Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6d035dce-8a29-399b-aa1e-d42ccc56b5ed.roa
File:                     6d035dce-8a29-399b-aa1e-d42ccc56b5ed.roa (raw, json)
Hash identifier:          d1Q0mnLTevNGTon0EzJgVvm27YXQQ6QoNItcCVXBoNY=
Subject key identifier:   BF:02:82:19:B1:CE:A4:D6:C9:12:A8:F6:13:C1:29:86:68:43:4B:45
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285849AA4F73E34A09A21CA1A93300
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6d035dce-8a29-399b-aa1e-d42ccc56b5ed.roa
Signing time:             Sun 27 Apr 2025 13:01:01 +0000
ROA not before:           Sun 27 Apr 2025 13:01:01 +0000
ROA not after:            Sat 26 Jul 2025 13:01:01 +0000
asID:                     13335
IP address blocks:        150.48.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:aa:4f:73:e3:4a:09:a2:1c:a1:a9:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Apr 27 13:01:01 2025 GMT
            Not After : Jul 26 13:01:01 2025 GMT
        Subject: CN=aabd6267-9d92-41e4-98d8-928ecd34bf6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1c:61:c0:f2:6f:69:63:1c:40:f5:5b:6b:57:
                    31:9d:68:6f:e4:af:b0:c6:a9:38:26:13:c7:04:3f:
                    ff:62:7a:3f:85:1b:ee:2d:6a:62:19:10:28:c0:86:
                    cc:7b:54:0f:95:a3:8e:02:c2:ab:7d:03:50:85:20:
                    2c:1a:7b:f6:48:7c:67:bf:12:cf:f1:88:0d:b3:fa:
                    c6:71:f3:81:32:92:35:9a:8b:0b:2f:cf:0a:d0:e7:
                    31:e1:a8:69:29:8e:11:d8:23:a3:ba:00:57:cc:66:
                    6e:98:9c:7c:0b:06:22:0f:7a:53:a0:9b:4a:74:d6:
                    4b:c0:2a:f7:88:19:f8:51:6c:2c:0b:ba:06:96:51:
                    46:5e:80:f4:cf:37:cf:bf:7f:e6:31:bf:81:cb:00:
                    b9:b7:91:7e:c4:3a:ca:de:f9:fd:79:c4:af:31:64:
                    e4:5f:a5:1a:ae:f9:c3:b6:ca:08:d4:3c:30:75:4b:
                    60:35:da:61:f8:38:12:3f:54:90:31:d8:c9:eb:44:
                    03:89:54:62:93:cf:19:ee:f6:be:b7:86:91:b6:0e:
                    d9:ed:48:a8:2d:03:76:2f:0f:c4:da:35:ba:ea:5e:
                    02:6f:91:99:d5:aa:d0:c0:59:3c:b9:33:74:ac:77:
                    96:9e:88:a4:cc:db:58:fc:60:3f:f6:c9:ec:40:66:
                    28:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:02:82:19:B1:CE:A4:D6:C9:12:A8:F6:13:C1:29:86:68:43:4B:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6d035dce-8a29-399b-aa1e-d42ccc56b5ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.48.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:a8:b5:fe:63:81:89:fb:ae:57:b5:88:9a:cd:8b:11:f6:d4:
         de:b4:c0:af:04:cc:a9:3d:c0:99:bd:40:6f:92:05:72:f2:93:
         08:f1:e3:aa:fa:4e:6a:44:5e:82:25:24:54:53:fb:3a:91:98:
         5d:18:c6:58:64:27:45:1c:c2:6e:ed:1f:71:f0:c0:5f:6a:ab:
         bc:a0:e3:14:15:18:5f:35:d3:fc:66:fd:ba:96:2b:1e:bb:aa:
         d9:48:e4:40:ef:fa:bc:b2:2d:c7:f0:0f:97:90:84:0a:0f:1d:
         4b:a8:60:57:9c:03:f7:47:8e:1e:11:72:88:37:3b:c9:bd:21:
         e0:a0:be:79:51:e6:04:55:54:22:b0:bd:28:aa:14:56:9f:65:
         e5:94:3f:67:f8:36:8d:d2:d7:27:9c:0e:47:54:46:24:f7:b1:
         5f:66:e4:67:ea:21:17:68:7d:89:3d:ac:c4:4f:a8:d2:48:10:
         d9:47:99:f8:da:74:c3:60:9e:6d:d7:2f:10:01:c8:59:d4:42:
         fd:d9:97:79:37:22:f0:98:c0:85:5a:b8:4a:00:cd:f5:9d:63:
         74:fc:cc:73:c2:dd:30:66:86:3c:cd:d2:dc:eb:e6:84:71:91:
         51:68:f1:29:0c:9d:9e:25:2b:d4:ef:04:4b:eb:df:2a:94:ea:
         3c:a0:5f:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmqT3PjSgmiHKGpMwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI1MDQyNzEzMDEwMVoXDTI1MDcyNjEzMDEwMVowLzEtMCsGA1UEAxMk
YWFiZDYyNjctOWQ5Mi00MWU0LTk4ZDgtOTI4ZWNkMzRiZjZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhxhwPJvaWMcQPVba1cxnWhv5K+wxqk4JhPH
BD//Yno/hRvuLWpiGRAowIbMe1QPlaOOAsKrfQNQhSAsGnv2SHxnvxLP8YgNs/rG
cfOBMpI1mosLL88K0Ocx4ahpKY4R2COjugBXzGZumJx8CwYiD3pToJtKdNZLwCr3
iBn4UWwsC7oGllFGXoD0zzfPv3/mMb+BywC5t5F+xDrK3vn9ecSvMWTkX6UarvnD
tsoI1DwwdUtgNdph+DgSP1SQMdjJ60QDiVRik88Z7va+t4aRtg7Z7UioLQN2Lw/E
2jW66l4Cb5GZ1arQwFk8uTN0rHeWnoikzNtY/GA/9snsQGYo2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL8CghmxzqTWyRKo9hPBKYZoQ0tFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNmQwMzVkY2UtOGEyOS0z
OTliLWFhMWUtZDQyY2NjNTZiNWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAljCwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAWotf5jgYn7rle1iJrNixH21N60wK8EzKk9wJm9QG+SBXLykwjx46r6
TmpEXoIlJFRT+zqRmF0YxlhkJ0Ucwm7tH3HwwF9qq7yg4xQVGF810/xm/bqWKx67
qtlI5EDv+ryyLcfwD5eQhAoPHUuoYFecA/dHjh4Rcog3O8m9IeCgvnlR5gRVVCKw
vSiqFFafZeWUP2f4No3S1yecDkdURiT3sV9m5GfqIRdofYk9rMRPqNJIENlHmfja
dMNgnm3XLxAByFnUQv3Zl3k3IvCYwIVauEoAzfWdY3T8zHPC3TBmhjzN0tzr5oRx
kVFo8SkMnZ4lK9TvBEvr3yqU6jygX2g=
-----END CERTIFICATE-----
Generated at Wed May 7 21:55:49 2025 by rpki-client