Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6efc3b90-4f56-3371-b5c3-5f1144d7e9e6.roa
File:                     6efc3b90-4f56-3371-b5c3-5f1144d7e9e6.roa (raw, json)
Hash identifier:          a5jBy2PuZqFA5HdLkXNF/DwC6ZcROAk6ZYFuL2YGKSg=
Subject key identifier:   F1:48:F6:11:AF:CA:06:0D:C5:51:04:B3:EA:2F:90:63:5F:14:58:0F
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584A7E7B8665568A38F06D9F3200
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6efc3b90-4f56-3371-b5c3-5f1144d7e9e6.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     54113
IP address blocks:        157.5.106.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:86:65:56:8a:38:f0:6d:9f:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=3b64d55e-1f6c-4acc-b530-2a15c4b3f4f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:dd:59:5a:72:57:08:cf:b7:2e:56:f5:ab:c9:
                    89:9a:f1:6e:48:5c:d9:e7:3f:10:07:77:88:fb:6e:
                    bf:46:2c:d4:6f:f0:4e:56:b1:cf:25:a0:63:84:03:
                    6a:ba:0b:53:c1:c5:79:0b:38:56:5e:b2:14:71:99:
                    c4:64:08:7b:7b:4f:99:20:c5:10:aa:12:6f:32:61:
                    8d:17:35:44:01:d5:1c:60:2e:23:8a:76:33:2b:d8:
                    36:07:9c:28:bf:b9:91:83:bb:c3:ac:3b:61:5f:98:
                    48:dd:95:6d:20:9a:98:6f:43:16:9b:c3:42:2e:26:
                    af:db:9e:af:ce:a9:c3:16:4b:2c:3a:73:1a:dd:f6:
                    51:7c:95:d3:7f:7f:72:dc:7a:e9:ef:e1:03:90:0e:
                    76:04:16:65:de:57:7b:f8:1c:41:b3:d6:1f:a2:36:
                    b8:e3:22:3e:71:34:b3:e4:26:cc:59:18:84:7f:22:
                    fb:0e:6c:5d:ca:dc:0c:92:01:55:49:02:9c:b8:38:
                    b7:39:cb:a9:71:f2:0d:92:28:3f:f0:dc:50:25:98:
                    95:06:d5:c5:e2:25:34:a0:69:8a:6c:97:72:49:20:
                    28:3d:96:f7:ed:28:2e:97:0a:88:12:95:33:88:05:
                    1c:b2:c7:af:0c:a6:03:3a:35:c2:5c:72:77:05:f3:
                    82:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:48:F6:11:AF:CA:06:0D:C5:51:04:B3:EA:2F:90:63:5F:14:58:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6efc3b90-4f56-3371-b5c3-5f1144d7e9e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.5.106.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:a0:f9:7e:56:2b:4e:22:85:20:e2:46:07:4c:c4:75:c2:56:
         51:25:fe:e1:63:94:87:85:3a:17:24:40:24:8d:95:2d:a5:74:
         f7:bc:a0:16:3d:cf:fe:0b:44:e9:c1:93:34:72:ba:ed:ab:9b:
         8b:29:86:ea:46:33:96:41:23:3d:a8:d1:2b:a8:41:7e:a5:43:
         54:3e:e0:63:ca:87:f6:89:80:08:e0:16:ee:ef:b1:80:c5:fa:
         9c:0f:52:72:ea:b5:52:45:e9:27:92:47:0c:48:a8:bb:f5:75:
         a1:66:df:88:4b:dc:de:18:f5:ff:02:b6:99:83:e6:df:c6:fd:
         70:04:e2:76:85:df:1c:98:a2:75:cb:89:9f:a6:9e:2c:a4:06:
         e4:a2:f4:73:b7:88:7b:45:e1:12:12:da:7e:bd:05:60:86:92:
         16:6f:31:77:48:e0:33:f5:9a:32:14:99:49:4c:72:55:59:d2:
         51:9b:1c:a6:6e:8b:2b:a6:0c:a3:b2:24:7d:f3:61:80:d3:ea:
         2d:f3:72:b1:3d:ae:08:ac:c3:e7:ec:25:d4:b8:6d:64:6e:68:
         b7:ae:62:88:3e:7a:0f:12:87:a2:fd:84:e7:89:bb:00:17:85:
         43:02:d5:8f:0b:74:a0:95:ff:86:6f:c2:67:3e:c6:37:e9:42:
         80:95:2a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:52:22 2025 by rpki-client