Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd/557b01e3-e91e-3788-b50f-a45035dbf24c.roa
File:                     557b01e3-e91e-3788-b50f-a45035dbf24c.roa (raw, json)
Hash identifier:          hkPEEh6bnHBxozU+VbwsTSwojZTk045Ipok2bIPrD+s=
Subject key identifier:   D8:25:0F:A4:20:68:E9:D8:03:77:BE:02:CE:2E:5A:79:1E:94:5E:07
Certificate issuer:       /CN=2c059c4e-9cb8-45ce-a71c-c3a4cf379edd
Certificate serial:       010D0C9F4328584A9BCB6896B1ABCB5C5140C400
Authority key identifier: 53:EC:FD:94:00:6F:F4:F1:6B:A5:58:C8:6E:19:B4:DB:06:1C:5F:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd/557b01e3-e91e-3788-b50f-a45035dbf24c.roa
Signing time:             Wed 23 Jul 2025 01:00:52 +0000
ROA not before:           Wed 23 Jul 2025 01:00:52 +0000
ROA not after:            Tue 21 Oct 2025 01:00:52 +0000
asID:                     11821
IP address blocks:        148.59.150.0/24 maxlen: 24
                          158.51.184.0/22 maxlen: 22
                          205.201.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9b:cb:68:96:b1:ab:cb:5c:51:40:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c059c4e-9cb8-45ce-a71c-c3a4cf379edd
        Validity
            Not Before: Jul 23 01:00:52 2025 GMT
            Not After : Oct 21 01:00:52 2025 GMT
        Subject: CN=20700818-0909-4cd8-86e8-51f58a1b4e7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:9a:ee:fa:e6:67:a6:37:bf:f7:d7:73:88:6e:
                    03:86:a9:73:7d:1f:4f:18:d6:56:33:02:5e:42:9b:
                    ca:d7:5d:a9:ae:e2:63:a9:d6:74:c3:53:e2:34:6c:
                    ab:48:3f:f9:63:84:cb:45:fa:15:b3:1f:2e:5d:13:
                    bf:71:10:e5:06:52:8f:b5:98:a5:fd:5a:52:43:31:
                    05:f0:26:82:4a:28:1e:57:f6:29:ec:e5:3f:af:88:
                    95:67:17:77:ac:ce:2f:2d:7b:e3:1c:74:c7:12:3d:
                    df:29:73:6a:d3:a3:10:78:c2:03:c9:a0:6b:a4:01:
                    4d:41:7e:d7:66:54:79:7c:57:32:e7:ff:f1:97:25:
                    69:14:75:e3:ca:50:1b:a4:f8:af:f2:44:21:85:45:
                    6c:ae:61:49:08:cd:17:c2:42:0c:8c:e6:08:74:70:
                    98:19:79:bf:b6:81:84:ab:22:e8:60:23:99:09:ba:
                    a2:53:27:55:3f:7c:ee:19:4d:91:d3:ef:7a:cc:7b:
                    32:9b:b4:59:f9:89:c8:c9:86:b9:8d:bd:50:76:48:
                    80:b7:db:a4:32:ef:60:2c:da:54:09:38:fc:45:15:
                    25:f0:66:65:a9:9b:76:16:47:59:c3:6f:20:c0:20:
                    a0:6a:3e:d8:be:ac:04:2f:92:a7:3f:8c:54:dc:bb:
                    be:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:25:0F:A4:20:68:E9:D8:03:77:BE:02:CE:2E:5A:79:1E:94:5E:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd/557b01e3-e91e-3788-b50f-a45035dbf24c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd.crl

            X509v3 Authority Key Identifier:
                keyid:53:EC:FD:94:00:6F:F4:F1:6B:A5:58:C8:6E:19:B4:DB:06:1C:5F:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.150.0/24
                  158.51.184.0/22
                  205.201.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:ff:ca:99:4c:68:e5:8a:25:32:37:a7:60:37:f1:00:c3:84:
         4c:10:c7:2a:3d:7b:da:6e:08:21:c3:ca:ab:fd:fb:ed:7d:05:
         64:fd:29:ed:77:b0:56:c0:01:84:04:0c:5b:e4:6c:1a:1f:79:
         b4:6b:cb:4a:5c:d5:47:7e:5f:80:ab:0a:4a:ee:2a:12:60:4c:
         51:c3:8a:f2:cf:26:ba:2f:02:2f:38:e8:e7:47:2d:ea:93:d2:
         e4:7d:f1:4b:6a:28:2c:79:79:94:ab:79:71:24:43:47:e8:bb:
         00:c5:af:b6:5e:8a:e4:4b:a9:69:2a:12:b9:28:0b:6c:7b:8d:
         a0:b0:32:00:f2:14:f9:7e:ca:1e:1c:64:83:a6:80:8c:7a:34:
         2a:b9:e8:ca:4d:1f:d8:48:36:76:cf:92:c1:c8:72:45:ae:01:
         2d:41:d3:ff:38:61:4a:8f:81:1b:59:2d:bb:f0:ef:83:9b:31:
         0f:1e:17:b0:6a:ee:1a:c3:2b:16:b6:25:59:b0:0f:4b:55:78:
         be:d5:64:73:22:7c:9a:0b:7c:e6:b1:9c:5b:52:c0:a6:77:6c:
         99:2a:cb:7a:15:82:15:76:f9:7e:61:f7:bb:3c:70:8b:6f:50:
         3a:26:fa:75:32:4b:ce:41:eb:ab:50:37:2c:10:f8:6c:fa:31:
         f0:5b:d0:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:43:24 2025 by rpki-client