Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/884e19ff-f655-3f4a-8e03-25fdb0a0d273.roa
File:                     884e19ff-f655-3f4a-8e03-25fdb0a0d273.roa (raw, json)
Hash identifier:          RrLLZc2K+ClML6yLsT8g8bqynjs8vNJIBkdms4j5fUg=
Subject key identifier:   26:DF:FB:7B:9B:A3:FD:C4:67:9D:0D:C7:78:B3:8D:6B:86:DB:E4:6C
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584A904B98BDB1E5F638E08E7980
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/884e19ff-f655-3f4a-8e03-25fdb0a0d273.roa
Signing time:             Fri 18 Jul 2025 22:09:29 +0000
ROA not before:           Fri 18 Jul 2025 22:09:29 +0000
ROA not after:            Thu 16 Oct 2025 22:09:29 +0000
asID:                     14114
IP address blocks:        157.133.60.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:4b:98:bd:b1:e5:f6:38:e0:8e:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Jul 18 22:09:29 2025 GMT
            Not After : Oct 16 22:09:29 2025 GMT
        Subject: CN=252e6f64-3a43-4c51-9f38-b4c302f842f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:af:e5:2f:f9:23:1b:31:26:ac:15:d7:66:a3:
                    33:bc:c4:6a:50:ab:32:bc:55:04:b0:68:b9:de:65:
                    3c:f4:bf:f0:97:0e:4d:d7:6b:a2:42:8f:f0:af:c4:
                    d2:83:e3:19:98:7b:ca:48:10:04:1e:5b:23:8d:87:
                    27:79:6f:e0:7f:d1:65:58:3b:9c:65:b9:47:e7:7f:
                    ca:ce:fc:f7:2d:a5:46:02:b7:f1:f0:10:6e:f1:93:
                    7f:0b:be:77:20:d3:ee:08:b8:f0:a7:35:26:6a:c9:
                    d5:f9:f6:58:3a:94:00:c0:f2:48:eb:24:85:ee:4d:
                    44:4f:79:73:e0:ef:61:70:5e:00:0e:10:75:65:9e:
                    90:50:9d:41:04:97:31:e4:1a:be:67:f3:f8:50:34:
                    b4:97:9f:8a:70:22:53:c5:93:1e:4a:c2:6f:01:00:
                    06:8d:bd:a2:f4:81:e0:f2:ea:28:e8:72:a5:c0:3d:
                    c8:de:26:a2:75:2d:c1:37:ee:cf:6b:9c:10:9d:3f:
                    10:80:99:17:2e:71:4a:ef:4a:fa:72:27:33:52:8c:
                    84:3d:c2:ea:f5:6b:7b:60:74:e5:7a:1f:c6:5f:10:
                    0b:57:ac:23:bb:0c:3c:c1:bb:b3:fb:ed:b6:18:ef:
                    df:6e:e6:e7:7c:c7:87:b2:e1:96:a4:03:12:e0:c3:
                    0a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:DF:FB:7B:9B:A3:FD:C4:67:9D:0D:C7:78:B3:8D:6B:86:DB:E4:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/884e19ff-f655-3f4a-8e03-25fdb0a0d273.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.133.60.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:22:52:6c:a0:87:ea:f6:2f:10:3f:a0:a5:58:28:d2:bd:ed:
         98:06:31:da:cc:b2:c5:a2:f4:48:e1:f1:b5:ff:4f:8c:cc:f2:
         86:5f:56:94:5e:15:8b:0e:b1:a9:73:cc:3c:ac:59:fd:73:25:
         07:61:45:30:de:d6:8f:d5:d6:ee:d6:e7:7d:8b:2a:5f:00:ae:
         58:3b:f0:60:ad:38:dd:f0:5a:7a:bb:3e:35:20:e1:5c:ac:4f:
         d1:d4:90:e0:ac:cc:b1:0c:1a:36:e8:9a:b9:5a:d4:da:83:00:
         48:94:62:41:dd:10:02:65:b9:56:21:ba:5b:df:44:16:b8:72:
         bb:15:95:57:34:1c:f9:7f:f3:65:1b:9b:4a:a5:ec:30:3c:f9:
         f7:fd:57:bd:01:76:69:a8:1a:7b:da:22:35:1c:a9:65:76:78:
         52:7f:57:4a:eb:42:e2:09:99:75:bc:3c:a0:37:7a:68:f9:cd:
         e2:a7:71:3a:43:31:37:6e:33:ae:b4:7d:de:92:57:b8:e0:18:
         a4:ed:57:77:ed:ac:4c:33:f9:cd:dd:28:cc:e8:c6:65:91:fc:
         46:73:08:c9:49:1d:87:59:e0:1a:97:73:85:84:ed:a2:83:75:
         35:c6:e5:7b:61:01:b6:5e:13:b2:c4:1e:96:ad:49:84:36:fe:
         d9:10:0d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 03:06:48 2025 by rpki-client