Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2be0b52e-7201-3119-bd68-08b8e4ff7bd6.roa
File:                     2be0b52e-7201-3119-bd68-08b8e4ff7bd6.roa (raw, json)
Hash identifier:          xzYfdqWHk9APkMMb+MSpqMsWR8LpcgubNSQMsEmpCDQ=
Subject key identifier:   30:6D:87:37:AC:5F:65:3D:81:AD:46:9D:30:DB:80:35:FF:70:9B:FC
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584A7E7B87993A005A1D6DA38520
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2be0b52e-7201-3119-bd68-08b8e4ff7bd6.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     54113
IP address blocks:        157.5.68.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:87:99:3a:00:5a:1d:6d:a3:85:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=ed72c400-3f27-4ce2-a7d8-9339a06ec651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:68:30:a8:59:54:d3:cd:30:f0:97:5c:b4:dc:
                    f8:82:a4:cb:39:79:72:cc:42:b9:9b:df:98:52:45:
                    02:60:81:0e:ae:6d:3b:f4:99:0f:64:b9:bd:30:68:
                    f3:03:f9:be:3a:01:a6:52:50:e9:5f:b2:34:f3:03:
                    08:88:25:33:f3:a0:d7:1b:fc:6a:3d:2e:1c:ac:66:
                    89:1c:77:7e:32:e5:ce:54:1f:e7:d0:da:f6:ba:8b:
                    ce:6e:39:10:26:3c:f1:d8:3a:a1:17:b8:fa:5a:f8:
                    11:a8:36:ad:1b:e2:c0:f7:f4:2a:c4:9a:c6:66:44:
                    e2:64:de:29:fe:48:90:3c:10:5c:05:45:58:2f:c0:
                    b1:d8:51:0f:23:1d:76:8d:03:b5:89:d6:7b:fd:c4:
                    02:df:81:32:12:7b:de:3f:00:c3:d6:95:51:a4:d4:
                    cb:27:2e:5a:84:6c:86:f2:9e:0d:21:4f:bd:bd:d4:
                    78:0c:33:36:7f:21:0e:3a:30:14:40:91:7f:55:38:
                    d6:2a:c0:46:27:5c:f0:55:3a:4e:cd:ad:c3:f0:fd:
                    b3:9c:b2:e1:2f:42:16:e0:41:7a:39:7b:65:de:6f:
                    a4:d1:16:8a:82:d3:dc:c4:26:c1:78:88:20:5f:8f:
                    dc:87:2b:af:17:22:cc:b0:00:e3:6c:2e:ce:a7:fc:
                    ef:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:6D:87:37:AC:5F:65:3D:81:AD:46:9D:30:DB:80:35:FF:70:9B:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2be0b52e-7201-3119-bd68-08b8e4ff7bd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.5.68.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:e2:9c:b6:8b:1a:55:b0:8b:c1:d3:20:29:4b:81:cb:62:43:
         59:45:b8:ed:46:1d:be:38:25:32:d4:e1:96:c1:7f:10:81:d4:
         17:ed:b5:2b:6e:8c:c6:35:6d:87:cf:a6:c6:4b:48:4a:68:0d:
         e6:b0:f1:d2:8d:e5:09:37:66:b4:5f:08:ff:00:e2:fe:7d:bf:
         c8:84:b2:65:02:96:34:4f:44:a3:83:90:e7:c1:ed:8f:7f:27:
         45:1b:fc:fc:1b:d1:da:53:9b:71:33:b3:70:79:49:b5:16:ad:
         03:f4:12:2f:dc:10:a8:48:c1:21:88:05:8c:c2:7f:2e:3e:0b:
         45:89:9a:4c:ac:10:e1:07:cc:56:4e:29:f4:3b:ee:84:3a:90:
         65:8e:57:ce:d7:02:53:0e:c0:ad:2a:8c:0f:d4:40:4b:2c:47:
         03:a5:e5:ad:f7:54:05:4e:94:dc:5f:3a:2d:df:27:b1:3f:37:
         51:f5:aa:10:24:04:66:63:04:2d:6e:54:33:6c:4a:fd:aa:43:
         59:13:48:92:f0:30:3f:d9:68:70:05:86:48:15:b4:1a:ed:02:
         c1:74:41:b0:a4:2e:50:4a:a0:f6:13:2d:48:4c:d4:a8:48:83:
         04:41:af:44:90:a0:e2:53:29:74:61:4c:46:89:f3:df:d9:b7:
         b4:54:9b:2a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e4eZOgBaHW2jhSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk
ZWQ3MmM0MDAtM2YyNy00Y2UyLWE3ZDgtOTMzOWEwNmVjNjUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmgwqFlU080w8JdctNz4gqTLOXlyzEK5m9+Y
UkUCYIEOrm079JkPZLm9MGjzA/m+OgGmUlDpX7I08wMIiCUz86DXG/xqPS4crGaJ
HHd+MuXOVB/n0Nr2uovObjkQJjzx2DqhF7j6WvgRqDatG+LA9/QqxJrGZkTiZN4p
/kiQPBBcBUVYL8Cx2FEPIx12jQO1idZ7/cQC34EyEnvePwDD1pVRpNTLJy5ahGyG
8p4NIU+9vdR4DDM2fyEOOjAUQJF/VTjWKsBGJ1zwVTpOza3D8P2znLLhL0IW4EF6
OXtl3m+k0RaKgtPcxCbBeIggX4/chyuvFyLMsADjbC7Op/zvxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDBthzesX2U9ga1GnTDbgDX/cJv8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMmJlMGI1MmUtNzIwMS0z
MTE5LWJkNjgtMDhiOGU0ZmY3YmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnQVEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABninLaLGlWwi8HTIClLgctiQ1lFuO1GHb44JTLU4ZbBfxCB1BfttStu
jMY1bYfPpsZLSEpoDeaw8dKN5Qk3ZrRfCP8A4v59v8iEsmUCljRPRKODkOfB7Y9/
J0Ub/Pwb0dpTm3Ezs3B5SbUWrQP0Ei/cEKhIwSGIBYzCfy4+C0WJmkysEOEHzFZO
KfQ77oQ6kGWOV87XAlMOwK0qjA/UQEssRwOl5a33VAVOlNxfOi3fJ7E/N1H1qhAk
BGZjBC1uVDNsSv2qQ1kTSJLwMD/ZaHAFhkgVtBrtAsF0QbCkLlBKoPYTLUhM1KhI
gwRBr0SQoOJTKXRhTEaJ89/Zt7RUmyo=
-----END CERTIFICATE-----
Generated at Tue Aug 5 17:21:02 2025 by rpki-client