Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08/88ac6e75-96e5-3ad7-bf8b-d3630a990a55.roa
File:                     88ac6e75-96e5-3ad7-bf8b-d3630a990a55.roa (raw, json)
Hash identifier:          azTJ0YiNruzpBvwC4zsiYWjt5LQTo078lg6WuZT2PEU=
Subject key identifier:   84:AF:AC:EC:68:50:79:3B:85:06:1F:37:3E:69:98:5D:BC:C0:4E:E5
Certificate issuer:       /CN=15a5c850-b5f7-4cfd-b31f-19d51bf3cc08
Certificate serial:       010D0C9F4328584A03A55051531F30A069443260
Authority key identifier: 26:4F:4E:7E:79:A7:DC:07:8E:0B:25:4D:0F:3A:C5:03:5F:C6:C2:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08/88ac6e75-96e5-3ad7-bf8b-d3630a990a55.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     62697
IP address blocks:        144.77.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:50:51:53:1f:30:a0:69:44:32:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15a5c850-b5f7-4cfd-b31f-19d51bf3cc08
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=8214b9fe-05d3-43fd-a127-96153c373066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:45:01:ca:6b:ad:e4:3a:4e:83:55:f1:ae:66:
                    92:6a:f6:7b:63:08:d0:86:bd:53:9c:5e:cc:c0:f4:
                    ff:36:40:8e:3a:fd:88:79:c6:a9:0f:c4:80:f8:29:
                    ab:35:19:ef:99:4d:42:5a:f3:ed:c8:d7:01:63:10:
                    94:63:75:cf:84:ee:79:c5:5e:35:9f:f0:d8:fd:3a:
                    4e:00:7a:81:80:50:81:a8:7c:19:cb:cf:e8:ab:72:
                    d2:91:81:94:2a:0e:c0:b5:b6:20:94:de:1a:3f:76:
                    ba:70:a6:2d:88:75:01:af:b1:f3:47:77:c3:6c:8d:
                    ec:8c:c1:38:45:aa:3a:62:98:c7:94:b3:0a:9e:00:
                    e7:f0:17:66:1e:fb:a7:b4:e7:ef:93:61:a9:4c:77:
                    8a:8b:a7:b9:ea:98:f2:e2:99:2d:f4:07:c2:07:9d:
                    45:ac:71:fa:ad:0d:42:0f:ca:1d:fb:77:ea:c6:e9:
                    dd:e0:18:1d:de:e1:d9:82:45:e0:41:88:17:89:b4:
                    23:c8:fb:20:a7:59:d5:30:0a:49:45:49:4d:3a:7e:
                    84:fc:f0:0b:b2:fa:bb:67:38:ab:71:98:69:97:e6:
                    89:ed:d2:69:4e:7f:46:dc:de:b2:27:67:9b:c9:81:
                    5c:f2:3d:7f:32:bc:5e:8f:b3:e3:ad:4f:7b:25:0a:
                    e5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:AF:AC:EC:68:50:79:3B:85:06:1F:37:3E:69:98:5D:BC:C0:4E:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08/88ac6e75-96e5-3ad7-bf8b-d3630a990a55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08.crl

            X509v3 Authority Key Identifier:
                keyid:26:4F:4E:7E:79:A7:DC:07:8E:0B:25:4D:0F:3A:C5:03:5F:C6:C2:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.77.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:0b:9e:55:2c:1b:80:ed:51:2d:41:aa:71:08:53:81:61:91:
         92:0c:5a:ee:8d:bd:24:6d:52:8c:67:75:d6:36:5e:84:b0:72:
         3e:56:84:d5:b9:80:eb:05:19:65:6f:77:ca:24:85:e0:59:48:
         cd:27:c5:c3:76:33:39:4a:ad:ec:97:dc:d1:eb:4e:78:c8:8e:
         90:00:cf:77:b4:52:2d:2b:09:d9:5a:ac:31:94:0f:ee:dc:ba:
         45:e4:b8:23:ec:e9:bb:be:49:60:ba:be:6b:0d:4b:f5:5d:e7:
         c6:7b:29:30:87:cf:f8:8f:1d:95:03:e4:ec:32:f2:f7:7b:e5:
         e1:df:15:68:e3:3b:9f:75:db:34:eb:ed:09:66:0d:f9:d7:fb:
         62:08:a9:73:73:13:50:0c:65:c3:28:93:a7:91:08:ed:f3:fd:
         87:31:61:b6:56:58:22:21:71:0a:72:c3:da:21:03:fc:a4:98:
         a5:cb:17:9c:60:a3:ad:ec:0a:81:6d:ba:7c:1c:f8:b6:1d:11:
         8c:db:ed:cd:ef:59:b5:0c:c7:49:90:ca:ae:2d:56:b6:52:07:
         e6:08:4f:28:73:2f:cb:d0:e3:f0:ab:b2:df:2f:e0:ba:89:53:
         f5:cf:5d:02:c8:f2:ee:07:92:9f:b4:db:df:00:4b:4c:5a:16:
         3a:8e:54:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 21:41:39 2025 by rpki-client