Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/59ffee16-7c52-3218-828b-7fb039c1969a.roa
File:                     59ffee16-7c52-3218-828b-7fb039c1969a.roa (raw, json)
Hash identifier:          YkX+gP+e4Q1HiwYwezy1AKiwk5r4e/UfK5c/QHES8Hs=
Subject key identifier:   07:07:C9:03:07:6C:29:2D:49:13:20:2F:09:5F:42:6D:0D:D3:56:E3
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584B47148EADC2DA82CC605662C0
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/59ffee16-7c52-3218-828b-7fb039c1969a.roa
Signing time:             Mon 22 Sep 2025 09:31:31 +0000
ROA not before:           Mon 22 Sep 2025 09:31:31 +0000
ROA not after:            Sun 21 Dec 2025 10:31:31 +0000
asID:                     0
IP address blocks:        157.133.32.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:14:8e:ad:c2:da:82:cc:60:56:62:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Sep 22 09:31:31 2025 GMT
            Not After : Dec 21 10:31:31 2025 GMT
        Subject: CN=c0c6692f-7007-4de3-8b0a-9243f016a2eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0a:f1:d4:d2:ce:bf:ba:b1:86:63:e6:e4:df:
                    2f:3e:38:8a:00:ed:96:d1:f7:06:1c:d1:ac:c0:b0:
                    37:cf:b7:b5:73:06:86:fc:90:b3:65:c2:28:a6:7b:
                    a2:5a:71:ea:e6:98:db:5a:c4:6f:61:9c:92:46:22:
                    1e:42:94:7a:d1:57:bc:65:39:82:98:fc:3e:34:97:
                    b9:fe:a5:83:ff:ae:85:60:57:39:d0:56:6a:7a:38:
                    c2:31:07:22:75:cd:3e:bd:ab:ec:0c:8a:e8:5a:2c:
                    27:e9:a6:81:46:40:65:5d:57:57:9a:2f:0c:a8:31:
                    dd:0a:82:e7:e7:67:6d:ad:78:17:17:8a:15:84:e1:
                    b6:e3:21:aa:2a:ed:c1:50:65:18:62:50:87:c7:1b:
                    3a:08:57:ad:58:1f:8e:12:bb:57:8a:6b:98:8a:eb:
                    85:eb:81:15:a5:a4:74:f5:46:84:57:b4:49:b6:be:
                    4d:7f:39:1f:d4:23:38:b4:37:cc:70:52:b3:ca:67:
                    62:58:95:3f:57:37:c3:34:86:27:59:24:14:bd:d3:
                    47:c6:2d:b2:35:15:5b:46:a1:81:53:3e:ce:c2:fd:
                    34:41:af:69:b1:57:ef:9d:40:ff:b2:44:5d:55:ea:
                    a4:9f:cf:3d:8f:86:6a:21:b5:95:b9:bb:32:4a:c8:
                    62:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:07:C9:03:07:6C:29:2D:49:13:20:2F:09:5F:42:6D:0D:D3:56:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/59ffee16-7c52-3218-828b-7fb039c1969a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.133.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:f5:6c:4f:1d:70:b2:97:7b:bf:8b:69:40:e9:8f:36:08:9b:
         dd:3b:b0:d2:d4:c3:91:a1:e3:2a:b4:b3:ae:31:d2:60:b1:b0:
         10:2d:ab:50:be:f4:69:ee:8b:35:d1:0b:ac:aa:5c:c6:15:d8:
         bb:06:e6:bd:37:73:81:b8:d7:c1:1f:98:0e:1f:4e:5f:87:1a:
         41:6f:4b:89:1e:1d:12:63:e2:bc:c8:0e:e6:41:41:17:95:cc:
         9d:8a:fc:b1:5a:52:f6:3b:4c:c3:02:95:c4:e7:71:f5:2a:a8:
         06:f4:ed:47:54:f4:18:45:33:9e:7e:a0:7d:59:f8:e9:47:29:
         2b:0c:f0:37:4a:f1:1b:38:76:27:b0:6e:37:17:b9:8c:94:45:
         b4:eb:9d:9f:e6:59:c0:cd:52:2e:a2:53:d3:4a:96:ba:08:31:
         77:d9:51:ab:de:5d:83:b8:9d:b1:a2:46:58:ed:52:f1:c2:d2:
         52:2f:7c:84:9e:9d:14:a7:d1:41:36:ec:1d:d3:d5:42:71:52:
         0f:9f:1a:6c:07:4c:01:c3:bb:57:b3:37:a1:c0:5f:aa:8f:9c:
         31:cf:1e:5e:36:bf:62:aa:b0:fe:52:de:d9:75:37:94:3d:67:
         20:50:e3:c7:f1:63:b5:fc:14:1f:bb:fb:69:e5:67:48:65:f5:
         0c:20:91:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 13:59:19 2025 by rpki-client