Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b274acdf-be48-364a-946d-e96a37ff0e75.roa
File:                     b274acdf-be48-364a-946d-e96a37ff0e75.roa (raw, json)
Hash identifier:          tga18QKCUUMutW48KJNqjke4mHgsEeoROQOoc108qF0=
Subject key identifier:   02:90:24:6B:31:F8:11:D2:A0:5E:D5:D7:D4:2A:0F:8A:66:43:9D:79
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584993FA02082BFCD2A514659080
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b274acdf-be48-364a-946d-e96a37ff0e75.roa
Signing time:             Sat 19 Apr 2025 13:01:02 +0000
ROA not before:           Sat 19 Apr 2025 13:01:02 +0000
ROA not after:            Fri 18 Jul 2025 13:01:02 +0000
asID:                     54113
IP address blocks:        157.5.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:93:fa:02:08:2b:fc:d2:a5:14:65:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Apr 19 13:01:02 2025 GMT
            Not After : Jul 18 13:01:02 2025 GMT
        Subject: CN=13d2bcd4-b130-4484-bfc3-8baa00d25af5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f4:a0:29:8c:b0:eb:6b:a3:5b:58:09:4c:bc:
                    46:bd:4c:a9:a8:29:c1:0f:b0:2a:52:2c:c7:10:bf:
                    71:b6:f4:96:b8:57:6f:e1:9c:47:41:a0:b6:b7:20:
                    13:ad:da:84:79:d2:4f:2b:7c:15:78:cc:ca:6f:b6:
                    df:96:b3:c6:0b:57:16:41:8a:17:9d:80:5a:3f:52:
                    1b:8b:8f:82:1b:5c:9a:ab:ea:b6:e1:70:32:95:7f:
                    fd:76:01:38:22:fb:6d:e0:4a:15:a4:cb:bd:bd:8d:
                    bd:7e:e5:a1:42:62:f3:87:71:37:e8:20:8b:b3:1b:
                    18:4a:c6:be:b8:e0:1e:ff:33:66:28:02:4f:03:b1:
                    5f:74:fc:c8:f2:6f:3f:49:0a:27:6a:c4:86:96:85:
                    13:2a:f8:45:b0:ef:87:f2:9d:1e:05:1d:9c:c0:71:
                    96:b5:26:84:6d:74:99:bc:5b:f8:ff:33:fe:b5:1a:
                    1a:ba:79:ff:40:17:59:89:c9:5c:3a:8a:2b:07:e9:
                    9f:8d:07:12:49:ee:ff:5f:3c:3d:bb:35:95:a5:e5:
                    84:e7:47:e0:c0:42:e9:e3:80:4a:10:c7:0a:ce:89:
                    76:86:9f:ef:d3:38:d3:22:88:4e:58:0e:65:2d:ec:
                    4a:70:c5:8d:68:37:9d:fe:34:1d:b5:67:0c:71:ee:
                    a3:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:90:24:6B:31:F8:11:D2:A0:5E:D5:D7:D4:2A:0F:8A:66:43:9D:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b274acdf-be48-364a-946d-e96a37ff0e75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.5.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:3e:c9:16:e8:ac:c3:d3:8e:58:05:82:31:f5:64:b1:0f:b5:
         cc:90:53:20:a1:dd:29:83:bb:9d:71:09:95:00:1e:dd:9b:9d:
         f8:47:e9:64:9a:ae:1c:b6:36:77:fd:fe:ca:dd:b4:8d:e2:5a:
         7d:4f:a4:e5:b5:19:72:27:84:a8:d3:05:31:9a:e3:d0:f0:64:
         49:a1:55:d7:b4:23:b0:f8:2b:59:42:01:18:21:dd:3f:95:76:
         0e:43:dc:03:4d:80:ea:95:dc:1a:92:8a:a5:04:5c:d6:fd:3c:
         00:29:85:8e:ae:67:a6:2e:e8:0c:fd:7d:b0:53:f3:89:b6:d4:
         bb:85:54:b9:2d:ba:5f:22:80:ba:6a:b5:cf:4c:0e:a0:f3:86:
         f4:a4:97:fe:2e:9e:89:cf:d4:c3:b1:dc:94:4a:55:89:c5:c1:
         f1:75:13:7e:54:67:80:73:ad:65:35:6b:a0:e4:94:f1:a4:11:
         a0:ef:f7:ba:a8:c8:a4:96:b0:27:2a:06:c0:a9:7a:b2:4e:72:
         6e:d9:52:49:6a:48:1d:b2:16:79:9d:45:f5:68:b7:be:e9:67:
         36:45:da:da:4a:3f:f7:62:33:65:0c:82:a7:7a:d3:97:0e:09:
         45:c3:28:a9:98:41:fd:3d:68:65:c9:58:19:d0:5b:f3:ac:f8:
         26:92:81:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:17:18 2025 by rpki-client