Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/7ab99a38-6cf5-36e9-9bd6-c6d412f60d25.roa
File:                     7ab99a38-6cf5-36e9-9bd6-c6d412f60d25.roa (raw, json)
Hash identifier:          RqZzFpw3XbsYLTmG9glaESys0dHaPShdtbrCk9lW5yw=
Subject key identifier:   2F:10:A1:CB:56:61:07:2A:36:1D:CA:EF:3F:21:EA:0D:3D:00:F6:94
Certificate issuer:       /CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
Certificate serial:       010D0C9F43285849ED4FCDEF1F80C8A7E060FDA0
Authority key identifier: 05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/7ab99a38-6cf5-36e9-9bd6-c6d412f60d25.roa
Signing time:             Wed 21 May 2025 13:01:04 +0000
ROA not before:           Wed 21 May 2025 13:01:04 +0000
ROA not after:            Tue 19 Aug 2025 13:01:04 +0000
asID:                     397589
IP address blocks:        148.76.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ed:4f:cd:ef:1f:80:c8:a7:e0:60:fd:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
        Validity
            Not Before: May 21 13:01:04 2025 GMT
            Not After : Aug 19 13:01:04 2025 GMT
        Subject: CN=6e869e14-10c3-460f-a4b3-e09cb210ba5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:3c:d5:cb:86:b7:cb:9d:c0:8e:da:ec:cf:b9:
                    5c:23:51:14:03:04:8f:bc:61:9a:36:33:7c:38:b8:
                    62:a6:dc:6b:42:27:ad:84:46:fc:b5:ae:37:3e:95:
                    63:4b:d3:8a:4c:34:4b:52:e7:b9:ca:f9:21:91:72:
                    50:3c:e0:66:34:fa:d8:b9:a5:c6:ec:39:6d:5c:36:
                    95:2e:2a:e4:ee:41:74:9a:f1:c6:6e:8f:97:69:7d:
                    ab:8f:b2:dc:2f:23:a7:3e:3a:3f:0d:6e:20:80:57:
                    e6:09:b7:48:a2:3f:1d:9c:f7:6d:3e:1c:6c:d5:de:
                    7b:17:74:ca:9e:71:e0:28:e3:2f:f1:97:16:46:f6:
                    92:71:97:48:a3:17:f8:f9:9f:c7:ce:c9:a3:64:95:
                    40:cc:21:f0:8e:c2:99:64:9a:ed:14:b2:d0:dc:6e:
                    02:90:43:3a:0c:be:e5:38:ae:c2:4c:79:33:24:d7:
                    36:35:06:3a:ba:14:46:c4:b7:ee:49:d6:8b:70:f7:
                    76:6a:7b:c8:f5:de:cd:c8:63:2d:47:42:ab:c2:bb:
                    46:ff:e2:83:2e:f1:29:72:75:01:6c:2f:e2:b7:57:
                    87:2f:f2:bd:ea:69:dc:bb:df:3e:de:ac:ca:78:7f:
                    a7:66:fc:6c:6f:5b:8d:55:90:7e:0a:97:84:50:7e:
                    8b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:10:A1:CB:56:61:07:2A:36:1D:CA:EF:3F:21:EA:0D:3D:00:F6:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/7ab99a38-6cf5-36e9-9bd6-c6d412f60d25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl

            X509v3 Authority Key Identifier:
                keyid:05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.76.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:a5:37:64:00:27:a2:55:ab:85:02:94:da:83:89:2b:64:b3:
         47:16:eb:2c:64:6a:39:07:65:1d:c5:87:23:bf:7d:4a:04:fe:
         3f:10:b8:33:13:46:c0:d2:aa:98:04:90:95:ec:8d:b5:bc:14:
         e9:61:0d:a5:c1:39:bf:32:aa:01:15:78:7f:57:48:6e:e5:f5:
         e6:68:d9:71:eb:84:fd:20:2a:69:16:2d:b2:dc:5d:4d:c8:ac:
         86:83:82:08:60:69:e7:91:ca:f7:a1:7d:33:47:9c:ec:5f:70:
         fc:81:2f:f2:0e:57:da:cd:86:ff:e1:40:28:0e:e3:18:01:5c:
         1c:b6:c6:e9:1e:29:57:cb:e5:7d:a9:d3:38:8e:7a:2a:cd:a7:
         7f:1e:2c:27:24:b0:df:ba:75:5c:a7:96:af:dd:f1:ad:ba:75:
         98:ef:05:6a:81:ea:eb:01:1a:ba:6e:ec:bf:39:12:03:5b:14:
         80:35:55:d6:25:65:49:10:4c:fb:82:a6:cb:6f:68:03:72:00:
         7f:1d:6b:40:ca:65:66:8d:ab:66:f6:4a:58:08:0a:af:80:18:
         1e:68:71:1e:79:32:dd:8d:d0:1e:a1:cd:ae:ae:7c:8b:69:83:
         9c:ae:89:8f:d3:e3:2c:37:3f:65:21:67:a2:52:a8:71:18:fc:
         29:4f:c0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 06:15:12 2025 by rpki-client