Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/06cd454d-7017-33fc-ab7d-06340b5d496c.roa
File:                     06cd454d-7017-33fc-ab7d-06340b5d496c.roa (raw, json)
Hash identifier:          RqWIuJ9quURFyJJ443T6N+OrGyBN/SVraHV/zzZDbNQ=
Subject key identifier:   F7:B1:BF:20:65:AB:82:72:DA:31:3D:66:F4:BF:DC:D0:20:69:61:5C
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584969C0CCCD0722D93D49937C60
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/06cd454d-7017-33fc-ab7d-06340b5d496c.roa
Signing time:             Fri 04 Apr 2025 10:02:10 +0000
ROA not before:           Fri 04 Apr 2025 10:02:10 +0000
ROA not after:            Thu 03 Jul 2025 10:02:10 +0000
asID:                     35039
IP address blocks:        157.133.170.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:69:c0:cc:cd:07:22:d9:3d:49:93:7c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Apr  4 10:02:10 2025 GMT
            Not After : Jul  3 10:02:10 2025 GMT
        Subject: CN=04555ab4-81f4-459a-81ea-3bef9fc74fb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:1a:93:60:2d:db:23:c9:dd:fe:2c:0f:0a:bd:
                    58:d3:5d:34:95:18:49:60:58:13:f5:76:bd:00:23:
                    88:0a:10:16:c0:87:38:59:2d:85:ad:49:23:4c:24:
                    6d:60:f2:01:27:b1:be:6f:76:24:32:47:a8:ff:e2:
                    cf:7a:17:7d:49:c0:75:4c:08:3e:66:91:bf:51:ab:
                    d5:5c:43:f1:9a:28:ca:0e:29:4e:a1:79:71:37:b5:
                    d0:ab:e4:cd:b4:a8:cb:fc:1c:69:0f:fb:c7:29:d5:
                    20:20:9e:2b:1c:b1:34:fe:59:71:0c:ec:fe:4d:c5:
                    9d:01:da:06:a6:aa:a2:4e:78:6c:9f:dd:d0:26:26:
                    d7:6f:c7:fd:4a:44:bc:89:90:37:fb:91:ed:14:d3:
                    28:b3:31:72:ee:08:4a:3d:3e:13:15:69:fd:b4:81:
                    66:4c:12:96:e1:ac:1b:0c:bd:94:a8:8d:3b:1a:9a:
                    b4:58:2b:8b:7b:c4:6d:2e:3a:2b:3a:bc:b6:c5:2c:
                    bf:f9:e1:e5:db:3d:89:8f:b9:0e:ef:41:6c:21:56:
                    17:1a:83:ac:db:c4:c3:6d:42:81:a0:72:a7:fd:43:
                    40:6a:56:88:55:41:0c:f1:af:3b:57:05:1f:92:01:
                    18:ab:c7:0d:ae:e3:1b:f2:65:20:22:0a:6c:8e:93:
                    2f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:B1:BF:20:65:AB:82:72:DA:31:3D:66:F4:BF:DC:D0:20:69:61:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/06cd454d-7017-33fc-ab7d-06340b5d496c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.133.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:ea:d7:89:82:40:92:43:f9:95:44:8f:d7:fa:32:c0:98:91:
         a0:a3:30:0b:69:73:7b:a8:08:5c:3b:4c:14:00:7b:17:96:c9:
         af:82:19:ee:a6:6c:06:a9:ed:b2:b5:de:aa:d1:9d:8c:64:2c:
         c9:f9:b7:21:13:bb:20:39:44:58:94:6f:a0:ae:9a:c2:93:27:
         d8:38:38:dd:6e:2e:53:d4:59:64:e7:0f:0e:1c:53:08:a6:8e:
         f3:8c:b0:5c:92:41:7f:81:1f:45:43:ca:ca:7e:d4:94:ce:b6:
         7b:8c:b5:3f:14:d0:ea:00:e3:b2:c6:07:e1:98:5a:96:29:71:
         6c:71:2c:81:a0:36:1b:9e:ac:3c:43:d5:a5:04:69:a0:02:a1:
         16:06:dc:e0:76:3a:45:43:b4:22:b4:4a:b8:d2:e4:2d:80:29:
         dd:68:08:9c:c2:83:63:d7:74:2d:17:11:9d:80:97:97:22:ba:
         59:13:a1:cb:2e:08:72:e0:d6:33:77:60:79:7e:95:b4:8e:4c:
         d2:f9:b7:1d:f2:fe:13:27:08:8a:bc:21:dc:45:a0:07:31:a3:
         b1:c6:21:3e:91:a9:99:52:a3:31:0e:09:1e:8a:0a:fa:f2:f7:
         cf:80:1a:21:1b:81:61:7c:13:b3:9a:f2:07:df:9e:3f:ab:a4:
         5a:9a:f9:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:41:56 2025 by rpki-client