Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bbf5f9d9-4821-36d4-9d39-b5600836f5e3.roa
File:                     bbf5f9d9-4821-36d4-9d39-b5600836f5e3.roa (raw, json)
Hash identifier:          o7WrCW5p8xwVR64seyRGRPhOML9phcQntUStFCgm5t0=
Subject key identifier:   BA:01:2F:9E:AE:78:21:50:5D:89:40:3D:F4:FC:92:31:CC:FB:7A:12
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584A7350A513C0BDE13BC87B2280
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bbf5f9d9-4821-36d4-9d39-b5600836f5e3.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     54113
IP address blocks:        157.5.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:a5:13:c0:bd:e1:3b:c8:7b:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=d7d36015-a4f7-4481-9994-12b243483eda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ba:b3:ef:f8:32:d8:8f:3b:b5:6f:98:a1:26:
                    35:7b:1e:3b:9e:d9:35:3e:39:f3:a8:3e:1e:24:d5:
                    dd:b5:c4:f5:9c:d4:26:cb:25:f2:f0:16:57:09:42:
                    ae:6b:22:b6:a1:cd:ca:7d:94:60:4e:d6:20:4d:ab:
                    fe:34:b2:79:4c:ff:84:47:0a:f3:59:6a:e2:c8:b9:
                    77:d1:a3:6b:0f:53:f8:e2:07:d1:1e:8a:a9:31:07:
                    1c:6b:d5:db:8a:df:c1:23:50:5b:3d:f1:1a:1a:a3:
                    52:da:51:dd:a8:bf:ad:85:1e:1c:25:b8:80:a6:2b:
                    c2:af:5b:5c:a5:4e:61:28:1f:65:fc:9d:f1:09:3b:
                    a4:b4:bc:00:b3:f1:87:a6:18:3c:bb:20:6b:4e:be:
                    e4:78:32:1e:bf:8a:62:3a:f0:5a:f4:d5:34:d4:55:
                    8f:b9:6f:d7:bc:33:0a:d3:09:ea:3f:42:6f:0e:a0:
                    38:ca:1b:d1:34:ed:86:78:0b:bf:bc:96:e6:9f:48:
                    5a:85:2c:c1:c3:14:65:13:36:7a:e3:6b:be:f1:4e:
                    0b:94:f4:4a:0a:70:64:5a:95:92:71:9a:4e:c8:97:
                    df:4c:00:f6:c1:fa:40:1f:3d:a1:47:56:d9:b4:56:
                    ab:a6:8f:a3:f3:de:9c:4f:04:0d:dd:63:ff:4f:d2:
                    5a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:01:2F:9E:AE:78:21:50:5D:89:40:3D:F4:FC:92:31:CC:FB:7A:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bbf5f9d9-4821-36d4-9d39-b5600836f5e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.5.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:5b:30:3b:1b:e2:a9:e6:51:ef:a2:cb:12:5f:be:7e:0d:7a:
         67:be:51:0e:ee:12:12:ca:1f:b9:61:8d:a3:01:bb:1b:3b:0c:
         70:c7:bb:b7:8a:ef:29:f3:38:2a:d0:4d:0a:c0:28:73:e7:aa:
         4c:db:5b:fe:19:20:43:bd:80:f9:d1:07:f7:ad:8d:91:44:ed:
         2f:96:02:e6:f4:bd:e4:29:1d:7b:c8:79:ec:d1:a8:c9:e5:62:
         d9:7f:54:83:02:9a:12:d4:e9:17:da:4d:d5:bb:bb:c9:0b:8c:
         8f:95:df:de:b8:f8:66:c0:d7:73:da:88:3d:fa:94:fa:30:a0:
         c3:b0:34:62:41:7b:dd:76:db:14:42:84:c3:af:6d:c0:88:28:
         ce:90:58:78:f2:9a:ca:cd:92:bc:12:d8:26:5e:6e:26:33:a4:
         1a:2b:7d:6d:9b:fa:48:2e:ae:f4:34:3a:d7:31:07:bc:d9:d1:
         f9:d8:9e:3a:c8:3f:3f:7f:85:7a:ae:e2:f0:64:bf:ba:ca:3f:
         6d:7b:89:db:ec:61:99:c6:85:3c:77:df:01:f9:61:27:c4:19:
         26:eb:fc:91:9e:1d:28:1d:91:e5:28:37:dd:18:e4:64:77:ac:
         52:22:12:d0:d2:7d:42:c0:80:b6:e3:1b:fd:01:2c:41:f5:ce:
         a5:18:cd:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 00:24:20 2025 by rpki-client