Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d2d3eb7e-6abc-36a1-aca0-d876649bbbee.roa
File:                     d2d3eb7e-6abc-36a1-aca0-d876649bbbee.roa (raw, json)
Hash identifier:          QiQDe1C6YaiM05Ui+yCLKbvjP81043qg80nUgCn0gg4=
Subject key identifier:   3A:EF:87:E5:C8:BB:D0:2B:EF:E5:12:88:D8:67:6B:4E:02:FA:8A:FD
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285849AA4F7A3D960897E186DAD680
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d2d3eb7e-6abc-36a1-aca0-d876649bbbee.roa
Signing time:             Sun 27 Apr 2025 13:01:01 +0000
ROA not before:           Sun 27 Apr 2025 13:01:01 +0000
ROA not after:            Sat 26 Jul 2025 13:01:01 +0000
asID:                     13335
IP address blocks:        150.48.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:aa:4f:7a:3d:96:08:97:e1:86:da:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Apr 27 13:01:01 2025 GMT
            Not After : Jul 26 13:01:01 2025 GMT
        Subject: CN=8acede25-6ecd-4da8-947a-90e30bd100e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:60:41:40:c9:64:3e:ae:51:97:d0:dd:7f:63:
                    11:49:46:e7:35:b3:9a:48:ea:67:06:0f:29:71:44:
                    c1:bd:28:0b:06:d9:aa:0c:9f:b8:55:b2:8d:5c:39:
                    24:c4:80:66:be:9f:7a:5e:8b:b3:ff:15:85:d6:7a:
                    73:24:c9:80:37:60:39:75:77:c4:44:99:e3:90:24:
                    86:20:e0:3b:cd:29:12:5a:5b:7a:eb:34:aa:d2:68:
                    6b:42:7e:e9:82:32:d6:d6:33:ac:12:14:e6:7a:38:
                    b0:79:3e:29:85:08:11:c5:1d:d2:af:c5:35:14:9d:
                    9b:0d:8b:d8:2b:f2:05:f1:16:2f:90:9d:43:f4:19:
                    61:17:a8:f4:81:af:d3:d8:fd:2d:49:f1:f3:d3:3b:
                    c3:97:21:18:38:97:c7:95:e2:c8:99:c9:5c:66:1b:
                    58:a9:ec:66:e3:b7:67:ce:f6:10:7d:4a:b1:d0:87:
                    78:53:70:83:c0:34:d7:7f:5f:b0:20:fb:25:0f:a0:
                    6b:c4:5f:21:0f:c4:ab:3b:e3:72:6f:09:7f:db:a0:
                    25:3b:21:1b:33:c9:a0:40:c5:c2:76:a9:b1:a7:78:
                    6b:6d:eb:96:ce:f2:a1:ca:93:5b:bb:ec:55:ac:b0:
                    91:1f:51:ef:02:0b:e1:b9:90:df:25:b7:e4:f6:d2:
                    56:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:EF:87:E5:C8:BB:D0:2B:EF:E5:12:88:D8:67:6B:4E:02:FA:8A:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d2d3eb7e-6abc-36a1-aca0-d876649bbbee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.48.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:1d:18:5e:2c:09:78:0b:35:ee:50:ad:55:cb:f3:b8:02:be:
         29:08:bc:53:e8:a7:f8:e8:9b:ae:74:ac:68:d6:08:28:da:42:
         bc:6e:32:68:17:5b:16:2c:5c:a2:fc:8c:1f:81:3a:57:48:1e:
         00:0a:4c:db:54:bc:08:3c:be:d8:ef:3f:2d:e2:a2:d5:4e:fa:
         39:b4:51:b3:3d:f2:36:7c:f2:1c:58:c0:e9:49:32:a2:a3:0b:
         14:65:d8:2f:fd:ec:01:5e:fc:a7:bd:33:1b:d6:02:46:0a:6c:
         2e:bf:89:9c:ce:d3:3a:2e:d2:a8:0f:9d:b5:3c:ee:02:b2:d0:
         d7:f3:06:66:6d:38:ea:bb:e5:82:09:5c:73:4e:99:4a:60:b8:
         d9:ac:c5:c8:54:0a:a7:45:db:92:4e:e4:ab:a1:d5:24:c6:ee:
         b9:d0:6c:54:73:ca:9f:74:eb:39:ee:41:6c:6a:d6:e3:93:5e:
         9b:d9:24:f6:f5:92:c6:5e:5c:57:42:78:27:d9:0d:31:95:8b:
         89:29:0e:be:89:a1:83:ab:a0:ae:c3:37:7b:d1:4d:6e:87:44:
         1b:be:cd:52:b4:fb:a8:22:fe:b1:e2:5f:a8:78:de:88:68:d8:
         7e:d5:60:c4:b5:8e:6d:20:38:81:1c:f5:52:0e:77:3e:93:ff:
         56:dc:b7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:32:33 2025 by rpki-client