Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ffe29dbd-e310-3715-85ac-1ab98e4cb8ac.roa
File:                     ffe29dbd-e310-3715-85ac-1ab98e4cb8ac.roa (raw, json)
Hash identifier:          RDMixo1ZVsebW69n49TPJd1+ZS9T4B9IKgco5wqL0yQ=
Subject key identifier:   63:FE:2F:FB:1C:B7:49:AD:EE:59:D0:67:9C:0B:13:10:02:B9:28:BE
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584A7350A444A4D1F5FCD1AC3080
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ffe29dbd-e310-3715-85ac-1ab98e4cb8ac.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     54113
IP address blocks:        157.5.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:a4:44:a4:d1:f5:fc:d1:ac:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=95d41086-99cf-4e20-9af2-c560b95a0986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6f:14:59:d6:a5:c2:36:e9:c2:03:d7:cf:48:
                    73:d8:e7:6a:06:5d:a4:ec:63:61:bd:d8:3d:08:8a:
                    f0:04:bb:24:62:e1:66:5b:02:b2:30:64:c8:77:09:
                    25:b1:11:00:c9:3c:ba:49:34:ec:dc:4d:1f:fb:b3:
                    89:06:a9:76:e4:79:e1:3d:5d:85:fb:c4:1a:aa:42:
                    c0:8d:15:ee:d2:1b:d3:5a:49:a5:54:d4:c2:6c:79:
                    09:78:6a:ea:13:16:e8:d7:ef:af:dd:bd:48:4d:3b:
                    ad:29:37:00:3b:ae:45:81:ab:87:1b:44:86:90:36:
                    1b:0e:aa:c4:9e:af:6d:92:eb:a5:ad:09:2c:b3:51:
                    0c:71:7f:15:42:7a:73:bc:52:bd:5e:3b:71:09:71:
                    d1:81:ae:38:07:31:c8:01:c0:38:1e:99:07:30:0f:
                    8d:ef:91:2a:87:e9:b0:f5:3e:25:8d:a4:0f:ac:07:
                    ef:ae:00:bc:7e:1e:97:89:f0:8e:d4:c4:2d:60:15:
                    08:7b:e6:29:2b:38:56:5d:eb:1b:a4:9e:1e:5f:b6:
                    70:5c:c4:bd:40:0f:d8:95:05:9f:6a:55:26:0e:2b:
                    48:18:72:31:d1:21:b2:c8:2a:69:10:16:30:76:de:
                    3a:7b:f8:29:01:6a:c3:a2:8b:2d:01:a9:41:38:cf:
                    f5:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:FE:2F:FB:1C:B7:49:AD:EE:59:D0:67:9C:0B:13:10:02:B9:28:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ffe29dbd-e310-3715-85ac-1ab98e4cb8ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.5.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:1c:03:c7:04:69:46:87:22:85:63:f6:f4:22:21:22:79:cc:
         05:4e:e1:6c:44:90:75:30:63:45:1b:cd:ac:ad:a7:b8:37:d3:
         2b:35:a5:6d:38:86:7e:24:83:7b:1e:88:3d:d4:25:fe:1c:d0:
         48:07:9d:43:f6:63:b6:20:73:cd:5a:7d:a0:6f:eb:87:98:70:
         b0:7a:a8:5f:ad:eb:9c:6e:8c:44:5f:6d:97:97:44:56:9e:dc:
         c1:22:64:29:8f:ac:2f:56:3d:ed:51:01:ec:ba:61:ab:ef:74:
         45:78:18:19:c3:7f:e9:cf:8d:2e:90:5d:5a:dd:d9:ea:05:2d:
         67:4e:e9:72:38:32:8e:f4:9a:6f:f7:99:a6:26:eb:d4:bb:ee:
         0a:44:ac:b7:c2:ba:c5:9a:12:5f:88:95:a6:e6:fd:04:91:48:
         b4:b5:6f:6c:32:10:bf:22:d3:30:2e:90:c7:a8:d6:cc:9b:ca:
         c5:96:cc:c6:6a:83:11:14:cb:1b:50:17:d7:56:2e:e7:81:83:
         99:a0:ef:bf:b5:69:f4:3d:7f:d0:3e:23:3a:bc:06:0c:f1:c1:
         63:d5:64:9f:1e:b3:5c:aa:71:ad:84:3d:b0:9f:e4:23:0f:0d:
         33:fe:9d:d5:31:f6:77:f6:c1:26:0e:e6:39:6d:a7:a3:cd:58:
         fe:e2:90:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 01:09:41 2025 by rpki-client