Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a6dd23fe-cefe-3ce8-8929-e330261fab09.roa
File:                     a6dd23fe-cefe-3ce8-8929-e330261fab09.roa (raw, json)
Hash identifier:          N+DQRGfkb/dxP7uQldm2ch00lqht1/Vi/qCJfzl68XE=
Subject key identifier:   94:B3:EB:96:44:4E:EB:75:9A:D6:8C:BB:58:4C:E6:04:09:3D:15:D3
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285848BFEBC5C8820D93EFDC014300
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a6dd23fe-cefe-3ce8-8929-e330261fab09.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     54113
IP address blocks:        157.5.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:c5:c8:82:0d:93:ef:dc:01:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=41d0c2a8-1f34-40a3-a392-76f0701d3fe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d1:5c:2c:83:10:f2:10:2b:52:18:78:3e:d2:
                    64:79:e0:bc:e9:1d:24:d1:eb:50:0e:ce:53:e2:d6:
                    d2:d1:e7:93:3d:14:57:b2:35:60:9e:14:82:8f:08:
                    ca:95:03:93:cb:47:0b:57:46:da:76:ee:e4:65:ed:
                    6f:f2:a0:0b:23:ed:ad:53:71:b3:25:c8:52:d9:da:
                    a5:e2:c8:7d:0e:66:f5:7b:63:6f:9c:17:a2:4a:12:
                    b5:03:ca:35:d0:62:fb:c4:81:86:2f:68:ed:62:81:
                    b6:ff:c6:dd:5d:c0:a3:a6:24:12:dc:4b:22:b1:33:
                    fc:06:78:9c:fe:25:8a:a2:9d:c7:0d:39:0e:f7:ba:
                    4b:be:32:e0:c1:f7:50:07:05:42:70:1b:c7:0f:cd:
                    2f:26:f3:34:21:29:40:a3:da:a2:d6:7d:62:30:7c:
                    50:45:fc:6a:af:2d:b1:30:48:fc:6b:f8:05:d3:a2:
                    11:64:6e:9f:30:32:5a:96:3d:65:63:33:5f:e1:87:
                    81:8f:58:f5:c5:23:6f:68:a7:f4:3c:56:c9:4a:10:
                    85:4e:57:c5:a5:70:fb:ca:f0:3b:59:de:47:85:3b:
                    7f:0a:71:6b:a0:11:d3:bd:30:3d:15:06:4f:ed:2b:
                    ff:86:4f:be:d6:80:14:b8:ff:21:b2:f9:3d:b6:9e:
                    e0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:B3:EB:96:44:4E:EB:75:9A:D6:8C:BB:58:4C:E6:04:09:3D:15:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a6dd23fe-cefe-3ce8-8929-e330261fab09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.5.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:e7:ef:fd:69:be:4c:26:e4:ae:14:16:81:bb:0b:e7:aa:44:
         32:6c:af:16:a3:ca:c1:26:0a:1f:35:bb:62:bc:03:40:76:43:
         da:98:7c:8d:cd:cf:2c:f9:1e:5d:4a:e2:f9:d9:c7:73:24:0b:
         70:e0:80:31:96:04:c1:6e:d3:f7:eb:38:61:af:76:a3:f0:99:
         3f:2d:75:56:8a:27:62:02:b7:e1:2d:72:99:29:37:a8:06:24:
         b2:4c:a8:c4:64:ba:72:9c:f4:b8:6c:40:6f:6d:1e:b0:68:19:
         eb:26:a5:ef:1b:4b:fa:5a:73:62:7a:6e:48:19:ee:3d:3b:eb:
         b5:ca:a7:5d:90:04:85:ea:55:e7:5c:50:7b:65:bd:ec:4d:0d:
         43:a1:14:b8:b7:14:a3:8d:54:f4:00:b1:59:5e:f2:bc:02:a7:
         67:d2:35:2e:c8:f0:14:37:fd:ac:94:3b:a1:b4:f3:70:25:3d:
         56:6a:f5:56:bf:23:84:dc:60:4a:f1:6b:c2:07:b0:ff:59:db:
         15:c4:96:8b:a0:e0:cd:49:7c:87:1f:28:1a:a7:cd:f2:43:f9:
         f1:7f:bb:57:d3:14:4a:a3:be:ee:91:ec:c5:24:b2:a8:5d:74:
         60:41:7f:5c:27:a6:44:54:a0:0d:a9:5c:31:b7:78:68:57:71:
         92:77:1d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:48:55 2025 by rpki-client