Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/92e9c1fe-6ec2-3ed4-a274-e5e915bcc17e.roa
File:                     92e9c1fe-6ec2-3ed4-a274-e5e915bcc17e.roa (raw, json)
Hash identifier:          Oo3L9bNmThLTCeZSc5kviwzcqw5Y9iJUkamWpM50EvA=
Subject key identifier:   27:FB:AE:01:BB:61:B4:B2:01:44:AF:75:92:71:14:9A:1C:1C:EE:E9
Certificate issuer:       /CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
Certificate serial:       010D0C9F43285849ED4FCE05EA066788A4570680
Authority key identifier: 05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/92e9c1fe-6ec2-3ed4-a274-e5e915bcc17e.roa
Signing time:             Wed 21 May 2025 13:01:04 +0000
ROA not before:           Wed 21 May 2025 13:01:04 +0000
ROA not after:            Tue 19 Aug 2025 13:01:04 +0000
asID:                     396844
IP address blocks:        148.76.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ed:4f:ce:05:ea:06:67:88:a4:57:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
        Validity
            Not Before: May 21 13:01:04 2025 GMT
            Not After : Aug 19 13:01:04 2025 GMT
        Subject: CN=9c32e2ec-e63a-47db-8387-d536cab5906f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:9e:8c:48:fd:35:a9:e4:9d:1e:6c:40:8e:49:
                    aa:a1:c8:ca:ae:97:aa:c1:0d:ae:b0:b3:c5:59:d6:
                    60:b7:08:c0:a4:db:01:a6:c6:f5:d9:11:ee:ff:77:
                    65:3f:26:02:83:49:b4:63:df:64:60:73:b4:6b:4e:
                    cb:71:35:8a:8b:0e:23:36:ea:bf:ea:9e:9f:96:f5:
                    3e:01:19:4c:da:4e:aa:fe:ab:ac:47:ff:c2:5d:59:
                    be:0f:4d:a7:4b:6e:15:80:9a:2b:c2:dc:3b:8c:99:
                    e1:3f:ce:c2:d9:61:ae:e9:0e:af:9e:48:08:b2:b3:
                    2e:14:06:57:c4:d0:15:ca:8b:41:06:ac:ab:11:b6:
                    d4:92:b9:f2:23:96:35:41:8b:ed:6e:1f:ec:29:09:
                    2c:cc:0e:f7:dc:d3:c0:bd:2c:77:d7:2b:4b:55:b2:
                    d8:6e:72:f6:43:b7:2d:60:13:21:9c:e3:07:09:f7:
                    79:94:26:96:bf:cf:f7:3b:10:b0:9c:ec:55:a0:03:
                    dd:26:e8:77:9e:64:ef:ef:eb:26:45:4b:21:f5:79:
                    61:0d:89:cc:70:24:5d:8e:89:b0:8a:02:99:c4:3b:
                    aa:43:2c:84:36:78:4a:a2:82:0a:d6:c2:75:a0:62:
                    f2:1b:ca:82:89:ff:3d:5b:30:7d:e9:ec:08:13:39:
                    69:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:FB:AE:01:BB:61:B4:B2:01:44:AF:75:92:71:14:9A:1C:1C:EE:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/92e9c1fe-6ec2-3ed4-a274-e5e915bcc17e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl

            X509v3 Authority Key Identifier:
                keyid:05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.76.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:15:92:64:74:dc:e8:36:d2:a8:d6:4c:8d:aa:f7:c3:a2:b7:
         22:80:fe:cf:e9:4a:60:80:36:51:ad:ad:18:bd:99:e1:a2:40:
         b6:81:4b:f9:f2:05:28:0b:54:82:4e:16:ac:8c:f3:61:17:42:
         02:e4:ef:f2:15:95:f9:9f:e7:87:4c:cb:a8:ef:dd:f2:d4:4a:
         1a:dd:74:f4:9e:21:69:53:32:27:94:03:d9:5c:52:46:40:4d:
         b5:3b:73:60:66:40:d4:31:2a:cb:c7:51:15:b9:51:6e:0b:09:
         fa:16:83:a2:6a:b7:07:6d:87:63:4c:d5:44:6b:5e:d0:01:c1:
         67:ae:75:82:97:8d:d8:88:c7:bb:6e:bd:38:22:38:de:ac:5b:
         10:58:71:d3:84:75:81:9a:8a:79:35:df:ed:98:d8:03:ba:4d:
         e5:92:b7:ba:3a:ef:20:0c:4b:46:4b:0b:01:55:53:ad:54:cf:
         21:92:b5:e5:42:bd:23:93:90:b1:cf:fd:d2:0a:d9:65:70:f9:
         37:c8:b0:4c:65:c1:c8:bc:eb:1a:cc:eb:a8:d8:5e:22:03:7f:
         04:e4:00:7c:d3:de:7f:88:66:09:a2:e9:4a:0e:3d:d7:32:a8:
         ec:e4:8a:58:95:f5:35:fd:31:54:27:cb:88:a6:ba:6a:94:2d:
         97:f6:9f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:38:03 2025 by rpki-client