Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d151f0c1-27be-3864-989c-99d16deb0f88.roa
File:                     d151f0c1-27be-3864-989c-99d16deb0f88.roa (raw, json)
Hash identifier:          XK7N1ifwFUMA53fGqNP635LxsVjgioHiTf2UkdJss8M=
Subject key identifier:   28:02:7D:58:1A:22:AF:01:94:29:88:99:EA:1B:76:22:BF:24:4F:E4
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285849AA4F76B66815C58BB043ED90
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d151f0c1-27be-3864-989c-99d16deb0f88.roa
Signing time:             Sun 27 Apr 2025 13:01:01 +0000
ROA not before:           Sun 27 Apr 2025 13:01:01 +0000
ROA not after:            Sat 26 Jul 2025 13:01:01 +0000
asID:                     13335
IP address blocks:        150.48.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:aa:4f:76:b6:68:15:c5:8b:b0:43:ed:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Apr 27 13:01:01 2025 GMT
            Not After : Jul 26 13:01:01 2025 GMT
        Subject: CN=b1d906ac-f82a-4348-9e5e-85c712c48d0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:23:ce:7a:8d:2c:44:b6:3b:9c:1e:b2:cf:b5:
                    96:63:ef:14:f8:77:78:48:77:62:2c:de:22:d5:5f:
                    e3:86:d6:3f:47:b5:a3:7d:ce:26:f8:6a:a7:ed:45:
                    28:af:60:fb:10:2f:5c:c8:73:79:75:00:80:be:4e:
                    3c:d8:f8:49:f4:53:ec:82:ae:b6:2f:af:a5:af:55:
                    81:f1:6e:26:b1:cf:c2:be:99:b2:24:35:eb:db:f8:
                    28:e6:9d:e7:a5:6e:e3:fc:44:18:be:90:84:41:d7:
                    83:a9:47:73:71:82:3d:54:1d:5e:3c:da:e0:5f:53:
                    e5:f8:ba:1b:d2:f0:c0:4e:6c:af:5d:bb:80:d0:92:
                    e3:81:b5:5d:f5:2b:c5:7d:4b:7f:33:aa:54:a6:d6:
                    bd:7a:0f:2d:6f:43:42:20:b8:de:42:7e:e3:51:88:
                    63:f8:c2:04:da:c8:f2:80:86:c7:19:f6:2e:33:66:
                    59:c2:18:5f:98:e6:7a:8d:ef:ba:d4:fe:35:1e:f7:
                    d4:4d:5e:24:f7:2d:29:fa:ff:64:be:91:4c:5f:c6:
                    76:da:97:60:3a:9e:b3:5a:10:46:45:a6:25:72:de:
                    2c:c8:bb:f0:80:51:e8:50:52:e3:eb:95:bc:46:b5:
                    59:94:c4:7b:eb:3c:c4:34:da:fe:17:2a:54:aa:13:
                    f0:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:02:7D:58:1A:22:AF:01:94:29:88:99:EA:1B:76:22:BF:24:4F:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d151f0c1-27be-3864-989c-99d16deb0f88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.48.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:26:cb:c3:96:22:1c:9f:56:46:4e:c7:a7:8b:58:e7:b8:26:
         61:45:49:b8:e5:a0:3c:d3:dc:ed:0b:27:1a:fa:c5:9f:21:8e:
         14:e5:fb:77:8b:c0:83:69:2f:5e:30:9d:ca:a7:37:34:8e:7c:
         f4:1c:f6:8d:e0:b1:c5:55:29:e1:9b:23:5e:bd:5c:8e:ae:df:
         b1:3a:c5:8c:20:34:c7:58:04:5e:6e:06:cd:cd:24:57:fa:6b:
         b3:92:f9:3f:d4:d4:19:c0:64:cf:49:45:ce:f0:fc:b8:67:09:
         d6:11:d3:cc:b7:f3:a4:3e:6a:25:de:9d:16:f2:9b:0d:d0:a8:
         9a:40:06:7c:1b:18:cb:7b:11:4b:b3:21:fe:8f:b7:53:4c:d4:
         1d:d3:47:bd:1e:92:83:1a:e4:0c:b8:28:cf:a2:4b:ae:88:42:
         06:77:84:73:af:1e:5c:0a:60:42:da:37:2f:fc:58:05:52:4a:
         00:f4:31:2d:05:c1:5a:c1:2f:21:ef:f4:ac:dc:56:3c:78:a9:
         d3:47:07:a5:b3:4f:fe:86:a1:50:f0:b3:f0:d8:0b:77:69:a7:
         45:8f:a1:52:62:05:bd:f0:0e:08:be:57:6a:25:78:98:d4:24:
         df:e1:18:4f:ef:9b:75:dd:bc:7a:d3:70:8c:7c:3e:87:e1:d3:
         f6:33:38:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:07:34 2025 by rpki-client