Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a73ccbb9-7e13-35db-bb31-0ca5d43d83d0.roa
File:                     a73ccbb9-7e13-35db-bb31-0ca5d43d83d0.roa (raw, json)
Hash identifier:          SxoX9LpgJfSGDTkC5eib5SypcA0hVOYoChto/zpOkfI=
Subject key identifier:   DB:BC:B6:74:F7:6A:3D:D7:3D:F7:68:12:94:C8:32:BB:63:B4:F3:BD
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285848B4C0D9BB011DCDBDA9A24600
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a73ccbb9-7e13-35db-bb31-0ca5d43d83d0.roa
Signing time:             Wed 29 Jan 2025 14:00:51 +0000
ROA not before:           Wed 29 Jan 2025 14:00:51 +0000
ROA not after:            Tue 29 Apr 2025 13:00:51 +0000
asID:                     54113
IP address blocks:        157.5.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b4:c0:d9:bb:01:1d:cd:bd:a9:a2:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jan 29 14:00:51 2025 GMT
            Not After : Apr 29 13:00:51 2025 GMT
        Subject: CN=7ffedc78-a6a8-4c37-ae6e-4ca309e13424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:2d:8e:eb:64:a8:f5:7a:dd:ca:8b:0f:de:14:
                    33:7e:43:84:de:30:e0:ba:89:07:8f:f7:41:82:67:
                    6e:1d:8b:de:02:a4:26:aa:92:c9:ef:f5:3a:eb:06:
                    cd:de:26:bd:ac:8e:08:00:61:e9:18:62:31:d3:70:
                    dd:43:b1:26:e4:4a:65:7d:f2:89:3e:c7:bc:9a:4a:
                    c2:4a:61:2c:41:06:fb:53:d7:fa:c4:58:67:05:e4:
                    94:82:fb:e6:23:fa:de:a4:d6:00:23:2f:52:28:24:
                    f6:03:83:85:63:a3:e3:f3:82:88:35:16:8a:f7:dc:
                    30:1e:4e:9e:6e:72:32:96:f6:ad:2d:89:4c:60:3b:
                    be:18:db:70:cb:a2:c2:19:23:f5:f9:62:b1:b2:45:
                    61:97:7e:f9:4f:53:51:5e:56:92:9e:8c:05:f6:e6:
                    fa:39:10:43:24:2f:5c:7a:cf:f8:c7:df:c0:21:e6:
                    ee:26:67:04:27:ee:4f:dc:21:35:b6:b4:bf:f7:cc:
                    ad:0b:01:a6:ba:43:62:d5:99:3b:c9:d6:9e:51:36:
                    4c:2a:00:91:57:99:9d:d3:91:44:28:a2:bf:76:21:
                    3d:9a:e6:a8:f4:a3:4b:b7:ec:d5:88:71:1c:6a:de:
                    db:a4:dd:0e:73:14:dc:72:31:60:e2:b7:3d:0f:00:
                    4e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:BC:B6:74:F7:6A:3D:D7:3D:F7:68:12:94:C8:32:BB:63:B4:F3:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a73ccbb9-7e13-35db-bb31-0ca5d43d83d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.5.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:b8:29:d2:2d:e9:36:27:2e:f7:77:d7:26:bc:40:d6:3d:b8:
         e9:5a:19:01:51:7f:1a:67:ce:05:c0:72:0d:c9:f6:80:8b:94:
         df:bc:08:fd:48:00:fb:03:ea:7c:cc:a6:ee:fa:a3:4c:22:39:
         5b:76:38:70:c6:70:68:6d:dc:01:c7:f5:2b:b8:5d:8b:f6:96:
         56:14:16:2c:74:f6:c4:1d:a0:27:3e:2e:5f:d3:5a:79:47:81:
         c8:29:bb:a2:77:35:72:25:c8:13:b1:6d:30:3a:a9:8b:52:45:
         df:3d:27:58:bf:3a:0e:73:fd:1e:cb:f9:c3:9a:da:00:d6:c6:
         62:aa:9e:fe:bd:36:9d:a1:f5:58:b7:8b:a6:cc:e8:ca:69:06:
         47:e2:8b:ec:7c:65:8d:da:63:a2:4c:3b:9d:8b:87:e4:ae:2e:
         d5:ce:f4:33:19:45:ea:02:07:03:77:96:e9:6e:9c:ba:dd:43:
         8d:7a:19:e8:2c:0b:7a:f0:68:29:44:c9:0c:7f:da:e6:44:63:
         f9:aa:86:68:cf:5a:bd:7f:71:60:cd:16:4d:06:a5:91:16:90:
         fe:54:dc:5e:a9:c8:0b:dc:31:e4:e4:13:f0:4a:93:5a:d5:68:
         86:b0:a1:6b:db:94:ae:72:e3:f6:9c:83:f5:87:45:35:70:31:
         f4:f2:ee:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:38:44 2025 by rpki-client