Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd/557b01e3-e91e-3788-b50f-a45035dbf24c.roa
File:                     557b01e3-e91e-3788-b50f-a45035dbf24c.roa (raw, json)
Hash identifier:          Mc1LsWq07nvrkqQ1neWPenTW8dEVZYfRXBmmPEUv6ig=
Subject key identifier:   CA:76:B7:C0:A3:83:96:37:D8:9B:16:E9:02:2F:0C:DA:EA:0A:BB:DE
Certificate issuer:       /CN=2c059c4e-9cb8-45ce-a71c-c3a4cf379edd
Certificate serial:       010D0C9F43285849BC74A7A0D63331B9C1BCA000
Authority key identifier: 53:EC:FD:94:00:6F:F4:F1:6B:A5:58:C8:6E:19:B4:DB:06:1C:5F:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd/557b01e3-e91e-3788-b50f-a45035dbf24c.roa
Signing time:             Sun 04 May 2025 01:00:47 +0000
ROA not before:           Sun 04 May 2025 01:00:47 +0000
ROA not after:            Sat 02 Aug 2025 01:00:47 +0000
asID:                     11821
IP address blocks:        148.59.150.0/24 maxlen: 24
                          158.51.184.0/22 maxlen: 22
                          205.201.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bc:74:a7:a0:d6:33:31:b9:c1:bc:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c059c4e-9cb8-45ce-a71c-c3a4cf379edd
        Validity
            Not Before: May  4 01:00:47 2025 GMT
            Not After : Aug  2 01:00:47 2025 GMT
        Subject: CN=249831c8-d8e9-4fd3-83e2-c9fc54549ddb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:13:d1:f1:f6:c9:b5:45:15:d5:91:26:32:50:
                    ec:f5:9f:f9:df:e3:5b:e9:1c:53:ea:59:70:75:1c:
                    9b:3d:44:5e:d8:e3:1f:ab:29:65:51:07:fe:41:9e:
                    58:fd:21:bb:a7:0b:30:58:55:f2:5d:54:11:08:e2:
                    17:c0:50:0c:c6:91:78:a0:d6:70:dd:3f:a9:ca:e0:
                    b5:07:0f:1b:a5:5e:85:8d:ac:78:09:62:0c:61:aa:
                    a7:00:28:41:5b:85:fe:af:cb:99:e5:cc:02:6a:51:
                    76:01:81:51:98:b6:76:5a:ba:f8:5b:45:a7:76:1d:
                    22:73:3c:6d:7a:ea:ad:05:5e:4f:0c:70:12:3e:b2:
                    ea:e2:c6:78:ef:23:4e:f3:a6:a9:29:7c:10:1a:28:
                    53:75:d3:cc:b9:50:1d:34:30:4c:a8:71:03:12:0e:
                    b6:b0:78:0c:f3:a0:5a:f4:8b:98:9f:61:7f:34:fb:
                    b3:4d:1f:d0:2d:4a:9f:d7:01:c1:b8:37:91:9c:45:
                    0c:48:e1:a5:9e:44:0d:f3:93:e5:05:5a:de:2f:81:
                    0b:bc:24:9e:7d:01:e3:1c:70:f3:e3:27:2f:37:b4:
                    4c:fb:ff:c1:32:9d:55:cc:7a:58:ac:4f:30:6c:30:
                    eb:13:24:8a:12:02:28:43:6f:4c:69:20:07:49:d9:
                    b0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:76:B7:C0:A3:83:96:37:D8:9B:16:E9:02:2F:0C:DA:EA:0A:BB:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd/557b01e3-e91e-3788-b50f-a45035dbf24c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd.crl

            X509v3 Authority Key Identifier:
                keyid:53:EC:FD:94:00:6F:F4:F1:6B:A5:58:C8:6E:19:B4:DB:06:1C:5F:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2c059c4e-9cb8-45ce-a71c-c3a4cf379edd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.150.0/24
                  158.51.184.0/22
                  205.201.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:44:67:23:46:1b:9b:30:88:0a:00:f1:08:4e:ef:d3:4e:84:
         c0:e9:69:43:d3:74:b1:2a:4f:25:05:b1:79:21:9d:55:ab:1d:
         18:c4:e1:64:2e:65:72:40:f1:72:13:56:50:14:2b:b6:7f:0a:
         f1:1c:30:a5:d8:5d:26:3a:b6:eb:87:e9:67:2d:de:b8:db:51:
         fe:d2:82:0d:8b:ab:da:d2:df:00:3b:0d:c9:ba:53:26:6e:7f:
         3b:3a:15:1d:b7:df:94:f0:b2:b5:1a:8b:0f:31:83:b2:7d:8d:
         c9:85:ad:5a:f8:ab:82:b8:33:08:8f:78:b8:8d:05:e8:be:8d:
         07:c5:b8:98:71:2f:f5:a1:8a:87:08:08:67:66:9f:61:8c:6a:
         ec:d6:03:79:33:da:69:f2:ec:29:fe:c8:68:61:0a:4a:b3:62:
         85:20:0e:a9:fb:f5:88:27:5c:58:ab:ff:a4:be:bb:ec:65:0a:
         dd:c2:7b:5a:62:eb:16:10:72:df:b1:1c:c3:e6:13:94:a1:d4:
         ff:33:48:33:7d:01:2a:fe:c7:d3:5e:c6:bb:bc:8f:2c:6a:fa:
         7f:37:45:00:b3:f5:cc:63:f3:c0:f4:45:7d:75:61:d5:21:14:
         5d:85:98:c0:c0:bf:9d:ef:07:2c:59:e2:f3:98:48:b4:42:2a:
         48:7c:9b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 18:57:24 2025 by rpki-client