Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/264d7498-a02c-3ea3-a8f6-1fbd10a2be8b.roa
File:                     264d7498-a02c-3ea3-a8f6-1fbd10a2be8b.roa (raw, json)
Hash identifier:          0XbUxnjU6NM8YGT94sU5Q80CasKulcMgbOUjP9fiIrc=
Subject key identifier:   C6:EB:17:CD:4A:98:5D:0C:70:EB:3B:17:E4:75:40:F0:4B:AA:A5:53
Certificate issuer:       /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Certificate serial:       010D0C9F43285849B2AF5E6ED4F26CD0D35C74C0
Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/264d7498-a02c-3ea3-a8f6-1fbd10a2be8b.roa
Signing time:             Wed 30 Apr 2025 13:01:02 +0000
ROA not before:           Wed 30 Apr 2025 13:01:02 +0000
ROA not after:            Tue 29 Jul 2025 13:01:02 +0000
asID:                     63199
IP address blocks:        148.153.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b2:af:5e:6e:d4:f2:6c:d0:d3:5c:74:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
        Validity
            Not Before: Apr 30 13:01:02 2025 GMT
            Not After : Jul 29 13:01:02 2025 GMT
        Subject: CN=0587a920-cf8d-4554-91be-1a65cc006916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:85:66:8a:31:69:9a:08:45:31:9f:79:54:65:
                    68:eb:eb:d3:62:36:43:1e:a4:70:2a:97:0e:67:76:
                    30:36:3b:14:96:e6:00:f0:70:50:93:8c:60:62:ce:
                    0b:be:57:4d:2e:30:6e:71:fb:2c:ba:5e:2e:93:84:
                    1b:8b:b2:e7:dd:5c:76:dc:26:9b:43:14:0a:73:b5:
                    a1:7f:8b:1e:4e:b9:ae:ed:3c:50:69:e8:a6:9e:31:
                    3b:c1:34:11:39:67:f9:20:68:73:b8:df:cf:8d:15:
                    56:fd:91:6b:93:40:73:60:95:10:f4:a9:fe:4d:0e:
                    6a:7c:c7:d2:fb:3b:2d:32:44:26:0c:46:98:9a:6c:
                    cb:fd:89:42:2d:e0:54:5e:35:0e:9b:90:40:26:ba:
                    68:82:9c:f7:d1:c7:28:43:27:3c:8b:9f:de:b3:5f:
                    0d:8e:3d:c2:0f:44:d0:02:a9:46:88:ee:d6:c7:6c:
                    1e:ba:12:e8:ed:f6:1e:f5:1d:33:26:b3:d8:aa:0e:
                    f7:b6:8f:23:bf:e7:f4:38:14:ac:cd:71:d4:d1:a4:
                    b1:f5:62:ee:f3:2a:d5:85:19:42:fa:8a:0e:4d:d6:
                    7d:03:7b:03:c8:4e:cc:cd:1c:71:6d:1e:50:d5:9e:
                    4e:4d:ef:cb:3d:16:1c:77:21:ad:92:b7:27:e2:6b:
                    73:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:EB:17:CD:4A:98:5D:0C:70:EB:3B:17:E4:75:40:F0:4B:AA:A5:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/264d7498-a02c-3ea3-a8f6-1fbd10a2be8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl

            X509v3 Authority Key Identifier:
                keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.153.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:81:b2:be:6b:71:53:78:38:d4:8a:b7:6a:85:3c:d4:25:70:
         3b:02:b4:ef:67:75:77:a5:65:f4:27:23:f1:d7:9c:da:99:fa:
         aa:3c:ab:06:7a:5b:66:29:fe:c9:75:a1:5a:3a:93:7a:c2:1c:
         24:50:ab:db:69:cc:65:03:7c:dc:60:30:d1:49:a8:06:46:88:
         70:a6:e7:a1:8b:55:20:d5:15:91:e9:eb:ea:63:5a:34:ef:eb:
         2c:21:bc:18:06:8e:86:cf:b5:e7:81:9b:42:38:67:71:89:89:
         26:9e:8f:50:11:3d:62:c9:f4:0b:f6:eb:4c:87:e5:f3:91:cc:
         19:d7:b2:65:02:94:45:90:36:7c:63:c6:47:7f:01:a2:b7:c2:
         f6:63:94:45:24:c0:bc:7d:68:12:f7:e5:9b:ad:33:20:68:b4:
         d8:e4:2f:39:62:72:b8:d2:85:90:8b:d4:30:61:c3:d7:cd:6b:
         14:70:6d:e9:d7:8e:23:08:79:af:b6:74:cb:fe:b0:91:19:c0:
         5d:9d:d7:f7:ad:b7:28:78:6e:77:ac:85:8e:45:2a:1e:6a:09:
         6d:74:24:38:3f:cf:a9:f6:12:9d:2c:e1:c7:0d:e9:4a:a9:33:
         53:30:26:6e:1b:f3:6f:2c:15:f8:d7:80:60:47:dc:dd:35:2e:
         e0:6f:8c:8a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmyr15u1PJs0NNcdMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx
YWE3MB4XDTI1MDQzMDEzMDEwMloXDTI1MDcyOTEzMDEwMlowLzEtMCsGA1UEAxMk
MDU4N2E5MjAtY2Y4ZC00NTU0LTkxYmUtMWE2NWNjMDA2OTE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIVmijFpmghFMZ95VGVo6+vTYjZDHqRwKpcO
Z3YwNjsUluYA8HBQk4xgYs4LvldNLjBucfssul4uk4Qbi7Ln3Vx23CabQxQKc7Wh
f4seTrmu7TxQaeimnjE7wTQROWf5IGhzuN/PjRVW/ZFrk0BzYJUQ9Kn+TQ5qfMfS
+zstMkQmDEaYmmzL/YlCLeBUXjUOm5BAJrpogpz30ccoQyc8i5/es18Njj3CD0TQ
AqlGiO7Wx2weuhLo7fYe9R0zJrPYqg73to8jv+f0OBSszXHU0aSx9WLu8yrVhRlC
+ooOTdZ9A3sDyE7MzRxxbR5Q1Z5OTe/LPRYcdyGtkrcn4mtzJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMbrF81KmF0McOs7F+R1QPBLqqVTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1
ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMjY0ZDc0OTgtYTAyYy0z
ZWEzLWE4ZjYtMWZiZDEwYTJiZThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky
YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh
MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz
YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJmUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADGBsr5rcVN4ONSKt2qFPNQlcDsCtO9ndXelZfQnI/HXnNqZ+qo8qwZ6
W2Yp/sl1oVo6k3rCHCRQq9tpzGUDfNxgMNFJqAZGiHCm56GLVSDVFZHp6+pjWjTv
6ywhvBgGjobPteeBm0I4Z3GJiSaej1ARPWLJ9Av260yH5fORzBnXsmUClEWQNnxj
xkd/AaK3wvZjlEUkwLx9aBL35ZutMyBotNjkLzlicrjShZCL1DBhw9fNaxRwbenX
jiMIea+2dMv+sJEZwF2d1/ettyh4bneshY5FKh5qCW10JDg/z6n2Ep0s4ccN6Uqp
M1MwJm4b828sFfjXgGBH3N01LuBvjIo=
-----END CERTIFICATE-----
Generated at Sun May 11 23:11:48 2025 by rpki-client