Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4f1d02ea-cdbc-3d82-bf7d-f6544684a675.roa
File:                     4f1d02ea-cdbc-3d82-bf7d-f6544684a675.roa (raw, json)
Hash identifier:          1wp+Pi251S7YfwspheGB5RqYq+2i4oo97Q8F40WGh0A=
Subject key identifier:   58:2F:AF:50:3E:92:20:A7:8A:DF:18:97:B0:06:A7:B2:C6:57:8E:5E
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285849AA4F7ABAD01A99BD320A8300
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4f1d02ea-cdbc-3d82-bf7d-f6544684a675.roa
Signing time:             Sun 27 Apr 2025 13:01:01 +0000
ROA not before:           Sun 27 Apr 2025 13:01:01 +0000
ROA not after:            Sat 26 Jul 2025 13:01:01 +0000
asID:                     13335
IP address blocks:        150.48.152.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:aa:4f:7a:ba:d0:1a:99:bd:32:0a:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Apr 27 13:01:01 2025 GMT
            Not After : Jul 26 13:01:01 2025 GMT
        Subject: CN=a52d2c6b-b154-4200-80d2-a16556142b9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fc:3a:96:64:e1:ff:09:86:14:26:1e:4a:b3:
                    b0:6c:82:69:cc:f3:3b:b3:27:8e:ea:ab:94:78:e3:
                    fd:01:2b:b0:f0:82:fe:9a:11:d7:cc:7f:4d:d5:f8:
                    47:05:87:32:af:45:cf:25:8e:c5:75:41:20:b0:b3:
                    f0:e0:f3:71:24:d5:75:75:c2:8a:ea:7e:ca:37:4b:
                    3f:07:0e:07:93:76:2a:2f:3c:89:08:12:ee:72:8b:
                    3d:9e:f4:34:0d:11:50:58:ae:1f:20:82:3e:ee:ca:
                    e8:13:57:96:b3:97:ff:5b:00:7e:0b:30:8c:43:0c:
                    30:cc:16:db:f0:61:14:d6:4e:74:95:c0:f7:47:d4:
                    71:f7:c4:01:12:30:40:76:fa:af:28:57:3f:72:f7:
                    a1:fc:80:35:72:a3:88:e6:65:72:5b:68:7d:e9:72:
                    31:f4:55:de:4d:ea:8b:5d:77:3d:29:af:ae:44:12:
                    b5:45:f6:2a:7a:23:2f:15:55:90:fd:0f:54:f0:81:
                    9c:98:78:76:52:d9:0a:48:cc:19:93:bf:89:c5:66:
                    02:7b:72:a1:63:61:60:16:6f:3d:9f:6c:42:9a:38:
                    77:10:67:c7:3d:49:30:78:83:21:4e:8f:4b:25:1e:
                    06:9b:80:ee:a1:73:b8:bf:e2:c6:58:42:1b:7e:3f:
                    b7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:2F:AF:50:3E:92:20:A7:8A:DF:18:97:B0:06:A7:B2:C6:57:8E:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4f1d02ea-cdbc-3d82-bf7d-f6544684a675.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.48.152.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:0c:82:45:b8:17:5c:81:46:c8:9a:3a:0a:8f:cd:c7:e3:f2:
         b4:0b:f5:a8:4c:67:0c:14:dc:4d:95:bf:c9:1b:af:9f:6a:4e:
         34:fa:24:ad:f5:71:5b:f8:33:74:0d:61:31:65:ff:d8:10:2b:
         47:62:57:37:86:b8:19:2e:79:59:c3:76:06:2c:d0:fb:ba:a7:
         27:0c:33:69:4a:ec:28:ae:23:d7:bd:c9:d9:9d:ed:bc:5f:f2:
         90:11:09:fa:6c:ee:13:df:97:50:f4:0b:04:9b:b5:d9:52:19:
         1f:e5:5c:4e:c5:23:0b:c3:40:d5:b1:66:06:be:3b:e1:72:53:
         e3:99:a6:92:1c:87:6f:44:46:0e:09:96:06:9f:20:f2:0b:44:
         10:6a:76:4c:fd:db:d3:3f:c6:68:d0:a3:eb:3c:c9:c7:7a:0f:
         d0:92:25:fe:26:8d:7d:8c:6c:41:17:ae:2f:b0:b3:bf:ba:94:
         03:d6:08:05:ff:6f:a3:6f:a9:2a:f0:43:0b:c4:fb:db:af:3c:
         70:86:10:d5:21:8c:76:09:b6:d5:af:37:38:fb:c6:0b:12:98:
         f9:b0:23:a5:f8:7d:77:51:3d:d2:d9:34:de:6c:88:34:7e:07:
         9f:94:ba:28:5c:6d:0d:ee:1e:57:75:a5:df:13:54:fb:00:b8:
         c9:b2:0c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:52:19 2025 by rpki-client