Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c80d93a7-b7a1-35a9-b261-d6e45cc89744.roa
File:                     c80d93a7-b7a1-35a9-b261-d6e45cc89744.roa (raw, json)
Hash identifier:          nMpwCqdlOlPpS/WMBV7zVNVllmOkgSHIpKt4h493dOU=
Subject key identifier:   B8:50:8C:4E:12:E3:DD:33:E3:EF:43:43:EE:C3:9E:BB:4A:42:8B:35
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285848CB165AE82EAB26AAE02963E0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c80d93a7-b7a1-35a9-b261-d6e45cc89744.roa
Signing time:             Thu 06 Feb 2025 14:00:52 +0000
ROA not before:           Thu 06 Feb 2025 14:00:52 +0000
ROA not after:            Wed 07 May 2025 13:00:52 +0000
asID:                     13335
IP address blocks:        150.48.130.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cb:16:5a:e8:2e:ab:26:aa:e0:29:63:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Feb  6 14:00:52 2025 GMT
            Not After : May  7 13:00:52 2025 GMT
        Subject: CN=da612235-7e43-4497-ab0c-7f795922dcd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2a:aa:d9:2f:23:98:27:27:73:e9:fb:58:d4:
                    8e:4a:fc:37:91:b0:bb:76:0a:df:fa:b7:aa:4e:19:
                    d4:36:2c:88:5e:02:d7:1f:05:1f:20:24:0f:0d:10:
                    12:c8:23:b1:c2:39:9d:75:e2:75:21:9d:b8:25:79:
                    d3:7d:ce:31:59:15:57:ce:03:6c:e5:fd:cb:87:64:
                    db:12:35:c3:86:0e:b8:41:13:79:f2:87:32:0e:63:
                    cc:90:d6:44:f8:05:4b:10:58:00:f7:e2:88:5b:27:
                    71:53:8e:b2:61:69:76:38:4a:2c:d3:f5:a1:4b:40:
                    50:97:2f:d3:6a:f7:cb:a0:f0:a3:59:ac:25:ec:ea:
                    07:8a:ba:47:05:ad:cc:4f:ae:2f:1a:43:6d:11:35:
                    a8:ea:b7:ba:2a:a6:57:2c:c1:9c:d7:8a:6e:f1:6b:
                    d5:e5:94:93:68:61:55:20:00:41:4b:8e:01:6e:86:
                    42:05:5b:7c:60:64:7e:8a:27:5c:b3:da:08:33:1e:
                    a7:bc:3f:3d:26:ad:f3:e5:45:f9:6f:ef:23:f1:27:
                    5c:50:67:f7:46:69:bf:49:b4:a3:53:5b:0c:86:a1:
                    01:82:3c:45:c1:06:ed:36:0a:00:b1:54:e0:b7:cf:
                    ff:89:99:43:21:47:85:69:50:a1:93:e3:13:00:06:
                    de:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:50:8C:4E:12:E3:DD:33:E3:EF:43:43:EE:C3:9E:BB:4A:42:8B:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c80d93a7-b7a1-35a9-b261-d6e45cc89744.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.48.130.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:28:45:39:bb:20:e4:5b:96:48:ea:88:a8:39:0b:db:64:c9:
         7c:1d:f2:3d:87:78:7e:64:3b:44:b9:c3:a5:27:3d:ab:65:18:
         36:ee:de:38:ef:f1:b7:06:fb:66:5f:48:31:e9:47:5e:b5:23:
         ba:59:a4:e5:3e:7d:ee:29:02:03:41:1f:8a:95:18:84:1b:1c:
         47:83:a8:81:f2:4a:5b:05:0e:fa:2b:20:47:2f:fa:b9:e3:c9:
         46:f0:e2:88:be:30:38:5c:ce:69:68:fd:1f:47:8d:4d:a7:d5:
         a0:82:df:a0:15:c3:a3:d3:61:e0:b0:33:62:50:27:e9:e3:5a:
         d5:7c:e5:99:86:a0:17:78:27:af:d1:af:90:b9:8f:92:9d:fa:
         99:0c:08:97:cf:dd:0c:58:ce:ce:d4:2e:cb:17:19:3c:8f:b9:
         fb:17:67:1c:e8:3d:58:dc:71:57:a0:ec:58:f5:28:c3:0b:68:
         4a:26:6d:b7:7d:85:15:19:61:a8:4f:6b:c6:fe:a7:c0:07:a5:
         cb:5b:1c:d7:06:26:b6:d6:0f:cc:03:b5:1c:07:41:d0:d2:65:
         24:b9:f5:71:6f:16:dc:d4:ad:f5:60:e9:91:1e:d5:0a:13:cd:
         93:04:cc:42:58:d2:33:90:a5:0a:fd:98:bf:26:8e:ce:05:e6:
         e4:69:0e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:02:04 2025 by rpki-client