Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a36da157-b4f8-3fa1-861a-594dc015fe56.roa
File:                     a36da157-b4f8-3fa1-861a-594dc015fe56.roa (raw, json)
Hash identifier:          f82ADwjoAWksJ2l90n9yv2gs7seov5r6FdjDLlRk8wk=
Subject key identifier:   36:33:14:4A:5D:DC:BA:22:B2:15:66:37:AB:76:27:A8:1C:EF:B7:E5
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F432858499AF47FF14272AB4C81D01100
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a36da157-b4f8-3fa1-861a-594dc015fe56.roa
Signing time:             Tue 22 Apr 2025 01:00:47 +0000
ROA not before:           Tue 22 Apr 2025 01:00:47 +0000
ROA not after:            Mon 21 Jul 2025 01:00:47 +0000
asID:                     64267
IP address blocks:        148.59.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9a:f4:7f:f1:42:72:ab:4c:81:d0:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Apr 22 01:00:47 2025 GMT
            Not After : Jul 21 01:00:47 2025 GMT
        Subject: CN=11220e8c-5cfc-44a8-9645-c12d82553b60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d6:37:b6:61:c2:64:50:fe:d9:42:a6:b9:25:
                    e4:30:75:2b:f1:32:a6:f2:ab:aa:3d:c5:8d:03:ab:
                    68:00:8d:d8:57:e9:ce:ce:5f:fe:28:3e:fb:06:88:
                    ba:0d:cd:e7:91:02:a6:fe:5a:38:28:6c:cd:aa:1c:
                    be:cf:58:30:f3:c4:a4:50:24:38:85:9c:54:63:80:
                    e6:ef:80:54:5a:f6:93:e2:2d:4d:87:8d:81:36:13:
                    3e:a1:dc:cd:46:2b:7d:72:3c:45:0c:82:ef:2f:de:
                    72:20:f4:17:7a:74:92:e9:5b:a1:30:45:b1:07:4a:
                    f3:41:4e:8e:4e:8c:4f:6a:ab:2b:eb:6f:d2:d4:5c:
                    a8:b0:5b:49:3f:96:08:f2:d9:b0:c9:c1:64:07:77:
                    ab:b9:3c:cd:ec:e9:8b:82:75:40:29:44:e9:dd:03:
                    58:70:d1:96:84:f5:50:60:c7:37:00:5b:b1:7c:41:
                    8c:c8:8b:e2:20:8e:8b:97:75:10:1c:0e:99:ea:1a:
                    a0:88:36:a0:e9:2f:25:dd:b7:2b:2d:c2:ed:c3:2b:
                    3b:16:fd:4a:7c:ac:da:20:64:83:8c:4f:cd:66:e3:
                    3a:c6:ca:24:07:79:f4:6c:53:39:11:6d:cc:25:15:
                    67:0d:15:be:44:31:b5:c3:40:f6:d0:11:bb:22:5f:
                    6b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:33:14:4A:5D:DC:BA:22:B2:15:66:37:AB:76:27:A8:1C:EF:B7:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a36da157-b4f8-3fa1-861a-594dc015fe56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d8:ee:3a:b9:ea:0e:45:ad:59:d2:17:ae:09:23:2e:25:79:90:
         ec:be:2c:af:c9:1a:3d:c5:27:1c:ce:4d:36:d3:22:1b:7e:e6:
         ab:97:85:69:64:8a:01:48:b6:09:2f:4d:6c:ab:00:ec:40:88:
         41:2c:0d:7c:89:fb:c2:a0:f1:71:2f:fe:76:f0:e7:61:cb:65:
         1f:eb:1c:4a:6e:ff:4c:90:57:b8:ac:e5:0f:86:72:cf:8a:94:
         81:a6:0f:0f:52:a2:ab:ee:c7:d8:cf:cd:8f:4c:d5:f5:27:32:
         a1:b3:d9:69:73:e8:28:92:0b:f1:3a:9d:3b:89:9a:60:c6:8f:
         4b:d5:a4:31:22:82:dc:17:46:d0:19:55:23:b7:fd:8c:61:9b:
         f7:f0:ae:25:c5:33:32:ae:41:10:a0:5a:40:42:da:01:70:10:
         97:75:ce:d2:f3:40:6e:9a:cf:12:75:6e:8d:15:9b:6f:82:d4:
         22:a7:b6:62:78:a0:00:62:42:a0:5d:11:06:37:8b:fa:0a:b2:
         d8:4a:c8:45:c7:13:94:7c:22:a7:21:de:88:01:1b:1a:30:ba:
         cf:64:61:9d:b4:fb:ef:57:3d:60:17:77:1c:d6:2e:27:8e:38:
         c0:54:55:46:43:91:18:c9:1e:38:64:34:30:da:ee:e5:09:4e:
         da:c3:cd:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:48:27 2025 by rpki-client