Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cbd6136b-de53-3db6-bd13-8c817ef1bb18.roa
File:                     cbd6136b-de53-3db6-bd13-8c817ef1bb18.roa (raw, json)
Hash identifier:          3SgfTWzbQCaQk1ZJGUvY3+Ex7inuUSihAsybdWuhyec=
Subject key identifier:   29:4C:90:7F:12:1D:01:FE:99:FC:90:52:DB:2B:E0:94:A0:C3:0C:53
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584A7E7B87E51B88B0EA035557A8
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cbd6136b-de53-3db6-bd13-8c817ef1bb18.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     54113
IP address blocks:        157.5.78.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:87:e5:1b:88:b0:ea:03:55:57:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=4b868676-5b43-42a6-bdec-1a6d9cc19ac6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f8:02:9f:18:09:64:81:75:ec:fa:f7:54:36:
                    e7:e2:ea:e2:5a:69:7d:ca:2a:b7:5c:98:73:82:84:
                    00:fc:6b:62:ee:b8:27:06:33:48:ae:b2:4d:47:34:
                    b5:ca:79:c2:9c:af:73:93:86:74:0b:5c:bc:24:fd:
                    f0:9c:7b:a8:fe:f9:13:53:2d:49:b0:7f:a9:71:34:
                    ed:3f:85:56:23:ef:d7:6b:be:0c:c6:e8:09:40:e8:
                    de:b9:3b:84:d8:b9:da:53:0a:ce:e1:3f:55:e9:58:
                    4d:1d:8c:58:7a:3f:13:0d:04:ea:79:0b:fe:57:f8:
                    87:5f:65:af:d3:6f:f5:56:45:9b:97:3b:c8:fc:3c:
                    68:23:44:27:e0:d4:6a:d7:ba:15:fe:f5:2a:e0:aa:
                    77:50:cd:79:f2:3b:0b:ce:f9:00:fa:ed:0c:13:75:
                    5e:da:a8:ca:18:ce:d3:0a:d7:d0:64:dc:74:42:ea:
                    88:0f:19:fb:07:fb:7c:7f:18:88:43:a8:c2:2d:a9:
                    04:56:09:b0:40:8d:0e:77:f1:66:34:ac:2c:02:05:
                    a4:8e:96:af:42:91:91:5e:77:d3:39:17:6e:0f:c7:
                    61:20:4e:16:ed:3d:e6:66:ad:1a:98:98:5c:d9:f4:
                    9d:ae:9b:99:ad:81:c9:84:cc:ab:22:55:0f:aa:c0:
                    48:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:4C:90:7F:12:1D:01:FE:99:FC:90:52:DB:2B:E0:94:A0:C3:0C:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cbd6136b-de53-3db6-bd13-8c817ef1bb18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.5.78.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:60:50:04:39:0a:42:39:4a:3c:b2:5b:58:c0:68:84:7c:55:
         ed:57:26:0a:f7:bc:2d:b3:43:50:bc:3c:cc:3e:12:51:53:fa:
         7b:33:77:7a:1e:cd:6c:8f:95:e0:a5:70:a1:b8:a7:84:07:4e:
         e9:f1:c5:f6:fd:ec:e3:26:3b:fe:c0:8f:1d:57:4d:d9:47:a8:
         23:d1:fc:17:08:0b:42:f2:24:88:54:41:d2:69:b2:02:23:52:
         9a:58:ee:b5:0e:f8:c7:66:36:d1:fd:b8:7c:80:ae:26:7a:c0:
         a2:83:7b:f1:0f:a0:16:0e:a3:18:53:3f:b0:40:fe:06:58:63:
         e1:a1:61:54:e0:be:f3:c9:a7:d3:ad:a3:fb:3f:03:f6:ba:aa:
         e6:25:c6:46:2b:ae:6e:93:cf:e6:f9:fd:ab:2c:28:1f:75:2b:
         0c:06:87:2f:45:dd:d0:3f:b0:47:f1:47:43:e6:66:07:f4:da:
         bc:50:85:e1:71:d1:12:9a:db:d1:ca:b1:a0:2a:24:d1:e3:8e:
         6e:c0:0a:50:f2:e8:6b:47:07:36:e9:cd:8f:cd:7b:a9:44:1c:
         a0:ab:09:24:29:c6:88:f4:c1:70:4d:dc:cc:0f:72:8b:0d:e1:
         f1:6b:f8:74:1a:37:d5:94:cd:58:6e:46:4d:db:57:28:51:56:
         57:2b:2d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:48:58 2025 by rpki-client