Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c74ab22f-9025-3862-aca3-3b164127b194.roa
File:                     c74ab22f-9025-3862-aca3-3b164127b194.roa (raw, json)
Hash identifier:          IJ0HDeAmVjSXQ2whhq8kH+LkMyaLg3TchNSkjgO6We8=
Subject key identifier:   EF:CB:DE:19:D3:B1:52:3C:27:8F:60:27:3E:89:38:CC:69:21:98:AF
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584993F9E858FF5DDE4CA9C6FA80
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c74ab22f-9025-3862-aca3-3b164127b194.roa
Signing time:             Sat 19 Apr 2025 13:01:02 +0000
ROA not before:           Sat 19 Apr 2025 13:01:02 +0000
ROA not after:            Fri 18 Jul 2025 13:01:02 +0000
asID:                     54113
IP address blocks:        157.5.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:93:f9:e8:58:ff:5d:de:4c:a9:c6:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Apr 19 13:01:02 2025 GMT
            Not After : Jul 18 13:01:02 2025 GMT
        Subject: CN=7f21c9f7-dbb3-4dc6-a0e4-d3bc7f7cdfdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7f:ca:5a:c5:cd:87:76:ff:47:06:dd:e0:25:
                    c2:23:ce:e0:6c:94:20:1c:ca:b7:5d:a9:08:d3:7b:
                    e6:14:7c:2c:75:3a:27:3a:fa:fc:de:d4:38:a7:dd:
                    91:81:e6:c5:90:b0:19:bf:13:1d:d1:97:9b:31:76:
                    2e:d5:48:82:9a:cd:49:06:6f:b8:ab:d6:df:da:6f:
                    4a:ce:e0:16:df:30:66:3f:73:52:6c:fa:79:01:be:
                    01:62:76:7a:95:5c:75:e5:62:d1:f6:11:51:0d:38:
                    d5:ce:f7:79:ad:90:97:77:74:03:bb:f9:f4:d7:43:
                    b5:f2:96:9a:67:53:d3:73:1a:73:b1:2d:49:42:fc:
                    bc:28:49:07:ab:31:f2:6d:4b:03:de:88:6d:f5:7b:
                    15:ad:60:e3:af:73:dd:21:73:c6:27:2f:a1:bc:62:
                    0e:9b:7a:5f:62:22:67:be:69:6b:fc:28:1b:9f:55:
                    ae:29:81:16:df:2e:b8:72:63:75:af:20:81:1e:7a:
                    dc:d2:3d:28:60:73:d1:e8:5f:51:73:e9:c4:19:c1:
                    c2:e7:a2:67:61:d8:77:a1:27:85:15:bc:e5:af:26:
                    f0:50:72:36:67:9c:91:99:42:45:6a:cd:3d:ad:dc:
                    0a:7a:d9:a3:2a:2c:a7:28:5a:12:62:5d:aa:61:b3:
                    ef:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:CB:DE:19:D3:B1:52:3C:27:8F:60:27:3E:89:38:CC:69:21:98:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c74ab22f-9025-3862-aca3-3b164127b194.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.5.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:64:ee:1f:55:85:58:73:91:ea:6e:cd:24:7f:7d:c2:a9:4f:
         52:00:39:64:ca:a1:28:b9:63:2c:24:cf:f1:19:d1:4a:fa:1e:
         3b:64:50:b4:10:3a:8e:81:f4:84:2f:aa:c0:5a:d5:2d:82:5d:
         19:3e:2e:54:e2:7b:ef:18:a4:b5:ad:9e:7e:97:98:25:2f:ae:
         d0:25:4a:e5:1f:a6:ed:1f:4c:2d:bd:6b:30:98:7c:3b:1d:55:
         6c:ee:5d:7d:6f:6b:70:b7:db:0e:7d:f9:84:b8:e7:5a:dd:1a:
         e9:25:30:66:15:19:97:41:6c:2b:12:22:f7:15:11:aa:82:c8:
         eb:86:4c:d6:7d:e2:3b:c4:7b:6e:a3:af:a3:75:a1:22:89:d5:
         03:c5:a1:e8:b7:dd:ba:4e:30:0b:ac:59:db:b4:99:04:2f:98:
         63:a5:7d:1f:ad:99:b3:6b:09:9d:38:b8:a9:18:16:f5:2c:c3:
         ef:9b:50:8a:e5:ed:e2:06:c8:1f:d9:6a:23:94:18:08:d6:11:
         30:74:2e:f8:21:c7:39:88:21:18:50:2e:fd:64:ea:bd:4d:f7:
         31:b4:da:15:e2:49:7c:a9:dd:ee:f6:30:dc:52:76:8a:33:13:
         a7:ff:67:4a:c1:6f:cb:e5:c3:f9:2c:08:d2:d3:72:b0:1a:04:
         1b:c4:94:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:31:16 2025 by rpki-client