Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff/8916b605-f1b7-343c-b58f-f1991f2406cb.roa
File:                     8916b605-f1b7-343c-b58f-f1991f2406cb.roa (raw, json)
Hash identifier:          zWrNqeQH6ootkSYacIg7Kxl/MTbPRfqzzKad4ETNIjc=
Subject key identifier:   09:59:B2:CB:35:4D:CD:7C:AB:29:E0:1C:D6:22:34:6A:AC:DD:F7:C5
Certificate issuer:       /CN=804758a5-8bfa-463f-a66c-d50aa7237fff
Certificate serial:       010D0C9F43285849FE0FFCA25FCF815860937A40
Authority key identifier: C5:AC:F5:21:04:22:63:10:CB:AA:76:9F:4D:D9:1D:6F:49:B9:93:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff/8916b605-f1b7-343c-b58f-f1991f2406cb.roa
Signing time:             Tue 27 May 2025 13:01:05 +0000
ROA not before:           Tue 27 May 2025 13:01:05 +0000
ROA not after:            Mon 25 Aug 2025 13:01:05 +0000
asID:                     22828
IP address blocks:        150.148.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff/804758a5-8bfa-463f-a66c-d50aa7237fff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff/804758a5-8bfa-463f-a66c-d50aa7237fff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fe:0f:fc:a2:5f:cf:81:58:60:93:7a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=804758a5-8bfa-463f-a66c-d50aa7237fff
        Validity
            Not Before: May 27 13:01:05 2025 GMT
            Not After : Aug 25 13:01:05 2025 GMT
        Subject: CN=0b966988-0cca-4752-9e79-ad253050db87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ae:ea:62:c2:0c:30:65:5a:9b:75:83:10:f6:
                    4f:c7:49:58:3c:f6:ef:b4:23:3c:dc:be:0e:20:49:
                    45:00:6c:c7:b9:f3:57:10:80:a5:73:ea:f4:32:4b:
                    f7:fc:c5:cf:e1:f5:a8:25:16:c7:e1:fe:dd:d9:f0:
                    dd:95:d8:5d:81:18:6b:b1:e6:05:2d:25:d3:ef:6b:
                    ee:5a:f9:a1:de:00:65:70:22:8c:9f:43:c7:e5:b4:
                    a1:5d:1f:94:d5:ce:df:a1:02:58:d2:c7:a3:3b:25:
                    53:2f:8f:0f:e8:43:b5:25:6e:cc:e0:da:71:bd:b9:
                    bb:32:5e:19:ad:9b:d0:a1:9f:3f:be:21:a2:38:63:
                    de:b8:8c:85:33:1b:bc:5c:fe:f8:4a:5f:f7:b0:3e:
                    54:69:dc:8c:fa:b0:97:64:b9:de:9b:96:fb:f2:ff:
                    d5:87:33:1b:cc:42:fe:70:6a:d5:07:cc:aa:c8:70:
                    68:b4:5f:c3:76:df:02:a4:cb:62:03:dd:d5:8d:67:
                    6b:2e:b0:c5:9b:31:f1:c7:2b:9e:39:6d:3c:eb:81:
                    a3:c5:e4:20:26:33:0c:98:1f:57:0a:02:e0:d0:10:
                    b4:36:89:db:57:15:19:e3:14:32:4d:fd:ce:8e:b0:
                    33:ad:7b:24:f2:d4:2e:fc:9f:0d:0c:7d:4e:6e:54:
                    d9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:59:B2:CB:35:4D:CD:7C:AB:29:E0:1C:D6:22:34:6A:AC:DD:F7:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff/8916b605-f1b7-343c-b58f-f1991f2406cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff/804758a5-8bfa-463f-a66c-d50aa7237fff.crl

            X509v3 Authority Key Identifier:
                keyid:C5:AC:F5:21:04:22:63:10:CB:AA:76:9F:4D:D9:1D:6F:49:B9:93:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/804758a5-8bfa-463f-a66c-d50aa7237fff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.148.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:30:0e:24:1e:13:7d:40:92:3b:4c:c7:61:e7:f0:5e:44:b5:
         35:77:23:a6:c9:84:7b:7d:e8:d0:0a:1b:5a:03:76:13:f2:47:
         94:e5:ac:dc:de:ec:25:ad:6b:61:c6:4f:ed:a4:64:a3:c3:1e:
         00:00:2f:39:fb:dc:f9:b1:b9:d9:e8:7c:7f:89:b6:df:2d:ad:
         0c:90:1a:a2:1f:cf:2b:82:e7:85:f5:6a:8e:02:52:71:62:b8:
         75:e7:32:06:34:2e:d5:7e:ab:f1:c4:90:70:ca:88:28:b4:6c:
         3b:b9:58:53:22:64:30:63:9b:58:9c:79:eb:ec:a7:ba:12:02:
         f9:08:d0:c7:95:bc:af:27:c0:cf:c8:79:f7:27:80:27:ab:55:
         7a:b1:74:ce:97:9d:55:06:e9:49:58:ab:98:66:f8:34:1d:87:
         ef:cf:df:4e:f4:b0:15:ad:73:b2:a3:36:aa:fd:e1:76:81:db:
         fd:29:12:3f:d6:fc:ef:73:2a:9b:c9:bb:b0:c7:c5:53:f2:b0:
         48:cf:86:85:0c:9a:a9:0e:59:46:26:89:d4:e6:f9:00:d8:5d:
         69:77:19:6c:f3:4e:06:91:42:31:19:27:29:3a:66:8a:8d:39:
         c7:d6:82:b7:7b:15:cc:63:29:45:3e:b2:ee:b9:f2:1a:d2:b2:
         b0:40:49:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 17:44:48 2025 by rpki-client