Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/14c669da-868d-3ee4-840e-05363739bc8f.roa
File:                     14c669da-868d-3ee4-840e-05363739bc8f.roa (raw, json)
Hash identifier:          lYF/doFAtfuMamGNTjVAqTHevATaLGREus4rhcZHvo8=
Subject key identifier:   B5:DC:66:CA:0F:1A:F0:4B:5A:7E:D8:BD:16:6E:D5:51:1C:45:6A:60
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285849AA4F756CCF1B97974E15D540
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/14c669da-868d-3ee4-840e-05363739bc8f.roa
Signing time:             Sun 27 Apr 2025 13:01:01 +0000
ROA not before:           Sun 27 Apr 2025 13:01:01 +0000
ROA not after:            Sat 26 Jul 2025 13:01:01 +0000
asID:                     13335
IP address blocks:        150.48.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:aa:4f:75:6c:cf:1b:97:97:4e:15:d5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Apr 27 13:01:01 2025 GMT
            Not After : Jul 26 13:01:01 2025 GMT
        Subject: CN=311c2e4f-d663-4c2c-94cd-755ae4406594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d4:00:f8:c5:6c:95:a1:ad:46:db:76:d8:de:
                    2d:5a:c6:2b:af:42:c9:59:97:fb:04:1b:f1:fb:91:
                    f5:af:f8:37:4c:99:d2:ad:3f:bc:01:b4:e9:33:62:
                    9b:46:e7:c6:cc:76:14:e3:0f:69:ae:83:1f:cf:13:
                    3b:47:43:3a:93:23:32:6b:f7:88:b9:8b:6e:8d:38:
                    22:49:78:f7:7f:bc:55:13:87:29:e2:0f:73:a7:84:
                    e7:ee:1e:d5:98:7f:ee:f0:74:c5:f1:38:3f:44:35:
                    5a:fc:d0:dd:ca:a8:ac:43:d0:a0:7d:a6:cf:21:69:
                    97:a0:17:df:77:ce:41:b6:86:19:66:60:ef:4d:52:
                    e4:1a:c6:ad:7e:6a:2d:17:db:ee:6b:88:f5:62:79:
                    23:70:0c:c8:f1:70:80:94:b8:b6:5a:69:ae:c5:42:
                    29:e8:54:1e:5c:86:57:4b:d2:d3:51:4a:a5:a1:55:
                    b4:00:e3:dc:aa:20:b6:86:9a:12:3a:4b:f0:8d:b1:
                    0e:37:d3:95:e2:bf:b3:8e:b9:93:e4:cb:d0:95:67:
                    35:36:9f:d9:85:83:94:6f:b5:88:14:15:a2:8e:5b:
                    54:ad:44:9f:6e:ab:c9:c9:90:a0:1e:36:8a:51:95:
                    ec:26:b1:ae:4b:a3:db:fc:16:c4:16:e2:80:4a:a7:
                    19:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:DC:66:CA:0F:1A:F0:4B:5A:7E:D8:BD:16:6E:D5:51:1C:45:6A:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/14c669da-868d-3ee4-840e-05363739bc8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.48.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:6e:d9:74:86:d4:45:49:ca:aa:bb:65:a7:28:74:cc:80:f3:
         9c:d8:4f:6c:8e:31:a7:b4:cc:f2:d1:a6:6d:85:86:28:f0:f1:
         c1:b4:94:c9:13:c5:19:38:86:9b:52:2e:b9:1d:c0:b3:b9:54:
         15:d6:50:c3:3d:98:77:10:b8:7d:19:e4:26:dc:e7:1e:c5:92:
         dc:80:c3:4b:c4:49:6e:91:fa:84:0b:e0:4d:cf:46:84:e2:fa:
         89:57:26:fb:9e:e7:b5:d6:c8:3e:90:f4:38:1f:64:66:2d:ec:
         47:9c:f5:62:e1:ff:19:a9:98:78:8d:84:97:22:5c:11:be:f3:
         af:c8:2e:5d:7a:1e:ef:e6:fc:9a:9e:db:1e:8f:ae:18:a0:f2:
         63:31:2c:c8:93:9a:de:f4:87:04:45:2f:73:6e:04:48:6e:d8:
         76:24:e4:96:22:c7:bf:56:74:a6:85:3e:d1:8d:f4:6a:39:7e:
         db:04:54:b0:0c:07:ad:87:d9:9e:2e:df:b6:79:89:cf:42:a5:
         38:b7:6b:42:da:3a:ec:dc:44:2c:09:14:e6:46:46:d7:46:b2:
         33:36:7d:3b:53:8d:5a:57:4d:aa:62:cc:f8:f3:ba:98:00:f9:
         10:a2:ac:86:e1:90:04:90:11:ec:df:b8:2d:11:13:5d:af:b7:
         ef:7a:c9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:10:11 2025 by rpki-client