Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/8eef35d3-8047-3475-8a1e-678aa115a26e.roa
File:                     8eef35d3-8047-3475-8a1e-678aa115a26e.roa (raw, json)
Hash identifier:          mKmbMyknbjVPH+qtFNLCU06yTFWwoA0GYpMiSnK30CI=
Subject key identifier:   8E:3E:5C:36:EA:AF:C8:46:7A:41:C0:32:FA:A9:5E:D6:D5:83:45:32
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285849AA4F76E7BC74F9A648685370
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/8eef35d3-8047-3475-8a1e-678aa115a26e.roa
Signing time:             Sun 27 Apr 2025 13:01:01 +0000
ROA not before:           Sun 27 Apr 2025 13:01:01 +0000
ROA not after:            Sat 26 Jul 2025 13:01:01 +0000
asID:                     13335
IP address blocks:        150.48.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:aa:4f:76:e7:bc:74:f9:a6:48:68:53:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Apr 27 13:01:01 2025 GMT
            Not After : Jul 26 13:01:01 2025 GMT
        Subject: CN=92e79aa5-8a80-4241-8029-4ab024648d3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:84:cd:0f:49:a9:01:1d:5b:76:d5:46:db:ab:
                    68:2f:d9:9f:90:45:f9:f0:aa:18:9a:8e:3f:1a:1d:
                    40:f5:6a:e6:e2:dc:9a:8a:d5:97:8c:31:43:82:6d:
                    4e:cc:52:f9:bf:41:28:de:42:2e:d5:46:c4:cc:5f:
                    b0:cf:82:68:88:94:20:32:b5:16:e3:78:5c:8a:ec:
                    69:89:47:20:f4:4b:64:73:ab:2d:ed:ec:d7:81:89:
                    ca:11:e7:10:c2:34:e2:81:4f:b4:f0:fa:f6:27:74:
                    aa:2c:ce:e8:9a:28:02:fc:88:c4:a6:19:aa:03:9c:
                    97:ac:0a:a5:58:d4:d5:b7:57:6b:42:a5:2a:5b:25:
                    c3:3c:84:26:b2:a3:62:89:76:3f:63:10:d6:39:bf:
                    96:87:0f:4e:fc:28:a0:b9:6a:08:3e:3f:16:22:fc:
                    28:02:2b:47:69:e8:57:7e:47:4f:87:8e:b8:59:2b:
                    63:e7:bc:9d:64:b6:c0:d0:3e:32:91:54:9c:38:bc:
                    6a:31:b4:4f:22:d5:96:b4:1a:51:76:18:59:6e:26:
                    06:a6:c2:bc:95:d3:62:a3:dd:36:1a:00:23:ef:fa:
                    8f:42:06:3f:fa:98:68:3c:45:a9:4d:33:c7:9a:9e:
                    bb:84:60:d5:52:f9:9e:fa:d9:10:04:73:f1:81:b3:
                    94:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:3E:5C:36:EA:AF:C8:46:7A:41:C0:32:FA:A9:5E:D6:D5:83:45:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/8eef35d3-8047-3475-8a1e-678aa115a26e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.48.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:bd:96:21:8e:06:de:9d:98:2d:6d:f2:03:50:1a:5c:7f:a5:
         3b:6c:96:e2:a6:fe:fe:ca:3e:4b:2b:f5:88:64:f7:fa:13:28:
         06:b0:01:46:c6:d2:41:8a:00:f1:21:bf:6a:45:88:2b:0f:3a:
         3e:a6:81:72:8c:f1:a1:93:f9:6e:7b:a7:a1:7d:f2:84:16:7c:
         0e:97:42:68:34:d3:8e:e1:fc:62:28:55:a3:ab:14:f6:56:9e:
         b3:e3:f2:11:58:09:f0:45:61:ba:10:a0:6d:e4:de:fa:bc:1c:
         10:25:11:e2:44:a4:c3:29:cf:b0:16:e7:f0:4f:44:34:3a:ba:
         8d:13:15:25:07:ad:4c:30:57:19:95:68:8d:69:a4:be:d4:59:
         70:b9:d4:b7:74:14:79:80:25:5c:37:a2:34:ce:b5:26:a3:c4:
         ad:4d:d2:f3:6d:ae:7b:57:5c:2d:4c:5f:85:09:b5:63:f6:fb:
         71:e8:82:df:22:21:12:98:41:32:61:6c:1e:dc:3e:2c:43:ac:
         34:a5:d4:a7:33:2e:88:83:ea:61:89:68:14:ad:4e:7e:ae:fc:
         b8:2d:92:db:00:af:ec:d3:67:a7:90:1f:21:f8:02:e5:6c:90:
         a7:82:88:45:42:ed:bd:1f:8e:f1:04:77:16:e3:60:64:09:e3:
         41:e4:20:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 17:14:10 2025 by rpki-client