Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/90ce68ae-1cf1-39e0-bd0c-5051b83c2233.roa
File:                     90ce68ae-1cf1-39e0-bd0c-5051b83c2233.roa (raw, json)
Hash identifier:          1BLqbi1nR9RGh+ekhzf6T5Bi+427zaf2F3ZXz/FAUmA=
Subject key identifier:   54:A9:C4:5E:4C:CF:99:6D:E0:E2:44:2D:8C:D9:86:F5:CA:18:CC:34
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584993F9E8C70DEB2927336E6200
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/90ce68ae-1cf1-39e0-bd0c-5051b83c2233.roa
Signing time:             Sat 19 Apr 2025 13:01:02 +0000
ROA not before:           Sat 19 Apr 2025 13:01:02 +0000
ROA not after:            Fri 18 Jul 2025 13:01:02 +0000
asID:                     54113
IP address blocks:        157.5.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:93:f9:e8:c7:0d:eb:29:27:33:6e:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Apr 19 13:01:02 2025 GMT
            Not After : Jul 18 13:01:02 2025 GMT
        Subject: CN=0aa2720e-36c8-4d7d-9ca2-8383b86d13ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f0:5d:62:d7:3d:9c:38:c2:a2:da:f1:65:0d:
                    94:25:7a:39:86:db:ee:06:c9:34:a0:e2:75:b7:74:
                    26:85:46:9b:11:c5:6e:38:de:87:7a:1d:a5:d8:bb:
                    38:c5:d7:5c:09:4f:5e:8a:99:f3:fa:7b:ff:84:40:
                    f8:2b:5a:f6:2d:22:55:47:b6:c2:52:35:8a:06:b3:
                    27:b2:65:8c:56:2b:2d:81:4f:a6:d6:a2:e0:4e:8c:
                    b2:76:d3:5f:be:d7:08:02:cf:0d:54:45:90:18:3e:
                    d3:22:8e:49:bb:ed:e7:73:0f:42:6c:af:6e:22:4e:
                    5b:79:86:95:82:ea:79:a3:d7:20:d0:3b:5e:4b:1c:
                    5a:b3:ff:ea:2c:a2:19:8f:2f:bd:f6:b1:3a:3d:a7:
                    fc:8f:f0:4f:ae:31:fa:b1:f3:65:a2:e4:8d:79:bf:
                    fe:b7:64:4a:64:5c:60:81:6c:25:d1:62:0b:22:a6:
                    3c:7e:36:84:bf:4b:40:95:ad:16:03:b6:24:a8:62:
                    36:8e:c1:10:b3:5f:75:67:6a:fd:6a:f1:0f:fb:46:
                    f8:d7:34:1a:3c:66:43:2a:f2:44:69:f9:ad:ca:2c:
                    dc:d4:b8:07:99:68:56:1f:57:44:72:95:b3:00:d6:
                    1f:81:11:73:e4:a1:5f:5d:31:5a:6c:68:48:57:72:
                    38:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:A9:C4:5E:4C:CF:99:6D:E0:E2:44:2D:8C:D9:86:F5:CA:18:CC:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/90ce68ae-1cf1-39e0-bd0c-5051b83c2233.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.5.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:21:db:f4:00:26:c5:d5:36:f0:a5:91:61:ff:51:90:31:89:
         a0:d0:e7:eb:e8:32:c8:f5:f0:ff:7f:f2:53:5a:2e:d5:22:3e:
         98:1f:6d:7f:f9:74:93:c9:58:a1:8b:f3:2b:81:fe:a5:6d:e9:
         74:9f:a7:26:b1:a4:2c:bd:37:24:9b:02:a4:20:a4:ad:f8:44:
         1a:a0:5d:bf:d6:64:be:5d:b7:5d:68:f4:f7:8a:6c:42:d2:a7:
         6a:c9:27:65:0c:d6:1e:6f:6b:bf:f0:ad:ef:4c:25:67:9d:49:
         58:37:d2:88:3a:28:b0:53:a4:4c:06:44:73:84:3b:7e:ba:a4:
         5d:08:b1:89:d7:52:3a:81:dd:5d:b9:81:6f:f7:29:16:e8:95:
         82:4a:bc:15:7d:b8:25:78:32:80:35:11:b2:bf:39:78:ca:fd:
         92:06:ff:c8:c9:10:c5:01:d2:1e:35:4e:72:89:b2:68:a7:bf:
         1f:15:ee:99:3d:28:c5:d5:a5:87:fa:f8:04:c3:c1:5f:b9:0a:
         00:2b:f3:62:af:83:03:23:e5:36:f5:4c:77:77:d5:6c:de:70:
         3b:b5:a0:b3:e9:e6:dc:c8:45:d8:cb:b8:02:1c:df:00:0b:1e:
         55:45:06:62:74:1b:0e:39:87:60:6d:71:b7:58:0b:9f:1e:95:
         6d:ac:e4:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:10:04 2025 by rpki-client