Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f6f0109e-10f5-311c-90e0-f41a7b098b33.roa
File:                     f6f0109e-10f5-311c-90e0-f41a7b098b33.roa (raw, json)
Hash identifier:          Fb6+iW4FJ9MN1AHtSUsKVAqJIhFdlsvFm+kSXnyB41c=
Subject key identifier:   66:CB:A1:FD:B3:81:58:2D:C3:4F:08:C4:4C:CA:07:CA:AE:A7:02:71
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F432858499F24C753967024C07EFF1980
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f6f0109e-10f5-311c-90e0-f41a7b098b33.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     54113
IP address blocks:        157.5.118.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:c7:53:96:70:24:c0:7e:ff:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=5558d118-cedd-477a-b1dc-a3a284279737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:60:90:26:79:f6:e3:58:72:87:dc:e7:84:7e:
                    ce:e7:a0:30:6a:f6:8f:ad:7e:f7:e5:94:fa:09:2c:
                    af:46:98:08:e9:12:ce:d6:88:e7:74:82:8c:1a:48:
                    28:6c:a0:bc:f8:79:56:a6:7e:ae:50:e2:16:d4:b9:
                    04:04:1d:76:69:0a:e3:39:ac:a5:9d:f0:ec:fd:4d:
                    b6:99:e4:a6:9e:bc:3e:22:7c:1c:3e:91:c8:9e:2e:
                    ae:32:4f:63:7d:8b:b7:8d:ed:32:b8:7a:7f:4d:0d:
                    46:1d:c9:17:73:6f:28:70:fb:25:60:ee:48:dd:dd:
                    9f:c9:47:fd:d8:02:ec:fd:38:0d:fe:6c:ad:b6:60:
                    e6:e3:5d:e6:22:57:4e:a3:17:dc:22:ec:db:c6:b8:
                    23:b1:4b:42:35:f7:f1:8e:cf:03:40:3b:e1:a3:df:
                    0b:33:98:8d:12:4f:40:aa:b0:a0:a3:31:94:ac:33:
                    19:96:05:07:27:67:7c:28:29:bc:ce:0c:22:68:bb:
                    4f:f4:30:51:f7:ff:23:0b:f0:86:98:c5:6a:7e:56:
                    f4:c8:f9:46:71:c1:a4:48:3b:35:21:94:3e:25:f8:
                    b5:58:b4:1f:c7:c4:d7:99:36:fe:ae:70:86:d9:57:
                    a1:46:4e:e2:ac:77:a4:d8:97:bd:ec:86:de:c2:6f:
                    9b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:CB:A1:FD:B3:81:58:2D:C3:4F:08:C4:4C:CA:07:CA:AE:A7:02:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f6f0109e-10f5-311c-90e0-f41a7b098b33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.5.118.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:47:51:41:b9:79:a1:4b:9d:3c:d7:24:74:bb:1d:70:0e:bc:
         c5:9e:2c:3c:17:0f:0e:7a:3a:9f:db:00:e5:c6:b0:88:f4:2a:
         e2:21:a7:5f:04:0e:f2:5d:8e:8b:85:65:aa:b4:f9:c1:66:6d:
         e5:ee:34:e6:bf:83:8c:3e:6b:05:d4:18:4e:22:76:8e:dd:c8:
         43:25:38:cd:fb:1f:1e:da:04:ca:e4:8f:6b:9c:02:94:b0:a3:
         92:da:24:47:83:1b:d5:35:e5:6b:66:52:26:83:4a:44:5d:6e:
         26:19:0e:38:83:43:97:39:c8:50:6a:27:47:67:a5:4f:f6:df:
         da:51:e8:e9:96:ad:e4:5d:38:86:55:66:ba:ee:98:02:21:c4:
         ce:40:31:14:22:d3:a9:a1:42:2d:b2:93:41:58:81:f4:4e:16:
         4e:df:cd:aa:9d:84:ee:ac:77:a1:36:d7:f3:7d:aa:0c:0f:0c:
         51:c4:4c:e4:ca:8e:a5:89:a1:a1:e4:8e:ac:d0:96:79:5d:b0:
         1b:74:3d:b3:31:f1:00:28:8c:d4:4b:1b:ac:9d:cf:93:ca:2c:
         66:3b:66:f5:d4:c2:94:2c:42:d7:c5:1c:f1:14:5d:85:28:ba:
         50:e3:75:b5:9a:e8:29:b3:a3:a3:2a:7f:a9:bf:1a:42:62:ce:
         23:8b:e9:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 00:52:39 2025 by rpki-client