Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/8167458d-3c38-335e-be8c-af4a2cce0f94.roa
File:                     8167458d-3c38-335e-be8c-af4a2cce0f94.roa (raw, json)
Hash identifier:          SzNC8Zpfg+Cmogr47yBS/viJQ1nzcW0JLYin3tWwZvw=
Subject key identifier:   19:65:C9:A4:8C:10:A1:8A:E3:24:ED:8E:93:A5:7D:8B:F6:6A:BA:AC
Certificate issuer:       /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Certificate serial:       010D0C9F4328584A46A5AF5DAA41FC72D1E27E00
Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/8167458d-3c38-335e-be8c-af4a2cce0f94.roa
Signing time:             Sun 22 Jun 2025 13:01:03 +0000
ROA not before:           Sun 22 Jun 2025 13:01:03 +0000
ROA not after:            Sat 20 Sep 2025 13:01:03 +0000
asID:                     63199
IP address blocks:        148.153.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:46:a5:af:5d:aa:41:fc:72:d1:e2:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
        Validity
            Not Before: Jun 22 13:01:03 2025 GMT
            Not After : Sep 20 13:01:03 2025 GMT
        Subject: CN=e583ea52-b794-41e7-a2d5-dc00df7811e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:42:a5:33:e7:35:21:d6:bf:0f:5e:ce:b1:57:
                    c0:46:40:1a:b2:09:8c:12:39:98:68:26:90:79:c4:
                    26:50:01:82:65:8b:7a:dc:bb:cf:35:5f:a4:fc:1e:
                    98:1e:9d:37:2f:ee:b9:94:0d:20:3b:b5:10:f9:53:
                    75:c0:de:66:23:b3:a3:f7:aa:87:1f:3a:90:29:f8:
                    85:db:3b:53:1e:d4:1d:3a:86:2b:34:be:90:39:e7:
                    85:e0:3c:e9:77:23:fd:f3:81:d3:3c:1e:2c:61:92:
                    f6:f6:96:67:0b:11:6b:ca:4e:e7:34:e3:a2:44:5d:
                    95:03:77:7d:5d:a8:47:b3:cc:aa:64:41:19:d4:b5:
                    d2:fd:28:d7:6d:64:0b:fc:e6:20:33:da:a1:12:21:
                    1b:47:ef:12:31:4c:2f:1f:e5:a5:5b:25:d1:ca:1c:
                    3c:61:3b:f5:0b:fb:48:b4:67:89:6f:28:33:a2:a5:
                    85:95:32:4a:36:66:1f:54:4f:6b:34:40:aa:7f:11:
                    c2:92:45:33:8b:5b:89:6d:21:2e:bc:d3:62:42:28:
                    96:f6:7e:22:5f:9e:c1:65:1b:f3:81:20:c7:1f:74:
                    ff:0f:8e:bf:c1:23:ae:fe:d3:6d:9f:bc:f4:08:62:
                    69:03:3f:a8:38:12:fb:93:d9:bc:dd:e6:d5:ba:d1:
                    3a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:65:C9:A4:8C:10:A1:8A:E3:24:ED:8E:93:A5:7D:8B:F6:6A:BA:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/8167458d-3c38-335e-be8c-af4a2cce0f94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl

            X509v3 Authority Key Identifier:
                keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.153.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:d1:1d:9c:2d:9d:59:c4:5d:d0:e9:9b:d1:54:a1:5c:5c:16:
         e5:81:d9:d0:9d:d8:58:a7:92:92:a3:d3:9f:32:6c:ba:61:1e:
         8c:e3:2c:00:7e:15:34:ca:ee:40:1a:9c:06:fd:02:ed:7e:02:
         49:08:82:ec:4c:29:2b:a7:79:50:b9:65:4c:15:6a:14:7e:dc:
         83:5d:49:7f:5d:e9:e4:b6:de:f2:77:47:2f:77:94:59:b0:db:
         11:fa:b4:02:b2:29:45:06:8f:ed:6d:87:26:c3:c7:dd:bd:e9:
         66:1f:3f:3b:f5:6b:f2:f6:f3:5a:2f:18:09:a0:3b:3e:1f:92:
         04:fa:b6:21:39:1e:9e:d3:50:88:86:2f:6d:27:1a:84:fc:34:
         42:22:1e:65:70:d8:45:ac:54:56:89:bf:41:40:e1:35:85:91:
         4a:86:52:bb:c8:51:41:d0:17:d6:60:cf:08:7c:45:3d:bc:ae:
         66:5d:90:c9:af:79:b5:7f:c0:d1:9b:ed:e3:97:0c:a4:7e:19:
         c0:b5:64:ac:67:12:80:85:04:0c:67:f5:ad:7c:f4:16:c3:0c:
         1f:6e:c0:97:9e:28:ef:83:e0:94:ab:83:6d:80:70:09:84:43:
         b1:aa:eb:2b:2d:8c:8e:62:c7:17:a8:c6:4b:aa:1b:cf:85:8e:
         8e:66:98:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 01:16:55 2025 by rpki-client