Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58a81691-3f92-4fe7-ac2c-d8d543fb85fc/e05457f2-27c4-3150-9b98-a46347a29fa6.roa
File:                     e05457f2-27c4-3150-9b98-a46347a29fa6.roa (raw, json)
Hash identifier:          0f7WMDfH3G/WmTbXoYcmKISRh/+XNR4X6ql9+OFOHGE=
Subject key identifier:   9C:18:41:FA:38:FC:25:2C:33:FF:D8:DA:61:3C:05:1D:AC:60:65:C8
Certificate issuer:       /CN=58a81691-3f92-4fe7-ac2c-d8d543fb85fc
Certificate serial:       010D0C9F4328584A3CE02D5FFCC984F860E5B180
Authority key identifier: D6:0D:D3:87:AF:E7:A5:4C:55:40:47:1A:16:7C:1C:52:F0:33:03:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58a81691-3f92-4fe7-ac2c-d8d543fb85fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58a81691-3f92-4fe7-ac2c-d8d543fb85fc/e05457f2-27c4-3150-9b98-a46347a29fa6.roa
Signing time:             Thu 19 Jun 2025 01:00:50 +0000
ROA not before:           Thu 19 Jun 2025 01:00:50 +0000
ROA not after:            Wed 17 Sep 2025 01:00:50 +0000
asID:                     400799
IP address blocks:        199.26.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58a81691-3f92-4fe7-ac2c-d8d543fb85fc/58a81691-3f92-4fe7-ac2c-d8d543fb85fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58a81691-3f92-4fe7-ac2c-d8d543fb85fc/58a81691-3f92-4fe7-ac2c-d8d543fb85fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58a81691-3f92-4fe7-ac2c-d8d543fb85fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3c:e0:2d:5f:fc:c9:84:f8:60:e5:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58a81691-3f92-4fe7-ac2c-d8d543fb85fc
        Validity
            Not Before: Jun 19 01:00:50 2025 GMT
            Not After : Sep 17 01:00:50 2025 GMT
        Subject: CN=813ea11f-d5a7-4109-8fe2-2063b0d37b71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7f:50:9b:26:23:8e:e7:01:a9:ec:ed:ad:15:
                    74:af:29:b8:01:22:b2:63:81:72:88:fd:3f:6c:a3:
                    9b:e6:33:83:fd:16:76:5b:ce:e0:5d:68:58:19:03:
                    8f:55:90:ff:d2:94:1f:cb:43:82:d9:5d:77:42:49:
                    38:0c:38:2d:cf:e3:03:14:00:25:de:29:07:5a:64:
                    c7:67:05:5c:e1:71:92:0a:aa:99:2b:62:55:72:14:
                    34:9b:9b:26:9c:21:63:ba:8e:a1:86:b8:65:d4:dc:
                    86:d4:cf:04:61:04:f9:87:00:72:46:af:5c:b1:94:
                    0d:a3:fd:3b:e5:94:8e:f6:a6:f1:a8:20:f9:c1:4c:
                    ac:fd:c2:59:c1:55:4b:61:ee:00:d7:db:a9:10:78:
                    83:d0:eb:3a:8f:e1:41:89:b8:f9:55:b3:bc:82:a8:
                    19:10:51:d9:8a:4e:22:a2:82:f5:5d:13:1e:14:4c:
                    3c:35:81:54:12:f0:ba:9e:7b:51:3c:bd:f5:9c:bf:
                    50:1a:78:83:e2:b2:31:50:63:69:f8:ae:4e:95:33:
                    50:bf:7b:ab:20:9b:0e:36:18:47:8e:95:0f:81:56:
                    8b:14:f7:cd:5a:bb:dc:16:d9:b1:5c:d9:c6:d9:49:
                    b0:8a:dc:15:1f:c8:da:ef:38:d0:9a:1a:ea:ff:ed:
                    2c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:18:41:FA:38:FC:25:2C:33:FF:D8:DA:61:3C:05:1D:AC:60:65:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58a81691-3f92-4fe7-ac2c-d8d543fb85fc/e05457f2-27c4-3150-9b98-a46347a29fa6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58a81691-3f92-4fe7-ac2c-d8d543fb85fc/58a81691-3f92-4fe7-ac2c-d8d543fb85fc.crl

            X509v3 Authority Key Identifier:
                keyid:D6:0D:D3:87:AF:E7:A5:4C:55:40:47:1A:16:7C:1C:52:F0:33:03:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58a81691-3f92-4fe7-ac2c-d8d543fb85fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.26.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:02:7f:f1:41:9c:67:b1:a1:66:af:f9:f2:df:cc:16:13:93:
         84:1c:78:86:92:02:3f:b6:db:5b:89:b3:25:8c:d4:dc:3e:a4:
         fd:dd:3d:58:e1:08:fc:68:a2:2c:0b:56:88:61:74:84:7a:07:
         42:90:ae:96:e3:a0:5b:75:04:b9:cb:fd:2b:d0:f9:45:43:57:
         bb:3a:ff:62:b1:d8:b7:49:e5:ae:16:00:c6:66:d3:72:1d:15:
         d8:66:b9:49:d5:86:c5:d2:4c:dd:5e:dd:fd:11:0c:20:10:fd:
         d5:a8:87:aa:d9:ed:99:a3:0b:6c:7d:7c:96:25:df:3d:de:7a:
         97:48:84:db:eb:ef:cd:f0:7c:4b:b9:f6:c8:6a:10:06:2e:ac:
         77:53:b7:b8:83:90:61:12:4b:5f:ad:3a:0c:ec:c1:48:c9:67:
         d3:f6:3e:f0:2e:ea:fc:a4:96:32:a7:f5:f2:b2:19:b3:69:51:
         1b:86:4d:54:74:45:4d:a1:63:e6:cd:7f:7e:22:c5:48:dd:9d:
         36:92:b8:b2:9e:4a:c0:08:f1:2a:1e:4c:e1:eb:93:f6:64:fa:
         ce:66:23:3f:4f:be:3a:7a:d3:12:83:f7:c4:b2:be:17:d7:69:
         58:3f:3d:19:6f:cf:31:55:3b:b7:56:7f:38:6e:9f:79:48:ee:
         98:3b:e3:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:08:01 2025 by rpki-client