Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/e864a7cd-5cc5-3d4c-9086-f391c4df7489.roa
File:                     e864a7cd-5cc5-3d4c-9086-f391c4df7489.roa (raw, json)
Hash identifier:          QdcntDHG6JSOLS2f9Kq2J0aLMNe3stxjK+1ibpla/1M=
Subject key identifier:   52:16:A9:84:CB:1D:62:BF:F2:0F:4B:9B:61:5C:D5:5C:88:F7:1C:D2
Certificate issuer:       /CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
Certificate serial:       010D0C9F43285849DC8FAE9ED06B4AE188A2FE00
Authority key identifier: 05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/e864a7cd-5cc5-3d4c-9086-f391c4df7489.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     396131
IP address blocks:        148.77.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:ae:9e:d0:6b:4a:e1:88:a2:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=fe3267b4-a178-4cf9-9f4b-13e65e6d0f1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ab:5d:32:30:05:21:57:45:5c:d4:c0:f3:5c:
                    33:3b:b4:68:ab:ac:40:b6:81:19:35:ad:d3:8c:38:
                    30:8e:16:f9:ec:7b:d4:68:73:0e:df:99:29:5b:08:
                    fb:34:1b:52:41:94:de:29:53:6b:d7:8e:cc:33:2e:
                    a1:c2:e2:f8:74:49:d8:03:5f:9c:66:aa:a7:75:1a:
                    44:5f:65:4d:4d:e9:5e:bb:20:37:e4:87:1d:a0:ed:
                    c4:fb:a8:97:7c:b3:9a:cf:45:98:42:df:5f:ed:be:
                    2b:6d:26:e1:18:0a:0a:72:8e:31:a3:7c:63:71:38:
                    79:a4:10:40:f0:04:d8:96:7c:96:e0:38:b9:3f:4d:
                    76:7f:5c:e1:e2:ad:7a:e2:5e:81:89:c1:b7:90:72:
                    47:32:9c:b5:b8:d7:ea:1d:c7:00:b3:fd:84:17:18:
                    cd:d6:a1:e3:3a:fe:f3:7a:5d:6d:a0:4d:81:d2:4e:
                    94:36:4c:8b:b7:c0:ae:08:1c:f7:78:2e:de:66:b1:
                    e7:4e:f6:96:ae:ed:ea:a9:39:85:7e:89:79:28:49:
                    e4:be:13:81:de:39:b0:04:c0:ac:36:1a:a3:95:67:
                    4e:91:f6:e1:03:5f:09:3d:c2:df:ce:b3:31:79:af:
                    4b:4c:4a:e9:0c:89:74:c5:40:93:3b:7a:75:1d:9f:
                    fe:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:16:A9:84:CB:1D:62:BF:F2:0F:4B:9B:61:5C:D5:5C:88:F7:1C:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/e864a7cd-5cc5-3d4c-9086-f391c4df7489.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl

            X509v3 Authority Key Identifier:
                keyid:05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.77.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:66:c0:b3:37:5b:f4:9a:cd:92:92:25:25:fd:d6:a0:4c:f4:
         33:8d:41:e5:2b:22:4d:55:23:1b:dd:85:c1:fa:d7:cc:64:e0:
         35:98:5e:05:5b:ad:18:e2:c6:9d:49:e6:01:45:0a:4b:89:cf:
         f9:b5:17:ca:6f:30:07:9a:de:96:9a:81:e9:56:5a:f3:b8:c6:
         33:ec:0d:06:e5:90:63:97:33:20:27:3a:d0:a1:c2:fe:94:b9:
         6a:7c:77:7e:06:9c:11:d6:7b:d1:d7:3a:5b:ce:26:6c:91:30:
         ac:41:2e:5b:68:a0:0b:2e:25:73:18:8e:80:84:07:e7:97:a9:
         75:bd:02:ab:d8:cc:9f:6b:bb:5b:2c:0d:20:3b:7c:bd:6a:ce:
         c4:60:65:fb:9a:ea:40:80:fd:ee:69:30:58:6c:be:fe:a3:b3:
         15:f4:5d:2e:ae:14:8d:c2:b5:fd:39:44:be:a5:8d:80:a1:4a:
         b9:4f:56:ae:1b:d7:f3:86:3d:31:67:71:48:05:9b:55:8f:68:
         c3:cb:8d:19:e0:7f:43:99:55:75:87:3d:80:fb:d7:56:85:50:
         93:a3:d5:38:23:59:c7:96:6a:eb:f1:ba:fe:e7:db:12:b6:09:
         08:b7:0f:ae:e4:a0:a3:a6:14:c3:48:2e:58:43:68:28:b2:a4:
         04:b6:d6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:13:27 2025 by rpki-client