Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7c60b21e-b6e5-37de-91d5-d4da24f7ba5c.roa
File:                     7c60b21e-b6e5-37de-91d5-d4da24f7ba5c.roa (raw, json)
Hash identifier:          pg/kF8pWXxFRlUtFAtm4C8LOJSEieFK9Z8bcb4g7lLI=
Subject key identifier:   E1:B2:3E:81:DD:AE:83:C0:77:DD:17:8F:04:60:DE:1D:2D:83:0C:84
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584A7E7B86443E96C3D2084D2840
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7c60b21e-b6e5-37de-91d5-d4da24f7ba5c.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     54113
IP address blocks:        157.5.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:86:44:3e:96:c3:d2:08:4d:28:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=b18b6f99-5765-468f-9d7c-38ff72e86f1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e7:f4:39:d0:a9:91:bf:f8:c6:63:f7:90:c5:
                    46:a8:2e:a4:55:1c:86:b5:43:8e:f0:e3:6a:c2:45:
                    92:27:96:3c:64:19:cd:ee:ca:21:1d:f7:93:62:29:
                    12:a0:24:59:93:c2:10:5a:be:93:49:2d:c5:11:03:
                    ba:f0:89:78:2d:bd:ce:db:29:b9:33:b5:c9:f9:dc:
                    de:6d:67:4a:d9:f2:20:d6:b3:ac:d3:8d:42:a0:58:
                    b1:17:86:8f:1c:d3:74:07:ef:44:3f:6d:c1:3f:cc:
                    10:8c:98:c3:f9:74:ea:36:96:58:51:d4:93:bf:99:
                    51:8b:cb:fe:b7:c3:4f:6d:57:b6:1f:86:4f:8a:4d:
                    26:01:f0:b5:ad:fe:4b:77:27:8b:a1:35:b0:f9:22:
                    01:34:82:bc:a7:9f:2b:6f:39:0a:42:55:8b:4f:fa:
                    27:28:f6:78:9a:8a:41:90:f4:9c:aa:3b:b8:37:b5:
                    79:0f:42:9d:5c:24:90:c5:b6:e7:af:23:e6:ae:02:
                    bd:bf:f8:22:bf:14:20:ae:25:44:a0:51:02:5d:69:
                    83:ef:75:b0:a1:71:85:14:79:bc:be:28:7a:a0:58:
                    5a:1e:38:e7:11:44:d4:e6:c7:e6:77:a5:a3:20:be:
                    d4:ae:df:ad:93:2d:9d:94:49:d6:2b:a8:c8:e1:53:
                    df:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:B2:3E:81:DD:AE:83:C0:77:DD:17:8F:04:60:DE:1D:2D:83:0C:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7c60b21e-b6e5-37de-91d5-d4da24f7ba5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.5.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:37:d0:d1:81:51:7c:50:c8:75:1b:63:1c:78:94:99:56:da:
         56:f9:6c:88:8c:25:6c:86:e1:87:67:c0:cf:7a:11:78:de:e2:
         9c:c0:65:9d:58:3b:f2:e2:e2:49:a4:b7:6d:aa:9f:7d:da:7b:
         45:5a:47:5d:47:a9:da:24:e8:2b:10:0a:21:54:e3:34:a9:61:
         25:77:a9:74:08:61:cd:69:e8:c5:e0:e6:94:74:47:41:73:19:
         c9:99:48:30:0f:9f:bb:71:f0:f0:ab:8f:a1:2e:1d:a2:e2:52:
         96:f2:7e:2b:74:48:06:97:e7:6f:5f:b2:56:1d:3e:01:8c:04:
         a3:f1:81:4b:89:c4:58:b8:48:1f:05:c6:f3:0b:9c:42:b2:d1:
         b2:92:12:4f:e2:a8:8e:4e:c2:24:fc:b7:5a:02:0b:45:67:ff:
         01:52:9c:a7:5a:f7:6c:05:fc:e8:ef:60:9c:a5:bd:f2:58:51:
         e1:b8:b4:f7:bb:ef:31:91:80:2e:c6:ce:ae:5d:f2:b7:8c:46:
         40:99:29:fd:a5:4d:d6:07:86:fb:23:5f:ea:fc:81:89:1c:7b:
         8f:41:60:49:00:2e:31:10:56:4d:1b:cb:09:f4:07:b9:19:eb:
         84:4e:23:08:23:82:20:46:48:6c:e2:26:64:d7:40:b8:b8:56:
         06:08:f5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:43:52 2025 by rpki-client