Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1fe642c8-5513-33ac-8f10-5a1c23e63c6a.roa
File:                     1fe642c8-5513-33ac-8f10-5a1c23e63c6a.roa (raw, json)
Hash identifier:          c7WcY1cjOVZbAD5E7yzoc+AU7JYPxfx1kXL2EyHoRBo=
Subject key identifier:   5B:8D:BC:5E:08:E2:54:58:9B:78:2D:EB:A4:42:82:8E:71:91:4B:86
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F432858499F24C7223EBEAC5982032740
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1fe642c8-5513-33ac-8f10-5a1c23e63c6a.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     54113
IP address blocks:        157.5.76.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:c7:22:3e:be:ac:59:82:03:27:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=29d1fb70-a300-4c4b-ac92-771257f5e17d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:54:50:98:ca:3b:11:28:c1:c9:62:fb:12:a9:
                    f3:97:65:ac:bc:1b:c6:26:25:92:ab:b2:f6:4c:16:
                    6b:f0:ae:8a:49:27:f9:c5:58:4d:3b:19:97:b6:8c:
                    29:cd:e7:5a:12:cc:62:52:c5:46:aa:f4:07:06:0b:
                    ed:47:fe:8f:10:0f:fb:1c:31:54:0d:60:eb:1e:91:
                    f5:87:16:38:f7:53:b6:b0:24:05:d9:91:03:86:f5:
                    58:75:4a:49:24:b9:a2:58:15:40:35:ea:1e:bb:aa:
                    d8:e8:6e:eb:44:73:4c:f8:19:b6:5d:04:87:3c:b4:
                    f9:a9:87:7e:e9:82:b8:d6:c5:1e:eb:8f:c2:ab:87:
                    33:85:24:37:d4:51:6a:e6:df:11:0d:13:cf:ed:2b:
                    fd:32:b2:ee:63:93:73:8a:89:cf:6f:84:65:26:a6:
                    10:f2:2a:b8:e4:b0:6d:84:36:d1:67:30:0c:4e:d5:
                    9e:18:93:6c:d5:75:15:9d:7d:bd:80:00:93:1a:d5:
                    72:62:62:0e:23:2b:27:87:55:c4:e1:fb:29:54:38:
                    4d:ff:ce:f6:52:72:98:8b:65:16:93:d6:39:37:87:
                    6c:04:bd:52:6d:48:d5:bb:36:1a:f2:0c:c9:5b:a3:
                    11:59:76:87:81:b7:51:b0:15:2b:23:93:4b:47:68:
                    56:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:8D:BC:5E:08:E2:54:58:9B:78:2D:EB:A4:42:82:8E:71:91:4B:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1fe642c8-5513-33ac-8f10-5a1c23e63c6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.5.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:89:55:9a:ec:b0:37:bf:ec:0c:03:32:73:96:fd:24:b8:71:
         d2:73:a1:d5:ff:22:77:39:91:ef:a9:86:f4:af:09:55:6f:35:
         1d:42:02:14:86:ee:df:cd:7e:96:de:bf:23:4f:c6:aa:55:eb:
         ac:ec:b5:67:07:7d:0f:60:f2:74:58:4a:70:9c:d3:74:c9:ef:
         4c:3c:23:cf:31:b7:77:0f:21:f1:5e:94:8f:ee:dc:38:d8:e6:
         17:80:40:d9:b2:f3:dd:48:4c:68:2e:1b:c3:d8:88:8e:2a:97:
         3b:00:4d:75:3a:4f:f7:89:1f:e7:1f:96:38:ff:53:f7:02:2e:
         22:c3:d4:af:bc:14:08:68:03:fe:ca:27:f3:3b:8b:2f:38:c5:
         de:bf:ba:3a:9d:22:21:66:f4:17:09:f9:93:06:61:35:73:c2:
         c1:69:a5:a7:91:ac:31:b4:18:f4:a9:bb:d9:83:3f:92:78:65:
         48:d2:c2:3c:87:09:f0:b0:4d:7a:3f:57:33:1e:fa:e0:d5:0a:
         0b:43:7b:9a:65:7d:da:b0:67:cb:85:aa:bb:dd:61:0f:ab:d7:
         80:1c:77:fe:09:ab:b5:bc:fc:5f:b3:34:d2:fd:5a:2c:eb:f9:
         6b:e6:27:e2:20:14:1f:65:3a:a3:f0:ba:5e:e3:0c:cf:8b:c4:
         2d:b7:6c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:54:01 2025 by rpki-client