Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/a793ec9d-86d1-3002-a9d4-5a9940edcd88.roa
File:                     a793ec9d-86d1-3002-a9d4-5a9940edcd88.roa (raw, json)
Hash identifier:          XS7ISu7LTbNFVBVT5WJYx1hX3jX7IMOo9JiPcQ/bxVU=
Subject key identifier:   9A:34:03:BE:71:88:A9:0B:D3:CE:82:A3:DB:40:AC:BA:DA:16:5B:F1
Certificate issuer:       /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Certificate serial:       010D0C9F4328584A49707394FC674F53F3EE9620
Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/a793ec9d-86d1-3002-a9d4-5a9940edcd88.roa
Signing time:             Mon 23 Jun 2025 13:01:03 +0000
ROA not before:           Mon 23 Jun 2025 13:01:03 +0000
ROA not after:            Sun 21 Sep 2025 13:01:03 +0000
asID:                     63199
IP address blocks:        148.153.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:49:70:73:94:fc:67:4f:53:f3:ee:96:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
        Validity
            Not Before: Jun 23 13:01:03 2025 GMT
            Not After : Sep 21 13:01:03 2025 GMT
        Subject: CN=071e9a40-a4ca-40f5-96bc-3672fec51d04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:9e:9a:45:80:c6:c5:dc:9c:0d:e1:81:bf:91:
                    43:14:bc:b0:8e:1f:a3:11:64:1d:36:55:95:f3:79:
                    c6:e3:4c:46:e8:80:9e:73:71:32:a2:e4:e9:bc:2c:
                    0d:40:62:b1:79:5c:ff:db:3c:f3:d2:8d:34:35:f4:
                    46:c6:93:9f:75:d3:96:72:20:51:17:f4:b9:8d:6c:
                    cc:4a:a9:a5:f4:21:ce:86:74:ef:1e:f8:a4:0f:73:
                    93:11:08:94:00:f6:c7:fb:b6:c6:dd:99:ba:a2:8a:
                    3e:d3:e7:c8:fc:40:7e:e0:dc:db:59:f2:d1:c0:96:
                    0f:ed:0d:19:5e:05:16:a2:8b:22:01:36:e1:9f:db:
                    2d:fc:84:e9:24:7a:34:eb:7f:ae:13:4c:46:99:07:
                    55:c9:8b:19:09:4a:a6:0e:70:db:3e:32:56:85:4f:
                    02:6f:b3:5e:1e:68:de:e5:46:ce:18:62:d9:a3:9c:
                    1f:b4:1a:8c:c6:e0:b7:b8:08:a6:5b:17:03:6d:f9:
                    a2:af:96:8c:62:75:9f:59:02:5e:03:6f:3e:b8:8e:
                    11:09:67:fe:96:df:2c:58:50:e7:dc:ea:d9:dd:db:
                    34:7f:a5:c4:c3:d3:94:52:66:df:05:d9:a7:ba:14:
                    14:88:09:30:c9:1c:29:bf:88:e1:40:c5:62:2a:78:
                    1e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:34:03:BE:71:88:A9:0B:D3:CE:82:A3:DB:40:AC:BA:DA:16:5B:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/a793ec9d-86d1-3002-a9d4-5a9940edcd88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl

            X509v3 Authority Key Identifier:
                keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.153.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:03:0d:dc:61:c3:95:46:b4:35:f5:bd:d9:0c:f3:fe:af:a6:
         bc:e1:5d:ec:ce:8b:c9:dd:b3:ab:07:1b:dc:6d:76:6a:18:c7:
         88:96:34:2b:74:e3:3f:fe:79:9d:c3:ae:c2:b4:f1:1f:58:e0:
         b9:cb:96:93:da:ce:2a:d7:55:62:58:94:d4:cc:fe:d7:5c:04:
         38:21:9d:f4:6a:56:84:d3:20:c0:91:16:d1:e4:73:45:dd:15:
         e7:ad:1f:29:bb:0f:1b:f9:da:9d:82:80:8f:96:16:a3:88:a4:
         72:b8:bd:2c:ed:e8:61:33:f3:c4:79:b5:05:63:f0:8a:7f:6e:
         ca:67:a4:3a:9e:5c:bc:81:08:6b:ac:60:1b:69:b5:e2:56:a1:
         d2:4b:d2:7d:16:3c:ce:c8:dc:9a:40:88:20:30:a9:97:18:09:
         8d:a9:25:12:4c:99:46:1e:15:fc:5c:39:ff:56:01:12:e3:6b:
         82:87:fe:8a:8c:03:72:db:b3:97:8d:8d:ac:95:ff:8d:37:19:
         f0:6e:0d:d9:3d:0d:33:31:62:11:2f:50:79:da:89:63:25:4e:
         15:d4:ca:71:ea:4f:61:b0:2d:61:18:88:58:94:59:98:c5:5e:
         d2:8f:82:4f:af:50:b2:c2:a9:4a:ac:1d:cc:03:4a:d0:4f:1d:
         d6:23:f7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 02:45:15 2025 by rpki-client