Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/ef1e4110-b1ac-33d7-98d6-4e76bf66126d.roa
File:                     ef1e4110-b1ac-33d7-98d6-4e76bf66126d.roa (raw, json)
Hash identifier:          v4uH80eT32CIAvd1KHKvHBS6yWAJfobOoHrspJmTYcM=
Subject key identifier:   FB:B7:B0:7D:2F:18:4C:BA:33:0D:E3:3A:3D:0C:84:4D:65:93:5B:AA
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584A904B6DE2AA7B22655350D700
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/ef1e4110-b1ac-33d7-98d6-4e76bf66126d.roa
Signing time:             Fri 18 Jul 2025 22:09:09 +0000
ROA not before:           Fri 18 Jul 2025 22:09:09 +0000
ROA not after:            Thu 16 Oct 2025 22:09:09 +0000
asID:                     14114
IP address blocks:        157.133.48.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:4b:6d:e2:aa:7b:22:65:53:50:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Jul 18 22:09:09 2025 GMT
            Not After : Oct 16 22:09:09 2025 GMT
        Subject: CN=a9627606-5645-4d68-8f39-50c36c0305b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a8:4a:79:6e:d1:15:6d:3d:7d:13:fe:80:14:
                    13:67:35:6d:bd:38:f3:6d:6f:b3:5d:d0:6a:01:9e:
                    f6:4b:3e:c6:bc:d8:59:be:73:3b:49:ed:38:6d:c2:
                    94:e3:7c:22:65:59:01:d9:d2:33:b2:3b:ee:8f:1f:
                    19:a8:3b:cc:1a:9c:7d:11:1a:d5:a7:7b:e7:d9:a1:
                    c0:54:b8:ac:e1:61:d9:fa:34:d4:bb:b3:fd:15:c2:
                    1d:e2:0f:56:e6:0f:7b:2e:4d:d6:85:42:12:e3:e6:
                    ac:fb:d3:b6:3f:7c:5d:26:49:4f:0e:e7:c5:4f:5d:
                    dd:1b:5c:54:4b:ff:74:4e:44:7b:eb:a7:16:43:73:
                    2e:53:fc:6c:fd:65:a3:4a:d5:e1:69:0b:34:07:12:
                    2b:3a:28:b9:4c:b4:a7:eb:2a:db:5a:77:22:0e:b1:
                    6b:4a:0a:de:10:90:96:64:81:e5:3a:8a:77:e6:91:
                    0b:8c:e8:92:66:06:6e:89:6f:ba:8d:a7:fb:79:54:
                    96:5b:a0:7e:34:c8:3d:d5:06:33:ee:40:f5:8b:01:
                    74:7f:68:70:63:79:f4:0e:02:83:21:be:79:6f:09:
                    62:84:6e:e4:c5:37:9a:54:c5:b5:65:f6:f0:00:d6:
                    4f:06:17:c5:4e:42:4b:74:8d:b1:bf:e7:2c:b3:e9:
                    0b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:B7:B0:7D:2F:18:4C:BA:33:0D:E3:3A:3D:0C:84:4D:65:93:5B:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/ef1e4110-b1ac-33d7-98d6-4e76bf66126d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.133.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:48:7a:b4:9d:0d:12:59:14:56:b6:82:b7:a5:10:53:a4:b1:
         fc:12:06:7a:bc:22:11:6e:fc:de:19:df:c4:4f:97:4b:bf:1d:
         07:e0:9a:50:a7:f0:e4:2b:7e:be:43:c1:dc:a6:90:63:da:67:
         07:17:5b:89:d0:6e:14:10:3a:a9:9a:18:98:dc:f9:5b:04:e6:
         52:5d:75:0e:9d:2e:e2:fa:0f:42:5a:0b:37:83:9b:cc:31:c3:
         dd:d7:2b:c9:da:11:7e:dc:d8:eb:e7:06:6a:6f:97:4c:ac:e5:
         f4:6f:c4:30:8e:52:4a:7d:8d:fb:10:c0:55:85:37:bd:fb:ea:
         33:6e:f2:9d:05:99:bc:1b:9a:55:bc:ee:4f:7d:72:51:bd:cd:
         ab:1f:d7:f4:bf:1f:a5:31:ca:ee:b3:47:9d:9a:27:c1:2b:f6:
         d7:12:d8:62:6e:15:3d:c9:ef:0b:b1:17:3d:1d:2e:d6:2f:6b:
         e1:1c:1d:d9:e8:6b:15:f1:d4:b9:0d:dc:8f:1e:98:df:a6:b1:
         fd:fc:b0:e9:bb:b4:ef:8a:b8:61:2a:dd:2d:89:ad:ba:d1:0a:
         8e:f0:49:1a:70:21:fc:3c:a5:f4:69:3b:30:88:d3:a0:57:ff:
         d2:fe:80:16:a9:7d:af:27:04:1d:fa:3a:ef:8c:c9:06:54:b9:
         74:1f:bb:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 03:05:42 2025 by rpki-client