Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/89cda938-edcc-3eb3-9cba-4f64b8c9919f.roa
File:                     89cda938-edcc-3eb3-9cba-4f64b8c9919f.roa (raw, json)
Hash identifier:          uwiQ5PMCpWkcQNOErb9CsJ1+BIlHIy0/SN6es9FVqq0=
Subject key identifier:   F1:BE:81:14:65:40:B5:B8:5A:B5:D9:52:48:F9:95:B8:5C:05:B0:A4
Certificate issuer:       /CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
Certificate serial:       010D0C9F432858492CB2133E67BECC95642B6B00
Authority key identifier: 05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/89cda938-edcc-3eb3-9cba-4f64b8c9919f.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     396451
IP address blocks:        148.77.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b2:13:3e:67:be:cc:95:64:2b:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=aa5c8615-b0ec-4fff-ba1d-dbb1e6d48647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7f:ca:e8:ec:1c:26:c8:cd:5a:84:c6:12:86:
                    99:98:c7:e2:3b:88:f1:d5:c3:0e:f9:cd:fc:0f:36:
                    aa:ae:ce:e9:9b:dc:1a:01:9c:c3:61:b0:e4:dc:41:
                    ce:dc:d8:66:a1:27:5f:d0:3a:ca:1e:35:67:99:0d:
                    6d:9d:e0:18:ee:11:b2:f0:44:8a:1d:85:44:ac:63:
                    99:6b:68:e1:09:93:8c:d2:2f:23:4d:b4:d0:04:1a:
                    48:1a:51:f5:a4:03:7b:c2:f8:c3:87:c6:48:b9:1a:
                    d4:a0:75:6b:0f:8c:61:14:9e:f0:e4:61:4d:f5:7f:
                    f6:36:f8:f3:b4:3f:52:f3:2a:9e:78:ec:eb:6d:7e:
                    db:57:68:f9:cc:02:36:f9:47:ec:27:2f:57:8f:5d:
                    2e:7d:a6:aa:18:18:0d:ef:2c:fa:b1:68:1b:15:5e:
                    bd:d7:22:8e:7f:3c:f5:ce:99:05:80:42:f5:73:4e:
                    b7:10:c5:33:57:fd:99:ce:72:65:88:22:fc:73:bd:
                    49:5a:ac:d8:4d:a5:84:16:70:99:48:30:68:49:7a:
                    2c:a2:f7:b3:9a:d4:73:30:f1:de:30:f8:13:98:9a:
                    67:db:bf:ab:89:6b:81:61:50:3a:ef:5c:b8:21:e9:
                    e2:51:f0:94:99:cd:3b:c2:ed:5d:65:b6:62:bb:46:
                    55:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:BE:81:14:65:40:B5:B8:5A:B5:D9:52:48:F9:95:B8:5C:05:B0:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/89cda938-edcc-3eb3-9cba-4f64b8c9919f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl

            X509v3 Authority Key Identifier:
                keyid:05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.77.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:d0:11:65:e8:5d:95:be:f9:8d:5c:9f:29:3e:25:3c:46:e3:
         a6:e5:48:25:98:0e:b1:66:fa:e4:2b:a8:3a:d7:50:01:0a:29:
         12:36:75:71:97:4a:5f:c4:bf:7a:09:ab:80:f5:95:7d:a3:02:
         a3:d9:04:95:59:ad:d6:19:6f:50:ad:89:3f:d9:99:4d:74:fa:
         cd:e3:f8:3a:f2:e9:94:d2:17:11:54:1e:cb:6c:10:fc:cd:af:
         40:b9:f9:27:3e:04:66:7e:f8:3f:03:b4:34:4f:62:04:16:cd:
         cc:4a:c1:be:fb:53:a8:8b:0e:15:5d:34:ae:cb:1e:03:50:20:
         bc:3c:22:83:d4:ee:a8:00:b4:b2:11:ef:76:54:c0:75:08:7d:
         76:59:41:ef:1c:32:59:1c:e2:3f:5a:5b:2b:18:69:cd:1f:48:
         17:d3:36:db:ea:00:d5:6d:35:5e:82:39:85:80:c4:47:a8:a3:
         4b:d9:70:57:8f:74:c6:e5:d7:5b:9f:d4:1c:d6:92:64:6f:93:
         b0:b5:98:25:e0:03:06:84:05:82:73:f1:db:cd:4e:b9:28:51:
         e8:6d:36:d5:31:59:d3:9c:86:89:65:88:e6:c5:c4:58:19:4f:
         e9:66:94:53:4d:11:ed:72:0c:92:09:66:a8:4a:24:b2:cd:9d:
         db:6e:ea:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:47:32 2025 by rpki-client