Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ccb83e8b-429a-38d0-8bbe-66cac5e5b12d.roa
File:                     ccb83e8b-429a-38d0-8bbe-66cac5e5b12d.roa (raw, json)
Hash identifier:          J0G4sdogz/vcn7yfdyC+FnovZ7FHokuTWZ5GYdfTq1Y=
Subject key identifier:   E5:66:84:6C:DE:AA:EE:5D:84:BC:EE:9E:5B:C3:C8:2B:62:FB:62:29
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584A7350A3B35C5F4175B22D94C0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ccb83e8b-429a-38d0-8bbe-66cac5e5b12d.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     54113
IP address blocks:        157.5.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:a3:b3:5c:5f:41:75:b2:2d:94:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=6c1dfce8-bc47-4905-b3c6-5ea9566a4c7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6f:17:1a:09:9d:62:44:70:20:00:6d:e5:81:
                    a6:f3:45:ca:90:ae:54:03:a8:e4:da:55:db:84:03:
                    c9:be:6f:a6:f3:c7:80:8f:f9:e1:10:23:15:3b:eb:
                    55:e1:79:02:de:f0:26:33:18:1d:93:dc:30:0b:19:
                    df:88:f8:cc:f8:b7:cc:d4:c3:db:04:f1:f4:69:84:
                    a6:0d:a6:d8:0a:af:5e:68:70:8a:eb:34:4e:7e:9f:
                    ad:a5:be:f8:48:8c:a7:62:5a:04:e8:c8:a1:1d:f0:
                    41:2f:62:d7:e0:f7:1b:33:21:6d:2c:10:61:86:de:
                    52:a0:6d:70:c6:b7:64:d4:0b:e8:a6:f2:a2:dd:c2:
                    ca:da:7d:4a:d7:0d:8c:16:c9:a9:0c:87:38:d4:c2:
                    d2:b2:8f:e3:52:17:47:43:46:00:72:19:bc:cf:81:
                    59:e6:c7:de:00:73:25:95:45:3e:60:50:49:19:30:
                    dd:a2:e0:ca:1a:a1:0a:d2:24:d3:b9:6f:56:9b:83:
                    67:c8:62:21:74:f3:59:30:74:15:43:08:ab:c6:38:
                    46:48:97:e6:53:cf:1c:99:79:27:0f:4d:5e:d6:c3:
                    61:ea:98:5a:54:81:15:71:f5:fd:c5:38:f4:b5:84:
                    f2:88:e0:8e:07:1b:5e:84:d3:a9:68:95:84:46:4b:
                    95:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:66:84:6C:DE:AA:EE:5D:84:BC:EE:9E:5B:C3:C8:2B:62:FB:62:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ccb83e8b-429a-38d0-8bbe-66cac5e5b12d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.5.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:f4:50:cd:64:ac:a7:73:47:9c:1e:bf:87:1c:e2:83:a0:8b:
         e1:a6:a6:54:d4:89:48:1d:e0:15:73:76:b2:31:bd:32:de:f1:
         20:7b:88:3d:d4:58:e8:6b:4c:ea:1c:55:e7:b7:14:6b:dc:e4:
         52:6a:61:19:1e:cf:58:e0:85:f0:20:47:9b:0d:6b:5e:b3:01:
         7a:99:13:16:0a:9c:ca:5b:2d:2e:45:ca:b3:42:48:56:32:d6:
         2c:e8:57:15:44:77:b8:92:92:cc:74:b1:6a:4e:b9:a7:53:c3:
         c8:82:64:87:66:8f:90:97:db:44:7e:54:c0:e1:b1:5c:67:5a:
         ad:4a:fd:de:6c:95:59:ef:e2:9b:d0:0f:35:72:a4:81:32:fd:
         63:07:ca:a3:d6:40:92:dc:43:cd:c3:b9:14:f0:cb:11:59:d3:
         fd:5a:5d:e2:fa:bf:c4:b7:9f:16:80:96:f1:06:20:c6:50:42:
         f0:27:2c:7b:77:be:87:61:b1:08:61:6b:18:08:b1:54:d3:89:
         a8:6b:7f:49:6b:96:75:7d:b2:0e:fe:92:15:08:90:9b:5e:c6:
         21:e7:35:ec:65:a2:a2:6a:10:7e:b9:51:47:1c:c8:3e:c3:57:
         93:22:d4:5b:8c:b5:91:ed:27:ad:b9:aa:62:e2:dd:ab:95:5c:
         e3:50:0c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 8 23:38:53 2025 by rpki-client