Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c4639595-2b44-38fd-97ce-97429b6a83f9.roa
File:                     c4639595-2b44-38fd-97ce-97429b6a83f9.roa (raw, json)
Hash identifier:          8MfGHIKdMJiOrZJ4nt/SwZAINDeR9/NxWpLblxtlEeI=
Subject key identifier:   BB:51:5E:1E:F8:E9:28:CA:7D:05:CB:9D:75:E3:80:F5:C7:EE:0F:94
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584A7E7B8675112DC89BA5E20700
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c4639595-2b44-38fd-97ce-97429b6a83f9.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     54113
IP address blocks:        157.5.114.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:86:75:11:2d:c8:9b:a5:e2:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=12035a8b-60e4-44ab-a5b7-8827d790174a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b4:c5:2d:54:55:8e:35:53:dc:e6:d1:c2:39:
                    c2:7d:f0:5c:8b:67:36:7b:8f:f5:d4:6d:25:64:f6:
                    72:90:24:15:b8:f5:9d:70:af:ee:f8:67:f2:a0:cc:
                    4d:d4:68:68:36:f6:85:88:db:12:e5:88:2d:a8:70:
                    06:1d:f1:9a:cb:b8:6a:5d:e1:3e:e7:fd:fa:58:ff:
                    08:da:42:70:4c:df:d3:b3:79:4f:09:e7:dd:47:0a:
                    9e:60:6b:76:1d:0e:49:94:aa:39:09:dc:eb:cf:cd:
                    84:1c:cb:1a:2d:5e:e9:3b:cc:f5:b3:55:60:6d:de:
                    39:8d:6f:82:9e:9c:42:e8:de:a0:21:9e:07:5d:21:
                    3e:46:54:ef:b0:99:2a:73:a6:cc:54:7e:79:2c:19:
                    40:b4:60:8e:40:ee:93:93:a7:d4:13:c6:94:3b:1d:
                    db:05:ff:5c:b7:4a:ae:99:bc:62:63:1d:2e:e2:b1:
                    03:fb:cf:d6:d0:06:c7:5f:33:69:9c:3a:7c:fc:97:
                    eb:a1:a9:db:82:38:a8:e9:ee:c9:02:71:ac:d1:65:
                    e0:aa:0b:82:09:2c:a1:3c:21:19:06:51:87:37:98:
                    88:a0:43:7c:23:34:fd:b7:23:cd:ed:f6:a3:21:e7:
                    77:0d:cd:66:20:31:2b:2b:62:db:c2:b1:9d:71:03:
                    f3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:51:5E:1E:F8:E9:28:CA:7D:05:CB:9D:75:E3:80:F5:C7:EE:0F:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c4639595-2b44-38fd-97ce-97429b6a83f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.5.114.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:a4:96:e8:b3:78:a2:da:b7:87:a2:e3:57:ce:16:61:69:dc:
         8c:fc:ab:cc:f2:b4:86:cc:b7:f5:0e:e5:51:1f:3d:f1:f9:64:
         27:8e:3a:5a:1d:74:9c:97:2f:12:8a:25:3c:3c:50:61:eb:6f:
         1f:72:a2:20:fe:af:86:06:eb:b7:2f:09:af:7e:b9:eb:85:6d:
         71:ec:ac:20:f1:f3:c4:7a:82:1e:31:05:07:1f:88:ee:0e:15:
         21:c4:78:b2:f1:d6:6b:31:ba:eb:8f:c4:f6:de:e5:98:de:a6:
         5e:8d:0b:05:66:4e:a6:de:06:a0:99:2b:ee:b3:00:3f:7d:eb:
         3e:b6:de:01:07:7e:60:b3:aa:49:58:cf:e5:b3:7a:77:06:85:
         4c:cf:20:0b:e2:26:23:e7:09:47:70:21:40:09:07:90:b7:0c:
         4f:ba:f5:c3:bd:53:11:03:4b:93:d5:28:64:bf:ef:f1:15:78:
         b1:02:a9:4f:75:9a:c7:fa:9c:1d:d1:45:40:4f:a4:e9:7c:19:
         85:26:fc:a2:85:8f:e5:af:e0:93:4c:1a:f2:de:f9:1f:d0:5f:
         0e:64:ed:b2:a9:18:dd:50:cf:2c:40:38:bd:46:e3:8a:99:90:
         5c:7b:37:dd:5b:ff:78:a2:0b:e6:99:dc:b4:ed:f2:e4:1d:00:
         55:43:55:c7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e4Z1ES3Im6XiBwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk
MTIwMzVhOGItNjBlNC00NGFiLWE1YjctODgyN2Q3OTAxNzRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbTFLVRVjjVT3ObRwjnCffBci2c2e4/11G0l
ZPZykCQVuPWdcK/u+GfyoMxN1GhoNvaFiNsS5YgtqHAGHfGay7hqXeE+5/36WP8I
2kJwTN/Ts3lPCefdRwqeYGt2HQ5JlKo5Cdzrz82EHMsaLV7pO8z1s1Vgbd45jW+C
npxC6N6gIZ4HXSE+RlTvsJkqc6bMVH55LBlAtGCOQO6Tk6fUE8aUOx3bBf9ct0qu
mbxiYx0u4rED+8/W0AbHXzNpnDp8/Jfroanbgjio6e7JAnGs0WXgqguCCSyhPCEZ
BlGHN5iIoEN8IzT9tyPN7fajIed3Dc1mIDErK2LbwrGdcQPz/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLtRXh746SjKfQXLnXXjgPXH7g+UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYzQ2Mzk1OTUtMmI0NC0z
OGZkLTk3Y2UtOTc0MjliNmE4M2Y5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnQVyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB+kluizeKLat4ei41fOFmFp3Iz8q8zytIbMt/UO5VEfPfH5ZCeOOlod
dJyXLxKKJTw8UGHrbx9yoiD+r4YG67cvCa9+ueuFbXHsrCDx88R6gh4xBQcfiO4O
FSHEeLLx1msxuuuPxPbe5Zjepl6NCwVmTqbeBqCZK+6zAD996z623gEHfmCzqklY
z+WzencGhUzPIAviJiPnCUdwIUAJB5C3DE+69cO9UxEDS5PVKGS/7/EVeLECqU91
msf6nB3RRUBPpOl8GYUm/KKFj+Wv4JNMGvLe+R/QXw5k7bKpGN1QzyxAOL1G44qZ
kFx7N91b/3iiC+aZ3LTt8uQdAFVDVcc=
-----END CERTIFICATE-----
Generated at Wed Aug 6 05:12:11 2025 by rpki-client