Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/01552dd3-e17e-302b-9515-19cc33ac672f.roa
File:                     01552dd3-e17e-302b-9515-19cc33ac672f.roa (raw, json)
Hash identifier:          mPWoHT4B6sCMfMMOJYNRaaTYFlnCWn7pga4DrBvGYH4=
Subject key identifier:   52:1F:97:DF:D0:48:EB:9C:06:D6:AE:E9:16:E3:90:69:F3:B2:DC:BC
Certificate issuer:       /CN=004321a8-393d-4f7f-add9-dddc07a1320d
Certificate serial:       010D0C9F43285849C4310D883A35F6F847EF6180
Authority key identifier: FE:D8:E1:5B:23:CE:B0:9B:2E:84:87:9B:FF:67:16:5D:DA:D5:FD:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/01552dd3-e17e-302b-9515-19cc33ac672f.roa
Signing time:             Tue 06 May 2025 19:31:06 +0000
ROA not before:           Tue 06 May 2025 19:31:06 +0000
ROA not after:            Mon 04 Aug 2025 19:31:06 +0000
asID:                     399970
IP address blocks:        149.112.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/004321a8-393d-4f7f-add9-dddc07a1320d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/004321a8-393d-4f7f-add9-dddc07a1320d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:31:0d:88:3a:35:f6:f8:47:ef:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=004321a8-393d-4f7f-add9-dddc07a1320d
        Validity
            Not Before: May  6 19:31:06 2025 GMT
            Not After : Aug  4 19:31:06 2025 GMT
        Subject: CN=3e873097-8455-4bed-aa63-8cdba4a370e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:26:e8:f3:69:6b:ba:9f:2d:d8:69:91:b1:2a:
                    17:58:3b:e3:e9:4e:97:88:25:82:f7:a2:6a:07:83:
                    4d:0f:b4:89:98:82:51:4c:2d:51:cb:4d:96:2f:1f:
                    b1:f9:5d:23:75:95:8b:79:28:60:14:4f:04:32:3a:
                    61:11:35:75:5b:be:17:9c:d6:86:9a:8a:4b:77:63:
                    2f:1c:ca:fb:75:bb:5b:fc:64:03:08:0b:dc:61:cb:
                    8a:09:dc:53:09:a7:72:02:91:4e:4c:3d:a0:35:16:
                    2e:c8:91:95:80:1c:e3:41:bb:3a:90:26:cc:6d:17:
                    ab:e3:54:0a:8e:da:62:e4:6c:04:5d:81:42:83:23:
                    22:74:c7:51:a7:99:98:92:f8:f9:0c:6a:b3:bd:ab:
                    90:a7:fa:a9:87:ed:23:08:19:38:4b:1b:2d:c1:3d:
                    74:65:dd:e9:4b:02:57:c4:88:1f:84:df:6d:92:ed:
                    75:bf:07:6d:ab:da:2b:d3:6e:7d:9a:09:e9:d4:50:
                    d1:65:ab:d9:d0:a7:0f:be:cd:06:f1:84:8d:a5:4b:
                    3b:a9:f9:f2:12:9e:db:da:6e:5f:31:c8:b9:00:dd:
                    b1:e0:a8:9e:03:b4:c4:62:de:ba:ea:8b:49:9a:3e:
                    29:84:73:8f:72:02:35:37:0f:ea:60:31:8f:5f:43:
                    7b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:1F:97:DF:D0:48:EB:9C:06:D6:AE:E9:16:E3:90:69:F3:B2:DC:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/01552dd3-e17e-302b-9515-19cc33ac672f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/004321a8-393d-4f7f-add9-dddc07a1320d.crl

            X509v3 Authority Key Identifier:
                keyid:FE:D8:E1:5B:23:CE:B0:9B:2E:84:87:9B:FF:67:16:5D:DA:D5:FD:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:d2:1b:97:7b:fd:9b:e0:11:bb:77:88:37:5b:51:ca:73:f7:
         ba:c5:cb:bf:61:0d:23:0e:97:47:1a:ac:c7:50:b4:1d:33:33:
         b1:48:ad:f5:2a:00:3b:57:5d:e6:5f:e6:16:f1:fe:d3:6f:84:
         0f:11:ec:e9:b8:ee:7c:57:7e:73:06:36:7e:fd:41:0e:6f:2b:
         9b:15:b3:04:42:9c:00:35:a0:43:c6:91:31:04:82:28:42:a7:
         1c:3f:90:c7:46:06:4f:74:f4:5a:97:c3:f2:37:76:22:f8:0d:
         3a:18:4b:11:3d:81:a7:77:77:ed:6e:52:f1:bb:cc:2d:83:5d:
         9e:9b:af:93:1f:3f:a6:d5:96:cd:87:ce:76:28:1b:8c:71:bf:
         0c:f6:2f:53:3a:6e:3b:08:fa:1f:75:0d:25:64:12:35:76:d1:
         c9:0b:52:7f:9f:5c:c5:c2:37:2c:9c:c7:df:d3:81:ae:48:f3:
         5b:01:da:fe:91:ad:ae:50:8a:75:3b:9c:0c:92:4b:51:e4:30:
         0b:cf:7c:57:53:3f:60:db:d9:78:75:7e:86:b0:68:19:2d:9d:
         9f:95:d9:bd:b4:6f:6f:2d:25:4b:c5:c5:2c:3d:9d:1c:4c:4d:
         f4:1e:3a:3b:8e:39:59:6e:d2:02:df:7a:b6:66:7e:cb:e5:16:
         d7:fa:1d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:24:12 2025 by rpki-client