Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9d0b8d7d-b0b7-39ec-8210-91463ff776ce.roa
File:                     9d0b8d7d-b0b7-39ec-8210-91463ff776ce.roa (raw, json)
Hash identifier:          DxkCTZUV8mYc+19iOzNEgZATljqqnSbzDgVmTwWGLtI=
Subject key identifier:   6C:9C:2F:40:4E:14:20:D1:C0:E8:A3:2E:03:22:EC:DD:79:BE:DF:19
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285848B4C0D7E4F941EEBDF7727360
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9d0b8d7d-b0b7-39ec-8210-91463ff776ce.roa
Signing time:             Wed 29 Jan 2025 14:00:51 +0000
ROA not before:           Wed 29 Jan 2025 14:00:51 +0000
ROA not after:            Tue 29 Apr 2025 13:00:51 +0000
asID:                     54113
IP address blocks:        157.5.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b4:c0:d7:e4:f9:41:ee:bd:f7:72:73:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jan 29 14:00:51 2025 GMT
            Not After : Apr 29 13:00:51 2025 GMT
        Subject: CN=12b024c5-73c6-4040-8fdc-556ec88af7b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:42:a8:be:4f:85:38:d2:54:a1:f2:eb:7d:e4:
                    5c:bd:79:01:c8:e0:71:cc:ef:60:1e:17:bf:d8:1e:
                    1c:29:ab:61:8e:15:61:63:34:20:8c:27:7b:89:3a:
                    0a:c0:4e:17:8d:9f:c7:0d:51:04:32:cb:e0:50:77:
                    02:af:43:2e:7d:3d:9a:a4:69:ab:52:f1:3c:1c:53:
                    79:4d:5d:9c:a7:22:aa:fd:45:55:34:a1:d0:88:45:
                    e4:e9:dd:30:6a:65:af:f2:27:72:19:7e:f0:9b:a1:
                    ea:3b:17:86:83:68:a3:f6:1b:1b:3f:27:23:a3:7d:
                    54:2e:69:f1:08:db:d5:93:57:6a:ab:29:78:07:a8:
                    11:b3:e8:84:38:38:58:1c:86:3c:d0:3b:95:ad:a4:
                    21:b9:a0:dd:81:f8:05:24:1d:dc:d5:65:cd:73:ca:
                    4b:4f:eb:15:a7:fd:05:31:de:ae:60:c0:91:08:c4:
                    82:e3:b0:e4:09:6e:d7:55:9b:4e:aa:3c:0b:7c:03:
                    50:dc:a4:b4:b1:f3:0f:ea:0c:f4:7a:93:6b:7d:e7:
                    70:40:52:e2:c4:07:4c:1a:0f:7c:2a:b0:e0:48:6b:
                    4d:59:87:ad:1d:9b:58:35:27:cd:f4:a1:b2:9a:da:
                    ee:56:f9:b9:56:6c:b8:bd:4c:21:0c:85:27:ca:2a:
                    d9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:9C:2F:40:4E:14:20:D1:C0:E8:A3:2E:03:22:EC:DD:79:BE:DF:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9d0b8d7d-b0b7-39ec-8210-91463ff776ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.5.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:e4:35:eb:b3:23:d7:c5:b9:a8:5a:4c:23:16:f7:77:a5:ce:
         6b:8c:19:f0:cd:4c:1a:74:78:48:b7:fc:24:a2:3c:7e:53:d7:
         2c:76:0d:8b:c1:a9:aa:63:43:46:4a:bb:f6:f9:94:e9:cd:c2:
         20:5b:cf:d1:e1:0c:b1:6e:15:f8:0f:26:75:6f:84:18:ed:c1:
         35:6a:6b:ad:08:db:de:e3:98:48:94:46:e9:fb:ce:cc:f9:f9:
         f4:3c:f0:5c:3c:46:dd:64:52:fc:f9:63:61:ed:10:f5:3d:21:
         f0:02:9b:86:1d:d2:80:a6:fa:04:48:41:41:06:9d:be:d0:31:
         39:de:a0:cc:f2:3f:ca:8e:d2:25:24:36:45:8f:ba:ac:9f:2d:
         bd:93:c8:4c:fc:e9:4b:a1:b4:c0:92:9f:9a:70:4e:f6:9d:cb:
         c5:05:ed:ce:38:35:46:dc:c0:0e:83:2a:9e:39:17:2c:5a:97:
         2e:a7:01:f5:04:51:7e:c9:16:d0:7c:e7:95:c3:e6:b4:3c:27:
         08:1e:33:69:35:64:93:48:e3:fd:65:94:21:78:83:e6:43:20:
         f3:27:39:7b:c9:eb:a5:29:c0:ff:46:74:e1:50:5f:ea:66:1e:
         07:5d:a4:c3:a9:e5:fb:7f:25:2b:e7:a2:fe:2d:b2:7d:80:72:
         1b:2c:55:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:11:11 2025 by rpki-client