Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e654915c-c83e-3650-9274-3ac5bd8d7737.roa
File:                     e654915c-c83e-3650-9274-3ac5bd8d7737.roa (raw, json)
Hash identifier:          CihwT34RAqWKPVKXXiFf7zksaZXo5tl1RS4GjVyQ7C8=
Subject key identifier:   5F:48:14:D5:97:08:00:06:0F:63:E3:76:6F:2E:AF:CD:B2:C8:9C:A6
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285849EEB5086D283A927482EAC418
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e654915c-c83e-3650-9274-3ac5bd8d7737.roa
Signing time:             Thu 22 May 2025 01:00:51 +0000
ROA not before:           Thu 22 May 2025 01:00:51 +0000
ROA not after:            Wed 20 Aug 2025 01:00:51 +0000
asID:                     54113
IP address blocks:        131.125.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ee:b5:08:6d:28:3a:92:74:82:ea:c4:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: May 22 01:00:51 2025 GMT
            Not After : Aug 20 01:00:51 2025 GMT
        Subject: CN=17e15e36-e2da-465e-aa43-9c25c85e7563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:cb:d3:78:3e:cb:b3:f4:b5:8b:b4:e0:6a:ef:
                    7b:0d:88:ac:2d:2d:0b:a8:c9:7d:db:d8:5d:1c:4a:
                    3e:f0:9b:38:19:2e:6a:b1:d2:07:89:36:df:a3:31:
                    9d:f2:95:52:8a:29:25:99:11:89:3f:6b:55:2d:b3:
                    9a:0f:ac:b7:99:ab:17:ec:5e:63:a4:8e:1b:9c:73:
                    32:5a:2c:b9:97:33:65:b9:0c:a3:cb:58:56:8c:55:
                    b4:23:30:49:b9:2d:a9:1d:46:7e:75:2a:b1:de:1c:
                    72:be:83:c4:52:3a:71:95:a8:93:79:1f:f8:d6:13:
                    25:a4:2c:78:31:e7:5c:14:2b:c2:a5:10:a9:f4:96:
                    c0:ef:57:a5:e3:c6:f6:f8:62:6a:b7:a0:37:fa:07:
                    0d:bc:b0:fc:f6:f6:ec:0f:d2:80:2a:f5:5c:50:3e:
                    a4:e5:8b:db:8a:eb:49:da:99:8b:9d:8d:c2:8d:31:
                    30:79:63:c8:c9:32:24:4e:d5:b9:0b:22:aa:1d:a0:
                    32:6f:fb:d7:ed:05:6c:ca:aa:ba:51:4d:ba:78:02:
                    6e:36:e4:85:91:ec:42:3f:c5:63:74:3d:51:e8:47:
                    b7:07:3a:be:97:f9:34:ca:1a:4f:80:01:4c:22:c5:
                    95:b2:ca:36:69:b8:bd:58:cd:73:44:24:ae:82:c8:
                    3e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:48:14:D5:97:08:00:06:0F:63:E3:76:6F:2E:AF:CD:B2:C8:9C:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e654915c-c83e-3650-9274-3ac5bd8d7737.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.125.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:32:06:d2:24:1d:8e:41:d7:31:51:01:ca:ac:90:3b:74:25:
         e7:89:50:90:9f:cd:31:f7:90:cb:80:d2:6e:8e:d4:2b:26:9d:
         23:69:82:a2:14:c4:7a:35:f1:d6:2c:23:f6:e0:ea:60:c8:7c:
         9e:f1:9f:78:32:bf:fb:29:eb:d2:ea:2a:ca:e9:d7:d8:19:bd:
         19:78:44:8e:f2:4d:92:43:29:05:d3:2e:e2:37:4d:b4:e7:90:
         15:67:36:6e:3b:32:82:e9:dc:5e:05:13:7a:bb:e7:95:f4:b0:
         4f:27:95:9e:19:f9:60:a0:93:eb:5b:0f:88:00:4f:e9:33:bc:
         87:02:ca:dc:0e:f9:53:b9:1e:a9:9f:60:7d:1e:11:30:c8:6b:
         4e:14:06:0b:e1:14:ef:72:33:d1:60:53:b7:e1:ca:eb:4e:78:
         8f:1c:c5:70:3d:01:a3:a2:64:97:04:09:11:26:48:77:4e:26:
         c7:61:1a:0e:98:bf:2b:d0:f1:9c:30:8a:f1:a6:d7:80:97:3b:
         cc:62:6c:e1:46:8e:55:31:cc:31:12:92:0d:af:ba:2e:a9:70:
         92:66:a7:98:e0:ef:7d:00:62:22:02:11:8b:aa:e6:2f:b0:b5:
         b0:4f:55:6f:6f:0f:1c:35:25:23:40:18:b3:4b:56:86:67:83:
         8e:1e:d8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 00:47:12 2025 by rpki-client