Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/22718d88-48b5-3782-a513-eaeb2a6d5a39.roa
File:                     22718d88-48b5-3782-a513-eaeb2a6d5a39.roa (raw, json)
Hash identifier:          PLXyRB/NShiDc/7e/pcd+DfkX6/y1n0/ZTLbfoeicHA=
Subject key identifier:   C0:F6:9C:12:36:B1:7E:56:BB:A7:79:FC:E4:B7:ED:6D:9B:49:FF:03
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285848CB165C7A6BCAFBC859C74740
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/22718d88-48b5-3782-a513-eaeb2a6d5a39.roa
Signing time:             Thu 06 Feb 2025 14:00:52 +0000
ROA not before:           Thu 06 Feb 2025 14:00:52 +0000
ROA not after:            Wed 07 May 2025 13:00:52 +0000
asID:                     13335
IP address blocks:        150.48.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cb:16:5c:7a:6b:ca:fb:c8:59:c7:47:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Feb  6 14:00:52 2025 GMT
            Not After : May  7 13:00:52 2025 GMT
        Subject: CN=67b983d5-a0a8-435c-b2bf-e198f92dff6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a2:09:5f:78:c1:f0:6d:cd:ac:69:d8:7c:0f:
                    2d:bb:d5:a8:36:ae:44:ae:06:91:68:d9:d5:d2:62:
                    c5:15:62:2d:50:e0:49:44:8f:ca:bd:df:ae:64:08:
                    87:97:c0:a6:3c:6e:e8:2e:4e:df:95:8a:9d:4b:b4:
                    ba:42:af:57:8a:19:b6:7f:5d:3f:3b:cd:24:7f:22:
                    35:77:0e:df:94:6a:03:05:37:08:e5:7f:08:4c:c5:
                    f6:8f:73:bb:dd:f0:48:ec:91:fa:2b:53:2a:11:60:
                    07:fa:36:6d:3e:c4:06:74:d7:12:99:1f:05:4c:66:
                    11:e7:da:c2:67:e2:33:11:b0:e9:57:60:ab:16:50:
                    a1:d8:5e:10:bb:3c:72:11:26:d1:72:d1:7e:de:2c:
                    6b:70:02:f4:77:f1:60:62:a6:ce:96:85:01:0d:02:
                    57:b7:d7:b4:be:f3:6d:f7:47:cd:0a:0e:0d:34:03:
                    c0:37:ce:19:b4:06:ee:6c:9e:f7:29:76:55:d7:b2:
                    55:e4:61:30:d7:2d:3f:0a:e6:9c:c5:94:f0:65:5f:
                    4e:c2:da:6c:4a:60:e0:4c:13:73:39:31:e3:01:e3:
                    6d:6b:04:47:8f:46:09:a5:bc:62:21:29:55:ac:0f:
                    1c:5f:6c:06:63:93:e6:26:f6:d3:63:b6:8e:3f:0e:
                    6c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:F6:9C:12:36:B1:7E:56:BB:A7:79:FC:E4:B7:ED:6D:9B:49:FF:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/22718d88-48b5-3782-a513-eaeb2a6d5a39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.48.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:56:17:76:f6:48:a7:a4:01:f9:26:08:49:23:9b:2e:e8:ff:
         20:4e:46:05:80:b3:d9:d8:b7:12:b7:50:9d:26:97:19:03:74:
         ff:01:a9:16:d8:9b:36:6f:66:94:7a:aa:ce:09:63:64:7f:91:
         80:c9:f0:4a:7b:23:d0:69:40:d1:01:b0:8a:6b:cc:e4:f2:09:
         89:86:2e:e6:3b:5c:ba:78:a1:d9:c3:47:b1:58:d1:d7:00:29:
         46:7c:8d:01:ab:2b:cf:50:82:40:ef:1a:09:cc:7d:fb:c5:e3:
         00:13:af:19:cc:ba:ae:25:88:c5:73:50:f2:d4:24:a3:d0:49:
         5d:42:ba:3f:8f:2e:27:18:ac:fb:48:4d:c7:df:fd:00:8e:29:
         a8:4c:19:09:a7:87:a8:f0:4b:b5:14:57:f8:12:91:d4:9f:aa:
         f6:26:c4:94:e0:43:5d:14:9f:55:12:d9:40:9e:4d:d1:89:86:
         cd:80:29:9a:33:9d:6b:49:06:82:76:c0:cf:4e:dc:bb:55:d8:
         08:8f:46:13:aa:01:55:e2:3f:9f:2d:46:4e:4f:75:89:0d:9e:
         22:82:34:a6:b2:90:30:82:e3:02:5f:b5:92:41:68:11:8b:be:
         10:df:31:31:2b:40:a8:92:6c:cf:dc:3b:3a:f0:57:5e:dc:2d:
         b7:91:32:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:13:16 2025 by rpki-client