Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/9695b1ee-8536-335c-9ab7-83c3002ed5e7.roa
File:                     9695b1ee-8536-335c-9ab7-83c3002ed5e7.roa (raw, json)
Hash identifier:          kUkQxu9qKezoWATAxti7BDY4khp30j49KBknIiTpK8g=
Subject key identifier:   99:CB:08:F6:55:4F:C4:65:F1:7A:CA:1A:07:03:B1:3C:A1:55:D6:65
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F43285849350EAE79754DA3EF7EBFD280
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/9695b1ee-8536-335c-9ab7-83c3002ed5e7.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     0
IP address blocks:        157.133.1.0/24 maxlen: 24
                          157.133.2.0/23 maxlen: 24
                          157.133.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:ae:79:75:4d:a3:ef:7e:bf:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=f2b937c5-afcf-4bd8-a151-d9ed85a40dbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8d:f4:7e:9c:f9:a8:41:77:51:ac:cd:81:91:
                    e4:fc:5c:07:8c:f3:c4:31:91:d8:f5:3d:06:4d:7e:
                    a8:96:3b:ef:3f:29:46:c2:e5:54:8b:23:05:9c:43:
                    eb:42:be:37:b0:bf:0c:da:72:1b:72:21:a0:29:b7:
                    28:33:da:47:da:c1:df:20:92:9b:54:5a:06:98:e3:
                    49:92:30:82:ea:64:54:a8:80:62:bb:53:ea:7e:dc:
                    10:6f:51:08:2e:96:f7:5c:85:10:dd:68:dc:52:d5:
                    ad:6b:a6:c1:12:4a:d5:3f:09:95:a1:6b:78:10:e6:
                    03:53:64:d9:73:16:27:f2:31:4c:89:27:0a:d8:0d:
                    8e:d1:d0:66:be:56:3c:5d:4b:af:3e:93:f4:de:cc:
                    a2:9d:39:36:ff:ac:2a:c2:ea:73:3d:24:74:27:58:
                    f2:aa:fc:aa:6e:e3:da:e3:3e:ad:7d:4f:2b:a3:80:
                    65:3b:20:35:f5:4d:f1:d5:d7:95:f2:4f:2c:4a:bb:
                    1d:07:64:c8:de:f4:ec:ce:a9:04:90:d8:91:4e:cc:
                    30:8b:4f:a1:7c:82:81:62:73:79:8c:f0:8f:30:58:
                    c1:0a:95:51:83:25:8e:a3:fe:ff:40:7e:85:bc:85:
                    55:20:de:ec:76:7c:f5:09:1c:82:d7:18:6a:5a:6a:
                    39:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:CB:08:F6:55:4F:C4:65:F1:7A:CA:1A:07:03:B1:3C:A1:55:D6:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/9695b1ee-8536-335c-9ab7-83c3002ed5e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.133.1.0-157.133.7.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:4e:ab:1c:a9:a6:33:97:14:9d:c6:8a:0d:f6:d7:72:3c:05:
         12:6f:be:f2:f5:a3:0c:83:1d:d6:69:8c:ec:8f:cd:77:7b:9c:
         36:80:c6:55:0f:51:a8:a0:83:68:fb:05:f6:5a:00:87:ad:13:
         ce:a9:42:f0:d2:f9:6a:bc:01:b4:4c:3a:51:75:5e:f6:aa:74:
         9d:18:f7:69:4b:e6:6b:c5:58:94:00:d4:70:0d:b6:64:d1:1d:
         e3:f9:fb:4a:a5:e0:c6:d5:81:47:72:86:0d:e5:e0:f9:e9:9e:
         41:87:a9:89:09:43:7e:26:3e:32:27:85:73:b9:1d:4c:f9:5d:
         f2:23:38:89:29:7a:9e:5f:f1:0a:c6:61:10:f2:4a:e8:9e:ef:
         bc:a4:80:61:51:4c:b3:de:30:ef:fe:e5:3a:69:2f:cc:1b:66:
         73:e1:1e:e1:fd:a4:cb:73:78:7f:f4:ec:88:09:1f:12:b4:05:
         10:87:70:f7:12:39:c1:29:d2:26:42:6d:45:93:2a:96:31:c1:
         e1:9c:05:64:42:1b:31:46:5b:d4:25:a1:85:89:1f:f3:02:6b:
         23:20:38:28:b8:0f:51:22:e9:ac:80:6d:07:47:25:ec:4d:8a:
         62:41:00:21:48:db:11:34:29:5e:24:c7:5a:e6:c6:29:3a:f5:
         3a:ee:5c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:02:39 2025 by rpki-client