Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9b0fefe6-60f0-3594-8a5e-58a7c93c9a59.roa
File:                     9b0fefe6-60f0-3594-8a5e-58a7c93c9a59.roa (raw, json)
Hash identifier:          g8pF0bv0k3jOz9vEVqAW7BQgfJ5tcUtIttDaHBLT/rA=
Subject key identifier:   BC:8C:EE:CC:9A:8A:A3:E7:04:EB:46:B9:F0:13:AE:0A:0A:1E:3C:A1
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F432858499F24C5579AB4E79EB47E0FF6
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9b0fefe6-60f0-3594-8a5e-58a7c93c9a59.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     54113
IP address blocks:        157.5.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:c5:57:9a:b4:e7:9e:b4:7e:0f:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=7e1c2784-2876-409a-a0cc-9e63345714b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ef:f8:65:98:b7:2d:68:b8:86:9b:7e:06:63:
                    d4:dc:fc:c4:39:84:19:bf:40:8b:85:08:01:b4:93:
                    b4:4b:a4:c8:4a:c7:b3:1e:1d:80:b5:e5:1b:5a:e6:
                    26:17:f5:45:ad:d8:f8:6e:a8:ed:28:6d:87:6d:86:
                    04:3f:20:16:30:4d:13:49:4b:12:d7:c1:78:b0:60:
                    ca:8d:19:bb:dc:75:54:6c:78:26:6b:ba:18:9c:44:
                    24:f7:80:f9:0c:6e:8c:1e:63:7f:92:c4:25:70:9d:
                    26:69:4a:c4:1f:85:79:00:5f:5d:b6:f0:2c:52:eb:
                    97:0d:35:a7:16:c9:7e:22:aa:75:c1:c3:e4:dc:82:
                    c3:f0:21:f9:4e:48:22:45:f9:9f:d8:e6:3b:d0:b9:
                    33:b9:86:ad:1e:09:c3:8f:1d:3e:e7:f8:19:9c:71:
                    4e:56:4d:4d:84:14:f1:ab:7a:f8:a1:ef:60:23:99:
                    2f:d8:84:b3:d7:ba:19:06:be:1f:82:bb:07:57:e4:
                    31:41:04:f4:0e:25:b1:14:c5:f4:24:dd:06:e0:bc:
                    cc:96:8a:85:99:ca:b6:b7:5c:a5:c4:3e:2d:5a:bd:
                    9a:5f:a6:7a:e4:c2:d5:6a:2f:d3:f4:0a:d8:23:a8:
                    1c:71:2d:c2:7e:9b:24:d8:10:8a:82:d4:5e:28:95:
                    a6:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:8C:EE:CC:9A:8A:A3:E7:04:EB:46:B9:F0:13:AE:0A:0A:1E:3C:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9b0fefe6-60f0-3594-8a5e-58a7c93c9a59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.5.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:15:c0:c8:81:62:18:03:d9:ea:62:50:b6:d5:9c:ba:a6:36:
         cd:34:60:85:67:75:0c:15:e5:e1:92:41:08:1a:df:76:4c:f5:
         9e:a4:9c:86:5e:f8:85:98:15:af:9d:c8:59:84:7a:84:47:1e:
         c5:4f:dc:55:20:81:fc:52:fd:ca:d1:2d:ee:b4:ef:ae:d8:fc:
         61:27:8c:a3:fc:da:e9:10:14:14:de:54:2c:ad:98:9e:51:66:
         62:39:09:62:00:cd:a8:89:c0:09:c5:89:38:84:4a:aa:e6:03:
         df:93:13:fa:07:1d:fa:b4:d9:f5:a7:07:b4:52:3b:da:ef:a7:
         08:0f:bc:5c:3f:61:3e:df:48:ba:2a:4b:b9:54:d1:3d:84:f0:
         b2:a1:2c:52:fd:95:f7:73:a6:a0:28:ef:15:9b:4b:d7:fb:25:
         b1:ad:3e:01:13:ab:50:b4:2d:c7:c8:9a:c0:d8:c0:17:c2:04:
         c9:2c:88:fc:c3:4c:c8:01:6f:f8:28:34:1c:f6:5e:d9:27:bd:
         ab:c4:09:cd:f6:de:c5:5f:1e:2e:fb:65:ce:6e:44:c3:ef:31:
         3f:82:bc:22:23:f2:6c:49:af:a0:81:6a:a1:b9:28:21:fd:2d:
         06:d7:ff:c7:06:aa:7e:ca:65:0b:db:78:93:ed:20:7d:9c:25:
         fb:fa:ca:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:07:44 2025 by rpki-client