Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b5847d5c-4b8e-332c-a9a4-8112e58d52d9.roa
File:                     b5847d5c-4b8e-332c-a9a4-8112e58d52d9.roa (raw, json)
Hash identifier:          BMXoOivHH4LKCUuc+hXGZA/ZBkxUd9sT/hX4m4yTSpg=
Subject key identifier:   00:33:A7:57:62:AD:76:80:60:A1:2D:1A:7D:19:6D:63:5C:97:53:BE
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584A7350A30E92E82E7419CF2FC0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b5847d5c-4b8e-332c-a9a4-8112e58d52d9.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     54113
IP address blocks:        157.5.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:a3:0e:92:e8:2e:74:19:cf:2f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=7bef9748-a542-4457-a722-4bcb61803145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a5:b8:9e:02:b3:80:72:78:2f:a5:2a:8a:3b:
                    8c:ac:95:04:4b:5d:1f:4a:d2:27:49:45:5f:3d:f4:
                    fb:3f:d7:55:9b:b1:bc:fa:d0:d8:4c:f3:11:7e:2c:
                    d3:f3:29:e1:16:44:f1:3b:18:de:ed:8a:60:67:d6:
                    f5:a6:cd:98:43:c9:8b:ed:c0:8a:f1:ea:7f:b1:49:
                    94:87:3f:ad:fc:46:d1:4c:0e:1e:21:5c:80:15:34:
                    25:63:e0:3a:d1:74:51:aa:2c:cb:d7:8f:90:b4:3c:
                    48:70:d9:04:b0:9c:8a:1c:23:bb:40:fd:ec:9d:81:
                    9a:f0:e5:d2:f7:fc:a2:3d:68:42:03:5c:be:fa:e8:
                    cb:bf:0d:01:bd:c5:a4:0d:e0:ad:d9:21:08:b0:8a:
                    d5:1e:b0:af:3f:98:93:70:ad:3e:64:aa:bf:5e:c7:
                    ab:61:56:fb:10:00:12:32:33:42:c8:4b:a2:ef:df:
                    56:44:30:98:37:e9:d3:e9:f4:cf:06:30:c4:c6:da:
                    40:24:95:10:4c:31:71:e1:e0:a8:4b:05:f9:f8:42:
                    a9:ed:02:a6:f1:95:09:e1:51:33:13:48:af:68:24:
                    a5:5a:50:c3:65:d8:72:d1:d7:ab:7a:bf:f7:e2:33:
                    84:d7:87:5b:04:da:0e:9f:56:4f:36:3c:53:39:ab:
                    68:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:33:A7:57:62:AD:76:80:60:A1:2D:1A:7D:19:6D:63:5C:97:53:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b5847d5c-4b8e-332c-a9a4-8112e58d52d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.5.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:59:0e:f3:ab:98:af:d7:38:40:bd:eb:e1:b4:41:80:cb:fa:
         28:55:9d:62:71:31:30:47:eb:e3:51:cf:22:b4:e2:44:ff:9c:
         18:90:79:42:82:dd:4b:9a:bc:5c:50:dc:94:60:d0:6b:b3:6c:
         04:c6:7c:be:3f:5c:35:a0:d1:c2:f1:4a:8e:5b:d7:d2:ef:5a:
         8a:92:80:cc:80:77:46:67:f9:d7:42:66:17:45:6e:bd:5f:9a:
         f6:72:df:d5:6d:12:ae:05:69:a3:ff:43:76:73:ac:8c:fa:77:
         c6:ce:49:dc:64:44:51:01:2b:13:f1:90:d1:dc:20:22:94:d9:
         5c:b0:37:7a:56:ba:69:04:a6:59:c9:e0:ce:ad:77:73:04:1d:
         83:0a:65:fb:bc:08:a4:0c:67:82:28:7f:6c:0f:9c:f7:77:1b:
         38:04:96:90:b0:20:da:bb:78:b0:3b:54:1b:a6:a2:47:35:a6:
         6a:10:1f:38:94:06:ab:8f:db:e1:af:bb:ff:20:59:c4:b1:48:
         2c:ab:b4:5e:64:1c:93:8f:67:73:80:22:dc:0c:fb:0d:2d:ae:
         2c:81:9c:fe:aa:e8:95:e3:4f:e1:90:d7:74:f7:7f:e4:ee:fb:
         5b:f4:9f:7f:b0:c9:16:53:33:01:23:8f:ca:77:0f:3d:2a:04:
         1d:55:31:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 8 23:19:41 2025 by rpki-client