Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/35954a57-a0ff-3d3c-a824-8b5a83e0c7eb.roa
File:                     35954a57-a0ff-3d3c-a824-8b5a83e0c7eb.roa (raw, json)
Hash identifier:          tgjLM0otzESmfFT9HQvkfJLPqjBF1YKYK1Vh4NAl3DA=
Subject key identifier:   C1:05:E3:10:5C:72:5C:76:AE:21:B5:B3:7E:6A:B7:16:9E:C9:17:D3
Certificate issuer:       /CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
Certificate serial:       010D0C9F432858490E16C3ADDB6B17346364CE00
Authority key identifier: 05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/35954a57-a0ff-3d3c-a824-8b5a83e0c7eb.roa
Signing time:             Sun 02 Mar 2025 14:00:52 +0000
ROA not before:           Sun 02 Mar 2025 14:00:52 +0000
ROA not after:            Sat 31 May 2025 13:00:52 +0000
asID:                     36054
IP address blocks:        148.76.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0e:16:c3:ad:db:6b:17:34:63:64:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
        Validity
            Not Before: Mar  2 14:00:52 2025 GMT
            Not After : May 31 13:00:52 2025 GMT
        Subject: CN=70e39e0a-ea74-4c3b-b30a-76b04557d837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:42:0e:e1:ca:a5:b2:20:44:f3:e0:63:70:f2:
                    bd:43:50:e0:f4:96:fb:9f:7d:b4:79:28:b5:18:90:
                    a1:50:99:61:1c:d2:0d:25:c6:72:09:e3:e5:94:76:
                    8d:64:a7:36:43:b5:8d:6b:99:36:38:f0:e4:a1:7b:
                    44:e5:55:5e:50:3d:f0:55:24:c3:e8:eb:ea:ba:fb:
                    82:42:c4:89:92:68:52:9a:99:8f:67:6b:84:37:69:
                    70:f8:09:50:eb:c8:42:0e:6e:3b:57:e5:30:bc:5e:
                    12:fc:f1:ce:0a:bb:03:ce:80:c4:74:80:dd:e5:62:
                    1c:c0:fe:c9:f0:b6:3a:f3:45:31:95:f6:34:98:4d:
                    6e:d1:33:8f:6e:66:c0:d0:24:55:a8:b4:27:96:95:
                    2c:f1:27:49:bd:81:70:16:6f:c3:54:ec:86:5c:48:
                    05:40:fd:ab:ea:9d:82:cc:21:50:49:70:2d:bb:cb:
                    33:8c:54:0e:0e:f6:a7:ea:6b:cf:7d:83:c6:53:cd:
                    13:e8:57:68:ca:eb:de:bf:8f:e4:df:4b:c7:fe:11:
                    91:0a:af:c9:a1:f8:ea:39:bf:9b:a8:b4:99:68:1e:
                    48:cd:91:1c:54:97:f7:b0:15:4a:56:d6:4c:c8:6d:
                    05:dc:bd:54:82:f3:c5:8c:5b:49:38:af:68:72:a4:
                    d8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:05:E3:10:5C:72:5C:76:AE:21:B5:B3:7E:6A:B7:16:9E:C9:17:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/35954a57-a0ff-3d3c-a824-8b5a83e0c7eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl

            X509v3 Authority Key Identifier:
                keyid:05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.76.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:ee:72:7d:5d:24:33:a6:05:84:bd:91:bd:15:4f:d8:22:80:
         fa:c9:5d:33:e0:53:f5:67:8d:0e:9e:a1:60:84:8d:05:95:68:
         ca:10:04:49:b0:fd:9c:77:2b:e1:f7:8b:cf:ba:c6:a8:48:7e:
         28:b8:20:2e:a5:8f:92:02:c3:a1:fa:62:93:f9:15:ae:7c:7e:
         c8:4b:b6:7d:4e:2f:d7:b2:0e:d6:65:d6:3c:1a:dc:64:64:70:
         c0:97:3c:d8:d2:d1:8e:8c:77:16:5a:da:4d:cc:42:be:ac:c6:
         ea:c3:80:86:d5:1a:3b:51:99:da:72:a1:db:82:aa:18:bc:4a:
         c6:bc:1f:74:e7:20:ce:5d:8f:ee:3a:3b:91:c7:8f:51:19:8f:
         ba:f8:ec:b4:b9:20:fb:ea:58:33:4b:73:28:1a:76:61:9d:52:
         21:5e:8f:35:3d:61:15:e3:bc:07:11:ab:19:a0:60:3a:a1:47:
         0a:00:e2:d2:81:12:46:38:dd:36:4a:3e:27:22:07:b4:9c:f1:
         6d:7c:29:06:c6:db:27:9c:fe:d2:f4:60:bd:6f:5b:e0:3c:70:
         09:14:27:3f:c6:59:a2:7d:61:b0:53:aa:9f:7d:96:86:a3:87:
         06:af:cd:7d:c8:9e:02:41:66:32:98:e4:18:dc:4a:7c:ce:18:
         75:0a:86:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:04:59 2025 by rpki-client