Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/ea90d5b5-3eb8-361f-b03c-382ba5e8f68c.roa
File:                     ea90d5b5-3eb8-361f-b03c-382ba5e8f68c.roa (raw, json)
Hash identifier:          fwXc7LktZ4t2rdCxZjs8RR54RCMFRUpXFJUrlWVZbGM=
Subject key identifier:   2E:29:63:1D:B6:C0:C8:A3:96:18:5D:A6:8D:37:67:85:EA:D1:A5:7E
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584996C49FF4279E10551CBF4E00
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/ea90d5b5-3eb8-361f-b03c-382ba5e8f68c.roa
Signing time:             Sun 20 Apr 2025 13:01:01 +0000
ROA not before:           Sun 20 Apr 2025 13:01:01 +0000
ROA not after:            Sat 19 Jul 2025 13:01:01 +0000
asID:                     0
IP address blocks:        157.133.208.0/22 maxlen: 24
                          157.133.212.0/23 maxlen: 24
                          157.133.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:96:c4:9f:f4:27:9e:10:55:1c:bf:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Apr 20 13:01:01 2025 GMT
            Not After : Jul 19 13:01:01 2025 GMT
        Subject: CN=ce41bd38-6e20-45c2-a1dd-f34a16432ddf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:76:90:6b:fe:36:75:77:c3:c3:9f:e3:55:e7:
                    ec:10:ab:42:ef:07:ec:6a:ad:ac:2f:bd:65:92:0c:
                    08:45:22:44:23:44:71:f0:59:bb:db:71:b9:25:bb:
                    56:80:6e:41:2f:58:d1:0d:1c:32:87:08:e4:0b:03:
                    02:b7:53:7a:b8:bd:a4:8f:e9:a0:c7:60:49:f5:65:
                    07:f8:27:13:0a:d6:fb:5b:b7:9f:89:ff:16:b0:f1:
                    54:6b:19:db:76:ec:55:0e:33:8c:32:89:4c:96:f4:
                    86:25:69:6b:8f:c2:68:c2:7e:fc:6f:75:96:bb:e7:
                    58:9c:63:75:ad:ad:d1:48:70:28:f6:68:7f:fa:26:
                    90:64:18:ae:f5:25:fd:2f:d8:16:85:6c:f4:30:48:
                    d3:67:81:b0:db:59:df:ad:e9:17:79:59:67:45:c9:
                    ac:52:10:55:04:0c:57:df:7f:75:ea:d6:00:74:6a:
                    ff:cb:28:28:1f:0d:40:8e:99:f7:1d:a9:2a:d5:cc:
                    94:f3:63:de:7a:8f:18:2c:29:e9:03:36:2c:72:a0:
                    30:2f:39:21:a3:ec:76:66:f5:6a:a2:c4:81:4f:3a:
                    2e:d0:97:4c:9a:a9:0a:af:64:12:3f:57:ea:b0:6e:
                    52:a4:00:af:cf:06:6c:6c:40:fc:18:d8:96:fd:8e:
                    39:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:29:63:1D:B6:C0:C8:A3:96:18:5D:A6:8D:37:67:85:EA:D1:A5:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/ea90d5b5-3eb8-361f-b03c-382ba5e8f68c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.133.208.0-157.133.214.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:7f:28:47:42:7c:1d:86:96:6e:70:4f:23:6f:a4:0f:56:3f:
         38:22:6d:46:67:74:a5:24:2d:7a:e3:02:66:b4:ef:a0:c2:2c:
         16:38:ea:35:d2:5b:3d:95:bc:39:e6:6e:9a:ae:c3:e8:4e:96:
         e1:5d:38:41:7d:33:5d:9b:5d:fa:0d:e6:36:a5:2e:5e:7e:6c:
         77:f6:98:6e:58:54:0b:e6:25:fd:17:11:ae:38:ce:0d:fc:fd:
         0d:c2:23:5c:1d:7d:78:c0:6b:31:29:04:78:26:5c:ca:57:ae:
         2e:38:8e:8b:42:aa:69:4b:5c:ee:6e:ff:8a:05:8a:21:e3:ee:
         84:3c:0e:b4:12:98:e4:30:4c:ac:dd:d1:09:2a:1c:76:f2:00:
         21:f1:7d:f3:1a:0b:4f:fb:63:f6:d9:76:36:1f:59:e8:d1:39:
         40:d1:97:34:76:0f:9a:4c:9d:04:12:71:48:8a:07:e8:e6:8b:
         3a:7f:be:da:0b:2d:82:a1:18:eb:dd:19:af:c5:42:52:7e:ec:
         22:49:88:34:1d:3c:8c:33:c5:0f:8f:a4:a2:28:fb:91:54:aa:
         e4:3e:00:b1:73:b5:8e:6d:28:89:80:96:3b:17:11:bb:66:c9:
         62:65:16:ce:3c:2f:78:cf:0b:40:93:00:72:a7:fd:27:c8:d5:
         9b:91:fc:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:49:23 2025 by rpki-client