:ff:5d:73:a6:
         34:ae:c8:12:1d:57:78:37:99:5f:d3:c6:05:87:81:2f:d9:b1:
         2e:96:b5:59:49:7f:a7:35:59:f2:90:0a:67:3f:98:d8:4c:fa:
         b6:99:2b:89:a7:1e:b6:e4:75:27:5d:2b:a5:f9:ae:0a:6b:4d:
         ec:04:ce:1f:4d:01:86:be:4d:3e:b8:53:db:ad:b8:bf:45:7c:
         62:46:e7:6f:b2:39:e4:02:83:14:2c:3f:27:7d:e5:38:94:45:
         1b:de:6a:90:65:5e:b4:df:f7:d1:69:ac:f5:56:6b:da:fc:8e:
         cf:ed:97:b8:55:62:da:72:3b:8b:33:22:7c:12:b4:e7:93:54:
         97:30:7e:4c:49:02:d4:de:37:3c:17:2b:6b:d8:43:c6:14:08:
         11:21:c9:ca:16:fd:cb:60:f2:9a:0b:47:3e:cb:9a:06:09:48:
         b4:f6:87:85:c0:e5:1b:16:db:ba:1e:4c:0d:8c:58:9f:59:fa:
         5c:a4:b6:76:62:47:f2:f8:42:89:5d:d2:79:1a:66:b8:ef:f9:
         01:3a:6f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:19:18 2025 by rpki-client