Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/11da83fa-df64-3eb4-9184-9c8813fb3578.roa
File:                     11da83fa-df64-3eb4-9184-9c8813fb3578.roa (raw, json)
Hash identifier:          IxZSTyOALbEZKMyUHSmioB4D9iu0rYjNtCkJyupYogI=
Subject key identifier:   90:52:5B:B0:49:47:89:E5:34:B7:96:0F:68:FA:6B:44:83:BD:3F:DB
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285849AA4F7463BB328C718C513E00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/11da83fa-df64-3eb4-9184-9c8813fb3578.roa
Signing time:             Sun 27 Apr 2025 13:01:01 +0000
ROA not before:           Sun 27 Apr 2025 13:01:01 +0000
ROA not after:            Sat 26 Jul 2025 13:01:01 +0000
asID:                     13335
IP address blocks:        150.48.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:aa:4f:74:63:bb:32:8c:71:8c:51:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Apr 27 13:01:01 2025 GMT
            Not After : Jul 26 13:01:01 2025 GMT
        Subject: CN=773f4cf6-60c8-4e89-8d2d-32606a1c3b07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:dd:f6:3d:9b:ce:79:25:e0:5c:d2:1b:48:df:
                    9d:ec:d4:41:88:f8:36:d1:67:ed:3a:b2:65:77:7a:
                    0b:7b:59:b2:65:8c:82:3c:88:99:b4:fd:5d:86:93:
                    24:c1:f3:a9:f3:b9:0a:c7:ff:7b:bb:8a:8c:f6:bc:
                    73:8c:c9:d6:d1:5c:c9:6e:6c:13:1e:93:d5:56:f7:
                    8a:79:2b:92:c5:35:6b:57:bf:1b:c9:3c:be:8c:28:
                    e5:c8:d0:a1:d6:0b:40:27:ec:5f:34:16:de:c6:85:
                    b5:ad:ca:32:8e:82:ae:a1:7c:00:fa:53:70:d7:7e:
                    37:21:d2:98:67:cb:71:7c:5d:c7:67:e0:45:d5:c6:
                    48:54:2a:a3:9c:b6:26:c0:6e:a1:d0:63:c8:1c:2e:
                    a2:de:c2:6c:f6:bb:98:c5:de:bc:b4:0c:df:37:54:
                    65:52:8d:81:8f:d8:5c:d8:dd:82:f0:01:72:d5:6d:
                    a9:19:5a:70:0d:06:71:d1:01:c9:52:35:86:a2:c0:
                    77:eb:9c:f5:ad:51:af:7b:5f:8a:67:84:42:3e:18:
                    57:c1:d1:88:62:e7:ac:93:e3:5f:64:fb:51:85:84:
                    0b:4d:46:5a:e0:da:6c:37:0a:e4:21:95:08:d3:49:
                    a0:97:fb:74:cc:e7:f4:aa:5d:f7:0e:4d:bc:cf:9d:
                    12:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:52:5B:B0:49:47:89:E5:34:B7:96:0F:68:FA:6B:44:83:BD:3F:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/11da83fa-df64-3eb4-9184-9c8813fb3578.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.48.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:b7:ff:81:73:db:ee:d0:80:3e:7d:7a:bd:a6:da:3f:3a:f0:
         0b:89:b5:9b:25:8b:9b:08:fd:a9:64:32:17:b9:b0:2e:98:bc:
         ce:22:b0:38:7a:90:47:8c:5f:9a:48:4f:c9:ea:13:aa:17:2e:
         9f:d0:72:ef:9f:63:91:c4:57:e2:b7:4e:36:08:fa:9d:0b:7e:
         23:fe:c6:90:52:71:1f:36:27:c2:8a:fa:9e:ee:d5:ca:fe:21:
         6b:b5:a3:51:d1:92:21:25:ff:22:58:c4:87:41:39:f2:53:65:
         1d:9c:c0:48:2d:5b:41:78:ce:d1:87:8b:d0:3d:84:36:91:d4:
         76:d6:da:40:7b:d4:6f:ea:02:a9:f5:1b:4f:0f:7d:4f:c3:79:
         79:7d:cc:e0:ec:1e:29:6a:05:c0:21:e9:31:f3:9c:05:8d:50:
         dd:41:13:85:b7:94:b0:a7:36:6f:d5:46:68:87:1e:d0:27:c9:
         88:ea:52:b9:d9:9e:ca:e2:5e:a9:82:fd:18:10:d3:fa:4d:77:
         cb:80:06:58:50:05:9c:27:3b:32:7b:3c:05:a3:0b:ef:c7:37:
         4d:df:89:44:66:5c:0d:82:e3:4e:55:bb:94:41:02:a8:0d:31:
         1b:b6:4e:a5:f3:80:d9:07:7f:54:07:28:a1:a7:5f:87:08:c7:
         b2:21:5c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:00:04 2025 by rpki-client