Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/74cbefc5-3520-34d1-9e79-a5a38a067c1d.roa
File:                     74cbefc5-3520-34d1-9e79-a5a38a067c1d.roa (raw, json)
Hash identifier:          HgW5hTKqjc9I046QPIBL55gBNoSkZv2lYC9UjxeCnkI=
Subject key identifier:   4E:A5:5D:01:0E:58:A8:3E:15:19:B6:53:09:19:59:25:92:1F:75:A5
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584B13D6EE5CB48A657F317956C0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/74cbefc5-3520-34d1-9e79-a5a38a067c1d.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        157.52.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:ee:5c:b4:8a:65:7f:31:79:56:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=834e6c9a-2a90-414d-bc91-20355b51ebfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:42:7d:ba:6f:2c:a7:1b:3c:68:f3:a5:28:36:
                    40:b2:41:c6:99:74:c3:ed:91:2d:47:7c:05:06:87:
                    d1:b9:0f:2e:16:10:2a:70:3c:e2:89:86:35:5b:d4:
                    9a:a1:ba:50:0c:ee:70:8a:7f:06:3b:86:4b:a0:9d:
                    98:d2:dc:5e:71:df:f9:52:2c:c0:19:1e:39:c3:f1:
                    c7:fa:6d:16:73:b9:dd:c1:55:f4:d3:ba:ff:e8:78:
                    e4:e4:96:16:a0:36:d6:0c:8e:a8:48:48:3a:74:f4:
                    0d:ce:0f:68:45:3d:6f:32:10:f2:f1:9e:5d:a0:ce:
                    d7:07:ec:b0:95:4b:7f:85:7c:e8:7d:d9:99:7b:ff:
                    c5:d1:55:dd:3e:05:af:ab:fe:58:3b:09:e3:3c:33:
                    95:a3:98:ae:7a:e7:45:dd:c3:60:9a:27:50:0b:19:
                    da:97:57:7f:52:5d:71:d1:21:9e:7f:b0:fa:71:96:
                    d8:68:d9:d4:97:54:b2:97:6e:95:42:a3:e3:83:2e:
                    ff:ea:6e:99:ed:07:2d:0d:ed:2c:3f:5f:b5:1b:d8:
                    ad:97:2a:20:16:97:a4:cb:a4:5a:6f:52:94:17:29:
                    75:51:77:38:be:74:9a:28:c3:91:f9:17:de:8e:7b:
                    c6:73:6e:98:17:75:52:be:5d:0a:6c:ce:2e:5c:6b:
                    77:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:A5:5D:01:0E:58:A8:3E:15:19:B6:53:09:19:59:25:92:1F:75:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/74cbefc5-3520-34d1-9e79-a5a38a067c1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.52.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:62:d7:57:d9:09:95:22:78:ff:72:f8:cd:b5:7f:3a:9d:95:
         d4:06:74:da:ad:b5:bf:62:ae:c3:a3:3a:5a:ac:40:27:9c:c7:
         20:7c:a7:b9:ec:6b:62:7f:c2:d0:7f:ef:28:75:3f:ae:12:e7:
         da:d9:78:d6:9e:4b:31:8d:65:6b:11:67:90:f6:46:7f:f6:e8:
         0b:11:6b:b3:53:3d:f8:ae:9e:78:4f:b3:9b:61:85:5a:b5:dc:
         91:65:ff:10:4d:9d:ec:5e:cf:49:8a:9d:4f:13:1a:88:7c:df:
         bc:37:0f:ad:79:ad:58:07:ff:02:30:9b:27:c4:5c:5e:57:71:
         94:48:d0:6d:72:ba:a9:66:74:c5:e5:6b:3f:0b:5d:60:1c:9b:
         6d:d3:35:da:0f:f5:de:66:e5:62:42:93:62:4f:f8:65:c0:f8:
         c3:0f:54:8f:58:d5:35:48:7b:4a:41:5c:fe:1a:18:6d:8c:03:
         98:83:73:db:d7:cf:a1:08:76:17:57:bf:6d:13:1a:a2:64:15:
         0e:0d:ac:d4:a9:5a:b7:58:8b:12:87:b0:2d:41:c8:3a:2b:2e:
         7c:51:5c:8d:26:88:fe:18:66:da:d7:25:26:62:81:e6:50:37:
         aa:55:24:88:6d:0e:74:74:a3:cc:fc:63:6f:ec:40:7e:e1:70:
         84:6a:1a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 05:43:22 2025 by rpki-client