Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/22129e65-a3f2-3e63-a31d-88075713bfa4.roa
File:                     22129e65-a3f2-3e63-a31d-88075713bfa4.roa (raw, json)
Hash identifier:          izfsbkf6WyCmtKPuKPj+D2OJrDJ8jBesNbkLiLaXH7E=
Subject key identifier:   75:31:E3:96:91:68:C1:2D:DF:88:FD:EE:A3:D8:2E:D0:07:CD:71:4A
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584953C439A4F34707C500319C60
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/22129e65-a3f2-3e63-a31d-88075713bfa4.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     54113
IP address blocks:        157.52.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:39:a4:f3:47:07:c5:00:31:9c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=455f712a-4fa2-41a2-bec5-4e6088502a03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4f:f6:9d:8e:e9:85:bf:57:71:90:3c:9a:66:
                    62:33:ae:dd:65:2f:1b:c0:f8:a6:8a:cd:2e:66:a9:
                    39:b7:fb:9f:b4:07:68:b7:a5:21:4d:42:f2:5e:ce:
                    6e:47:ba:4e:78:4d:75:e2:81:50:11:7d:dc:55:8b:
                    a6:a5:cb:9b:f2:e8:02:fc:1c:7d:d8:cd:e9:9c:bd:
                    be:35:14:fd:94:b4:99:95:1b:ef:9a:77:40:8d:5d:
                    63:20:8a:93:61:8c:0e:fd:85:fc:76:57:ec:54:fd:
                    77:cf:7d:7a:9e:5d:03:fa:40:20:d2:ff:9e:f0:a3:
                    a7:26:1b:49:a9:df:41:9c:2d:26:cb:4a:2d:fe:ee:
                    8c:80:34:1e:b0:ba:40:54:38:30:34:41:81:b7:84:
                    2e:17:d7:69:93:31:7c:97:b0:f3:ec:75:37:0e:12:
                    98:01:59:62:79:ac:af:83:87:36:c3:c7:79:d6:64:
                    38:8c:22:12:cf:80:d8:c9:87:48:ce:fe:78:f8:3b:
                    e5:79:53:55:c7:22:9e:17:33:4c:b0:8e:63:1a:45:
                    1c:df:68:3f:95:2f:dd:cc:8b:d5:99:12:4c:1c:1c:
                    73:f0:a3:9a:f2:fb:c3:f6:7c:cd:d5:3b:20:b3:83:
                    71:bd:15:cd:68:e4:81:4a:99:ee:7e:a8:f1:b4:ff:
                    97:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:31:E3:96:91:68:C1:2D:DF:88:FD:EE:A3:D8:2E:D0:07:CD:71:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/22129e65-a3f2-3e63-a31d-88075713bfa4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.52.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:f5:f4:87:ff:ec:a4:7b:65:fa:76:14:7c:5f:0d:51:62:00:
         18:1f:2a:5f:8f:29:11:d5:ee:c0:d0:48:47:36:be:84:41:ba:
         2a:42:cd:d0:ae:aa:3f:0a:d0:bb:6b:5d:55:dd:3a:a5:6e:cf:
         a0:5a:17:61:db:2c:02:87:57:51:fd:38:ce:dd:05:a2:35:37:
         79:41:c1:03:62:ab:1d:5f:30:28:f5:dc:ce:48:11:17:22:96:
         81:fd:e0:ed:19:93:f8:58:11:fd:53:2c:02:1e:ba:38:28:45:
         8d:b8:91:56:46:ba:72:d5:0c:26:73:09:1b:29:12:34:69:05:
         34:c7:a8:2f:f3:92:42:ee:dc:63:e1:96:7f:f6:d5:18:69:9b:
         de:46:db:86:10:3b:8d:81:10:e4:df:b5:1e:b0:a1:75:70:47:
         a1:3d:d4:82:2e:86:17:1d:ad:cb:5c:14:65:a7:7b:2f:cc:77:
         7b:d0:f7:2a:6b:3b:22:f9:ae:02:b7:9a:0c:8d:8e:bc:cb:b2:
         17:fb:8d:c8:04:f5:f3:16:0c:21:48:d2:6a:d5:ed:4d:ef:73:
         1f:82:a0:21:44:10:25:7b:1d:36:ea:9f:ed:24:ba:f5:29:de:
         a0:2c:8f:fd:3e:e9:32:f9:f2:8e:5e:ab:96:2b:0d:ee:4c:83:
         12:74:30:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:56:00 2025 by rpki-client