Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c7e543bb-6f66-3aa5-8d15-fbb50dd7a02b.roa
File:                     c7e543bb-6f66-3aa5-8d15-fbb50dd7a02b.roa (raw, json)
Hash identifier:          xBPRGecmZyHFvX1qOB7aAR5FNNWIzEfBU25EPR8Hycg=
Subject key identifier:   E3:9B:19:D7:5B:2B:9C:B7:89:3A:D0:D6:CE:56:6E:64:0A:9E:1C:70
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584A7E7B869FDE14A723BC0A0EC0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c7e543bb-6f66-3aa5-8d15-fbb50dd7a02b.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     54113
IP address blocks:        157.5.70.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:86:9f:de:14:a7:23:bc:0a:0e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=dd5351fa-d072-43ea-a020-88bbf615f810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:25:85:0e:9e:7f:11:e5:4b:37:77:81:5f:14:
                    4a:fc:56:fd:87:a2:fc:03:4e:1e:ec:7b:9c:dd:46:
                    6a:9e:10:d6:c3:94:eb:23:4f:06:14:b8:f0:59:de:
                    ff:63:71:e1:c8:bc:5c:98:e3:c3:91:60:59:8e:fd:
                    00:0a:b3:57:5b:da:32:bc:a6:ed:ac:7b:b8:00:19:
                    9f:7e:a1:23:4d:40:1a:7c:19:19:c0:09:38:40:10:
                    31:c0:46:d5:0e:28:8d:b1:cb:6f:d7:a4:9c:9b:49:
                    d1:3d:b7:da:d1:df:94:67:72:3c:32:76:db:1c:cb:
                    2d:4c:69:59:1c:71:fd:de:69:0e:5f:e9:a2:b6:d0:
                    e2:fc:54:bd:3f:41:86:69:51:2e:84:bb:65:62:6d:
                    08:2c:2f:5c:29:ad:c5:2c:d6:c8:9f:fd:31:75:9c:
                    9b:b5:a6:fe:13:fc:18:d4:7f:99:7f:37:95:ce:cc:
                    b8:6a:03:19:f5:3f:7a:dc:02:ba:fa:52:b1:f8:41:
                    60:77:78:26:6a:75:af:e1:9d:24:7d:1b:b7:c3:4b:
                    de:bb:66:e9:9b:80:4e:a0:78:24:fb:0e:c7:40:85:
                    fa:a1:23:e0:97:89:e8:e4:72:92:13:fd:b1:b9:ed:
                    01:b3:62:f0:52:f9:e7:dd:e0:78:35:36:23:78:92:
                    98:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:9B:19:D7:5B:2B:9C:B7:89:3A:D0:D6:CE:56:6E:64:0A:9E:1C:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c7e543bb-6f66-3aa5-8d15-fbb50dd7a02b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.5.70.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:e1:1f:a1:62:4c:e1:ed:95:17:58:b4:e1:08:1f:6e:d0:13:
         bb:1c:09:8e:7f:bb:0c:4d:64:0c:3d:37:a5:cd:1f:10:82:99:
         87:a4:6e:15:f3:7b:7a:ca:61:f5:72:79:53:dc:60:c2:45:ca:
         29:e9:8a:39:19:bc:07:22:d9:9e:a2:9c:ec:79:e6:80:ad:bc:
         93:3b:d7:6e:f7:13:35:8b:da:45:a7:f8:4d:8c:65:7e:4a:32:
         49:f6:8a:1a:b5:3e:c4:21:60:dc:8c:22:c8:b8:9c:9d:6c:ab:
         b9:55:b1:5d:b7:58:e4:c5:17:27:25:5a:10:34:ea:b5:0c:55:
         eb:a7:ad:de:4a:8e:ed:d5:6b:95:d1:dd:f4:b0:25:12:c6:1e:
         d5:64:d4:d8:0e:7a:5d:f0:a2:ea:68:ed:af:01:07:79:42:11:
         14:65:8c:49:49:12:7c:95:ce:4a:0a:6d:ac:00:e2:6d:6a:0b:
         0e:cb:4e:28:20:65:bc:29:aa:20:1f:00:49:66:78:d8:1e:c8:
         8b:71:8b:72:d1:99:e2:74:a4:30:83:19:d5:47:c1:3e:99:9f:
         4d:5f:99:c3:cc:52:9d:f7:0d:a4:a8:ff:59:f1:05:44:67:bc:
         c6:58:aa:cd:ec:fb:93:ee:cf:ff:28:40:d8:ef:2c:69:15:cb:
         45:74:7f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:43:09 2025 by rpki-client