Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/35e18274-54dc-3145-922d-ae98be85a0d4.roa
File:                     35e18274-54dc-3145-922d-ae98be85a0d4.roa (raw, json)
Hash identifier:          1MtP5qT2T8c+e8u8zDcC2AwT12Pdte6WIL8Cv8K0L6g=
Subject key identifier:   59:0D:51:AC:9E:4A:15:4C:2E:AF:75:00:CC:61:A6:E8:8C:C8:D1:1A
Certificate issuer:       /CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
Certificate serial:       010D0C9F43285849ED4FCDBE59CBBA8CB438EC00
Authority key identifier: 05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/35e18274-54dc-3145-922d-ae98be85a0d4.roa
Signing time:             Wed 21 May 2025 13:01:04 +0000
ROA not before:           Wed 21 May 2025 13:01:04 +0000
ROA not after:            Tue 19 Aug 2025 13:01:04 +0000
asID:                     22793
IP address blocks:        148.76.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ed:4f:cd:be:59:cb:ba:8c:b4:38:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
        Validity
            Not Before: May 21 13:01:04 2025 GMT
            Not After : Aug 19 13:01:04 2025 GMT
        Subject: CN=24955476-d3fa-4b77-8bea-91ea5081727c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:95:df:f7:1a:32:d1:32:34:bf:c0:71:4e:70:
                    69:52:da:5f:55:05:44:01:01:57:fd:3c:bf:39:9e:
                    74:34:31:b8:48:fc:9e:94:55:9e:bf:80:23:fb:de:
                    07:ee:ac:04:eb:a2:3d:59:cd:94:23:af:b8:d5:ea:
                    f6:f0:e8:a5:7c:17:2d:57:ef:81:97:b4:df:4b:68:
                    87:21:54:2e:a2:23:40:d0:e0:80:23:34:e5:4e:34:
                    19:bd:c7:9b:fe:a7:9e:fd:64:3b:d4:0a:9e:dc:99:
                    c4:20:63:00:18:92:fb:19:6f:d5:58:11:64:d1:80:
                    4a:12:c9:a8:5f:8e:7d:f8:47:4b:56:9d:20:d7:97:
                    79:be:8b:7d:24:05:59:23:dc:4f:f9:c6:62:85:41:
                    29:d2:4a:84:ed:dc:ad:48:2b:fa:bb:96:3e:00:be:
                    82:d6:0d:20:65:70:36:77:67:1e:78:68:9b:0e:57:
                    8b:bc:01:ec:d5:59:0c:19:33:24:79:80:0e:59:ee:
                    1e:39:da:47:44:ba:59:1d:8f:b5:c4:08:61:6b:42:
                    ca:c7:c5:4b:11:0b:36:2a:c4:f1:8d:16:48:b1:52:
                    3e:cf:80:bf:e5:7c:11:9b:05:e2:77:7b:1a:5e:97:
                    3b:c6:bc:43:58:31:2e:ad:b7:f9:ec:55:a7:97:28:
                    0c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:0D:51:AC:9E:4A:15:4C:2E:AF:75:00:CC:61:A6:E8:8C:C8:D1:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/35e18274-54dc-3145-922d-ae98be85a0d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl

            X509v3 Authority Key Identifier:
                keyid:05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.76.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:7f:7f:a1:69:63:28:4c:18:5a:7e:dc:e5:59:6d:e4:fd:a9:
         b7:ce:f9:e7:08:bb:a6:b9:8d:9e:a9:86:b4:57:dd:74:c0:34:
         48:16:15:0b:06:9c:b9:a1:92:e4:e1:61:b9:b6:aa:1b:d5:c5:
         48:d3:85:1c:03:e8:14:c0:b6:84:ca:89:8b:54:65:6f:a7:2b:
         05:66:30:99:ab:f2:fc:43:a8:14:7a:62:c4:30:06:f2:a9:26:
         01:35:7e:9e:06:28:25:65:4a:72:00:6b:14:c9:74:42:c8:95:
         79:65:ea:60:6e:58:5e:47:d3:4b:b5:b1:25:73:7e:38:c9:d8:
         74:9d:50:d7:68:14:da:f0:63:63:92:ef:71:46:1a:ea:c3:ef:
         6f:df:0f:6f:8b:a2:19:74:bf:e7:59:90:20:84:dd:5b:00:89:
         33:89:e7:3c:ec:75:82:f7:5b:e4:92:3d:10:9b:6f:0e:16:38:
         9e:1f:11:4b:ce:76:48:94:73:57:ef:f9:e7:07:43:a3:d9:db:
         59:fa:ac:87:74:e6:14:bf:ea:ab:e5:c0:7d:8d:a2:cc:23:0b:
         d7:3d:bd:33:e4:95:c3:9e:f6:48:54:50:1f:51:12:c7:b0:c8:
         b8:94:9f:23:73:50:ea:1e:ae:d8:57:d9:f0:f2:fa:a6:cb:c4:
         32:0a:e8:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:53:02 2025 by rpki-client