Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a31e6f6f-6996-3a61-9b79-652e6a5e7cc7.roa
File:                     a31e6f6f-6996-3a61-9b79-652e6a5e7cc7.roa (raw, json)
Hash identifier:          vTBzOjeGXvRbmDXQLkjK0NQ7Q7SHigz1dFHNuQhoVHM=
Subject key identifier:   28:70:84:F7:6D:57:E7:84:58:5A:CC:B9:2C:E4:7E:0E:D7:A1:66:6A
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285848B4C0D904D533EE94078FF940
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a31e6f6f-6996-3a61-9b79-652e6a5e7cc7.roa
Signing time:             Wed 29 Jan 2025 14:00:51 +0000
ROA not before:           Wed 29 Jan 2025 14:00:51 +0000
ROA not after:            Tue 29 Apr 2025 13:00:51 +0000
asID:                     54113
IP address blocks:        157.5.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b4:c0:d9:04:d5:33:ee:94:07:8f:f9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jan 29 14:00:51 2025 GMT
            Not After : Apr 29 13:00:51 2025 GMT
        Subject: CN=4fc7396c-b3ff-46f9-9e12-baaf717f2fee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:25:64:7b:32:a7:94:54:96:ef:a9:f7:4f:6a:
                    23:01:25:d3:29:3c:14:7b:83:1d:3a:15:8e:a9:50:
                    a9:6a:33:cf:10:1b:cf:01:d9:6a:2d:be:2f:4f:fd:
                    e3:1d:77:24:8a:3d:db:0c:65:ef:b9:d5:57:c6:34:
                    dd:62:dd:f7:4a:db:e8:54:eb:14:c9:d6:b8:0d:64:
                    87:37:b6:b0:cf:cc:19:d9:f2:cc:f3:0c:7e:47:49:
                    9d:6d:74:01:d9:5a:15:00:47:3a:1d:ea:de:87:40:
                    00:22:cf:24:a9:d7:14:31:33:96:02:02:66:60:b4:
                    74:ae:50:6c:36:66:98:28:dc:f7:3e:61:43:c2:b6:
                    5e:75:0f:55:c4:87:b2:d0:d0:19:e3:b9:e7:2a:d4:
                    46:a2:db:0a:18:25:e0:73:7c:e3:ed:57:b8:a2:0e:
                    4f:fa:17:03:cc:5f:32:9a:02:75:1d:14:c1:a7:82:
                    99:35:ce:8f:5a:49:8b:9c:f5:67:63:14:05:ea:2f:
                    f2:62:3b:40:bd:3b:f3:ff:05:b5:00:35:9a:d8:80:
                    7d:9a:03:ea:90:65:5a:09:0c:c8:66:4b:47:a6:f9:
                    6b:78:96:17:80:8c:46:d6:ae:3b:0f:e8:99:39:58:
                    b5:9b:aa:12:0c:d7:94:47:df:d0:79:47:5c:4a:15:
                    02:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:70:84:F7:6D:57:E7:84:58:5A:CC:B9:2C:E4:7E:0E:D7:A1:66:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a31e6f6f-6996-3a61-9b79-652e6a5e7cc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.5.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:cd:1f:05:f1:96:a4:e1:5f:54:33:99:2a:a6:9e:dd:05:ea:
         34:57:75:29:f1:c1:40:d6:a2:cc:df:f8:d9:f9:9b:5e:3c:92:
         25:4f:57:4f:b2:8d:e7:07:f2:1e:23:c7:b4:71:dc:bd:88:b0:
         07:5e:b8:d4:04:0a:b8:6d:10:aa:ed:50:8a:97:0e:3d:97:12:
         64:6f:1c:f1:91:c3:35:f7:7a:3c:f7:02:3d:77:f8:ba:1e:3e:
         20:c4:2d:95:1f:de:65:62:5b:6f:ab:e2:81:7d:72:6d:30:ba:
         1f:b8:a5:2e:be:7c:00:f1:b7:ac:a8:37:75:44:ed:73:05:c1:
         db:f5:dd:84:59:ab:79:09:f4:22:4f:97:1e:f6:ef:c4:47:20:
         cf:46:f1:7a:91:d9:98:cc:cb:c9:aa:1f:5a:2d:76:aa:45:c2:
         3f:ed:fa:37:19:0c:c8:81:d8:a5:a5:2e:a6:00:21:13:28:a9:
         c6:56:83:f7:95:2c:99:3e:0b:01:c6:3e:c3:b0:dd:32:92:99:
         bd:64:50:9e:dd:91:a1:a5:5b:53:6b:48:51:42:93:1c:30:8b:
         82:94:f8:48:7e:ac:0f:73:71:47:7f:2e:cc:55:3e:c6:0d:39:
         a2:21:19:4f:6b:a4:d0:1f:1b:05:2d:be:88:bf:6d:2c:26:2d:
         c9:a2:09:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:39:23 2025 by rpki-client