Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b4af9c38-642f-3034-a2cc-d6c945b1e743.roa
File:                     b4af9c38-642f-3034-a2cc-d6c945b1e743.roa (raw, json)
Hash identifier:          RZc6koEtUfeEAkGLwNDVUTVbojmaPfTLxkhHzP5G2ok=
Subject key identifier:   E8:EF:22:2F:3D:01:BF:97:F7:AB:1D:0B:64:6A:6A:4C:04:7A:E5:4F
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584993F9E62AA0FABA059E4FE660
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b4af9c38-642f-3034-a2cc-d6c945b1e743.roa
Signing time:             Sat 19 Apr 2025 13:01:02 +0000
ROA not before:           Sat 19 Apr 2025 13:01:02 +0000
ROA not after:            Fri 18 Jul 2025 13:01:02 +0000
asID:                     54113
IP address blocks:        157.5.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:93:f9:e6:2a:a0:fa:ba:05:9e:4f:e6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Apr 19 13:01:02 2025 GMT
            Not After : Jul 18 13:01:02 2025 GMT
        Subject: CN=661e4504-ffe4-4bb9-a1c1-a76d97377ccb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b9:33:ca:26:e8:8c:29:07:f9:ca:dd:37:4a:
                    6e:fb:81:6c:9b:e3:bd:4d:0a:be:4e:02:20:af:d8:
                    66:b2:95:56:a6:7e:c3:a6:e8:9a:de:65:f5:2e:50:
                    55:ac:dc:44:93:07:4d:93:d0:d3:ad:54:c4:c2:c1:
                    56:a3:95:fa:03:4a:38:8a:0c:ee:1e:73:42:ce:66:
                    1a:c9:87:ae:3e:3d:f6:8e:76:74:22:e6:ee:86:80:
                    63:11:38:e1:e6:48:5c:82:fd:09:c8:ba:2f:22:c6:
                    d7:2b:b8:69:25:e6:19:ed:7e:7a:43:a7:d0:f9:bc:
                    1f:b3:ce:7a:6d:52:39:78:88:98:fd:09:68:6a:ed:
                    45:71:53:6c:b3:cb:ac:2f:e4:03:df:d4:e2:20:82:
                    8e:e6:99:38:08:3f:4a:af:b9:53:6f:63:c0:f2:e2:
                    1a:09:07:94:13:50:6f:94:6c:95:ed:d4:84:a6:e0:
                    81:06:24:f8:01:bf:3c:ed:5a:64:dc:d5:fd:f5:a4:
                    1d:d6:3a:b1:3d:cc:71:3d:71:e2:88:a4:be:8f:5f:
                    61:fc:12:b3:fa:82:ad:8b:3e:f5:1e:18:51:15:1f:
                    f3:3e:d0:45:d3:1b:46:ac:20:c8:c7:23:ed:1d:ee:
                    69:65:9e:c7:05:01:c8:2f:77:dc:c2:7d:ee:67:e8:
                    eb:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:EF:22:2F:3D:01:BF:97:F7:AB:1D:0B:64:6A:6A:4C:04:7A:E5:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b4af9c38-642f-3034-a2cc-d6c945b1e743.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.5.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:d5:39:fd:de:fe:ed:08:93:13:85:4e:75:ce:61:2d:fd:d2:
         82:91:14:12:c3:da:cf:2a:9a:38:b6:29:9d:e0:50:8c:6f:c8:
         2a:b0:4c:5d:67:87:bc:ae:21:c8:90:79:1c:90:52:9f:e2:db:
         e8:1d:13:5f:8e:6e:ba:20:65:bb:96:d6:bf:70:8e:eb:f3:ad:
         a7:d8:24:41:8d:52:f1:e1:ac:4f:47:d3:27:da:85:0b:58:18:
         de:d1:e9:24:d4:85:ed:6a:99:c2:88:20:8e:cb:b2:0e:80:c0:
         6b:bc:a9:0f:10:37:63:44:82:a8:0d:66:fa:fd:30:c4:0c:26:
         c7:46:5c:77:f9:fc:fc:69:f1:db:5f:f7:1d:43:d6:69:33:48:
         49:00:0d:c4:13:30:44:ff:55:94:2b:71:02:df:f0:51:f0:b6:
         88:74:10:ac:a2:97:e3:f6:53:09:c2:7f:2b:5a:3f:21:ab:17:
         bf:dc:0d:22:31:1c:56:61:d8:b5:6c:57:ae:65:ca:ba:9d:2a:
         4f:3c:bd:d1:d2:1f:9b:eb:1b:3e:c8:42:92:fa:bd:a6:33:cd:
         e6:58:aa:9a:30:d9:d8:c9:4f:2e:7e:c8:26:e1:60:54:d3:73:
         1d:f4:b2:8e:c9:d2:62:1d:99:c5:b7:ae:51:34:d8:9d:f9:27:
         ff:b1:c5:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:57:48 2025 by rpki-client