Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ec1c2336-b834-3f09-ac95-e589569e54a7.roa
File:                     ec1c2336-b834-3f09-ac95-e589569e54a7.roa (raw, json)
Hash identifier:          VaMjf3E/Dk7OZjmJX5evR1U/Wy76ZFbQ7Ch5KPnF3UA=
Subject key identifier:   87:94:C9:BC:A8:2A:DF:3F:36:59:B5:67:14:70:CE:BF:76:B6:12:10
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584B13D6EC8D31F737CD36B98640
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ec1c2336-b834-3f09-ac95-e589569e54a7.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        157.52.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:ec:8d:31:f7:37:cd:36:b9:86:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=75c130c6-616b-406d-a5ac-ec198f66c6d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:da:39:96:9a:f3:25:ca:d8:87:8a:b1:88:5a:
                    e3:e5:ce:31:ca:4f:9d:3d:49:85:73:05:c4:f8:1f:
                    88:32:10:e0:e5:9c:35:ad:e8:fb:a5:f5:2a:0d:f5:
                    e3:2d:62:29:31:29:c8:b1:e6:37:ee:fb:b0:0d:3b:
                    ca:89:85:3d:c6:07:d5:3a:eb:3b:09:05:92:25:cc:
                    0b:a3:1c:16:eb:05:86:37:2b:87:d5:00:b7:48:f2:
                    c0:b4:00:75:27:8d:19:cc:ed:61:8f:55:69:17:07:
                    4b:f5:63:eb:31:ab:5f:4a:0f:07:8a:8e:d5:73:d1:
                    d9:62:69:66:13:6b:d8:cb:9a:07:80:05:2a:27:f1:
                    cc:23:fb:81:56:85:60:22:7f:af:8f:21:39:e9:db:
                    af:c0:0b:2b:da:e0:15:15:b5:98:05:28:93:0f:cb:
                    1a:c1:f6:06:43:05:f9:27:a3:0b:fa:20:1d:78:5f:
                    25:76:ac:6a:e7:b3:18:ab:c0:70:e2:56:be:de:3e:
                    05:b9:b9:aa:31:c8:4d:80:70:9a:b3:e3:f3:74:b2:
                    da:56:0c:87:af:ce:f1:04:01:83:ed:a5:96:3d:8d:
                    2a:af:3f:7a:c7:5b:97:31:91:98:2c:8f:3e:78:81:
                    13:c7:92:bb:77:0d:3b:be:e5:b0:e7:b0:9f:4c:c0:
                    70:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:94:C9:BC:A8:2A:DF:3F:36:59:B5:67:14:70:CE:BF:76:B6:12:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ec1c2336-b834-3f09-ac95-e589569e54a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.52.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:9c:dd:91:fe:50:58:e4:bd:d8:ab:0a:67:90:30:fd:7d:a3:
         02:9c:01:52:0b:1e:b1:7c:af:70:c6:ec:9e:60:86:9d:64:55:
         12:b3:1d:ca:ba:1e:53:74:99:56:7b:f0:91:f0:fa:aa:6c:f5:
         42:54:3b:ad:69:bb:1e:68:6a:fa:e1:55:0f:30:a0:bd:22:9b:
         24:36:e9:18:39:a6:08:e0:cb:08:a8:d9:f9:1d:dd:1b:67:0d:
         e7:56:f1:b4:21:dd:30:2b:bb:cb:db:8c:7a:47:ae:ee:ea:47:
         f3:51:25:77:f1:ac:5f:2f:4e:91:a8:e2:ba:ff:fb:44:36:af:
         67:9b:ad:a4:1d:b1:ea:25:29:02:f3:b0:08:ed:f3:7a:ef:34:
         61:5d:c8:59:ad:82:21:77:e4:53:8a:b1:ad:aa:94:9a:47:be:
         35:a0:3d:5a:93:97:e9:34:e6:8a:76:89:5c:22:cb:d5:07:e2:
         0a:2b:e9:a9:a9:25:33:c8:66:3c:04:0e:d8:e1:1b:87:86:47:
         2d:df:61:05:66:23:eb:7d:85:63:7d:62:36:7f:37:a5:ff:c4:
         f2:d6:09:43:36:f1:99:2a:26:63:7d:d8:34:2b:f0:e7:ac:36:
         dc:5d:7e:d8:0d:43:a1:6a:fd:b0:0b:b5:fa:ac:14:19:69:09:
         3e:18:46:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 05:46:08 2025 by rpki-client