Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/25a8f84d-727b-34f9-ac5c-7b27c8a3ac59.roa
File:                     25a8f84d-727b-34f9-ac5c-7b27c8a3ac59.roa (raw, json)
Hash identifier:          IttHlJ7s5y9gxVpiJdQgiWP0Dl7whtSqbacoTIHHISI=
Subject key identifier:   81:7C:88:2F:90:3F:5E:72:5D:F5:56:4E:68:8A:A9:54:40:4A:AF:89
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F432858499F24C63AC2DAB774AA948700
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/25a8f84d-727b-34f9-ac5c-7b27c8a3ac59.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     54113
IP address blocks:        157.5.116.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:c6:3a:c2:da:b7:74:aa:94:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=425adffb-f500-48c0-ade5-b0f52b5984e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c1:9c:b0:65:89:59:43:8b:40:23:4e:15:50:
                    bb:d5:c7:b6:0e:87:7e:e1:59:3e:02:85:42:89:b5:
                    ec:3b:21:06:42:e5:48:a9:b2:79:c5:c1:9b:77:01:
                    02:42:4c:52:24:76:3e:72:08:96:30:0e:95:1d:fc:
                    a7:9a:a0:14:7c:ef:02:ba:a6:af:89:fa:cd:de:94:
                    a5:af:b3:8e:97:c2:6c:e9:cf:6a:3b:28:4d:cb:5a:
                    f4:a8:01:4a:ca:ab:8a:40:a6:b8:85:34:dc:34:6f:
                    7e:bf:90:b2:bb:74:75:68:93:74:09:30:43:19:41:
                    a6:8e:86:b9:cd:48:f4:2d:6b:36:dc:69:e1:1c:84:
                    5e:c5:f9:17:71:17:bf:1e:57:68:0f:f3:be:b1:a2:
                    36:be:ac:e0:57:81:e2:5f:1e:7e:11:57:a2:3d:7f:
                    18:95:36:89:bf:fc:a8:9a:08:51:51:1d:4f:ee:8e:
                    9f:37:bb:33:ba:38:9b:9c:47:03:41:dc:12:0a:80:
                    1a:27:a4:16:95:c4:d4:ed:1f:4f:90:0e:88:ed:cc:
                    bc:f7:1d:ea:bb:e8:d2:9a:42:62:2d:3c:be:21:44:
                    32:53:5e:75:5d:bc:a7:e1:41:ce:3c:8b:c1:ec:a4:
                    04:99:c9:66:6d:fc:d6:c6:09:cb:f1:53:39:1c:c2:
                    05:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:7C:88:2F:90:3F:5E:72:5D:F5:56:4E:68:8A:A9:54:40:4A:AF:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/25a8f84d-727b-34f9-ac5c-7b27c8a3ac59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.5.116.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:d9:a3:30:a6:29:59:45:48:d6:d3:2a:30:19:dd:bf:c0:c1:
         ba:f5:81:30:7b:47:73:8d:75:26:bf:15:77:e8:f5:f7:3c:2b:
         d6:09:a6:23:ba:86:98:ef:1b:30:73:53:ab:4a:df:f3:b5:58:
         ff:8f:9c:44:7b:2d:d3:25:c0:74:d8:51:a8:f0:50:bc:cf:d4:
         1b:bb:14:db:57:15:21:22:36:26:e1:5f:27:11:2d:98:ce:8b:
         51:cd:b3:4a:77:b3:45:9a:2e:f0:da:dc:23:a8:a4:37:65:26:
         fc:44:fd:60:d6:1d:31:1e:dc:f6:d4:23:1b:8d:1c:47:9c:c1:
         38:97:e3:c1:f6:ca:82:9b:ec:c5:75:21:3d:ec:d0:07:9c:b6:
         14:21:9b:15:8a:8d:54:83:bd:e3:05:95:6b:55:61:6a:ce:20:
         9b:a1:75:03:fa:b0:16:ef:3f:f7:82:9d:2f:36:8b:33:5c:f5:
         ab:b1:72:e9:72:fa:47:75:78:dd:4d:ae:4c:71:8b:c5:42:8a:
         60:a5:46:46:2c:18:40:2c:6c:50:30:e7:35:1b:c2:af:a4:86:
         ad:43:45:b5:67:49:e5:8d:79:43:dc:1d:8d:c1:26:01:98:4b:
         e3:02:35:11:f5:da:fa:03:a2:5f:b3:ed:7b:26:74:fa:43:64:
         b5:62:ba:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:34:02 2025 by rpki-client