Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/d758a7cc-ee77-3a29-b86b-f5781250f721.roa
File:                     d758a7cc-ee77-3a29-b86b-f5781250f721.roa (raw, json)
Hash identifier:          3W6Ay4EdRl0SBbQgxUZn5sWOUnePJL/fH7NgbsZxlKU=
Subject key identifier:   71:8B:42:44:62:43:16:AC:DC:51:56:13:0C:EE:82:B4:E2:0C:CB:FB
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584A348027E3C8DC6DF2A764AF00
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/d758a7cc-ee77-3a29-b86b-f5781250f721.roa
Signing time:             Mon 16 Jun 2025 01:00:49 +0000
ROA not before:           Mon 16 Jun 2025 01:00:49 +0000
ROA not after:            Sun 14 Sep 2025 01:00:49 +0000
asID:                     54113
IP address blocks:        157.52.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:34:80:27:e3:c8:dc:6d:f2:a7:64:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jun 16 01:00:49 2025 GMT
            Not After : Sep 14 01:00:49 2025 GMT
        Subject: CN=7d4f2321-3979-42af-8794-c4bd61351379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e7:92:b6:7d:64:26:6d:20:e1:3d:f6:2b:c5:
                    fa:ce:99:e5:f4:0a:cf:d6:53:a3:07:53:93:20:f6:
                    21:a3:d2:06:32:ac:b4:fb:17:2c:c2:45:88:9a:70:
                    7a:ac:09:72:e3:fb:9a:75:98:ca:06:84:2b:31:99:
                    03:a8:d8:f2:18:cf:e9:54:e9:04:29:a6:6c:ed:68:
                    f3:44:0b:98:e5:14:5d:f7:d4:15:e4:7c:92:e8:2d:
                    75:92:32:7d:46:81:08:3f:86:15:a4:c1:31:03:23:
                    5f:08:4f:1c:0a:a4:3d:96:87:6e:f8:38:be:50:55:
                    52:a3:05:15:3c:6f:2a:ba:bd:41:01:13:d2:73:70:
                    00:c7:33:1c:db:c1:9e:bd:72:12:29:ee:c3:6e:67:
                    00:64:c8:e3:4b:a7:0a:9b:70:33:ec:cc:15:a6:81:
                    ad:83:d2:77:6e:0e:6c:bf:31:fc:77:9f:76:de:e2:
                    98:ab:9b:0b:95:26:dd:2b:bf:30:42:2d:1d:39:a5:
                    54:b2:60:16:45:63:16:ff:44:cf:a0:71:41:de:69:
                    79:40:a9:eb:3c:0b:7b:f3:50:99:4e:71:23:16:02:
                    bd:6a:d4:45:a6:ca:aa:b8:62:84:a7:a2:9d:18:4f:
                    e2:4d:10:ac:02:f4:40:17:0b:f5:5a:9a:5c:93:75:
                    38:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:8B:42:44:62:43:16:AC:DC:51:56:13:0C:EE:82:B4:E2:0C:CB:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/d758a7cc-ee77-3a29-b86b-f5781250f721.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.52.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:d1:15:73:26:83:75:a3:19:e7:6b:20:07:4d:c9:6b:aa:ef:
         8e:31:70:db:ed:35:1b:7b:0c:5e:fd:cb:46:fe:b4:f5:7c:f9:
         f0:9e:1a:1a:90:6b:c7:66:4d:df:80:1e:b7:ea:6f:2e:1b:21:
         86:ad:a9:58:07:38:71:0d:a1:1a:fd:64:48:a0:64:77:6c:65:
         24:cd:8f:d6:7a:db:2d:6f:7a:29:07:5f:3b:bd:9c:95:df:79:
         45:09:ff:da:6a:47:31:49:2f:de:2f:16:96:df:70:a1:a8:70:
         ee:5e:7f:f0:8c:dc:0c:5b:39:f5:4d:8d:2a:90:81:42:0c:9b:
         ec:2a:0e:5b:32:ee:19:e6:54:6e:d0:4f:c2:89:68:51:02:89:
         a4:fe:e7:25:80:ba:86:c0:4a:52:0b:36:47:94:06:46:b2:a1:
         d1:c1:19:ce:15:03:61:53:41:e0:f9:a1:79:ef:4c:14:e7:f8:
         e1:42:e6:dc:76:09:11:78:45:c4:3f:4b:e7:57:70:08:69:6c:
         0e:c4:c0:1c:69:80:49:46:8d:a0:4d:9c:a7:aa:92:43:0d:0d:
         09:e7:52:28:b1:f9:04:77:ff:62:14:f7:19:e5:fc:a8:e6:0c:
         34:00:2a:7c:e6:b7:db:ba:bc:f7:cd:75:d3:ef:9d:a9:1a:14:
         c6:2b:a9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:06:00 2025 by rpki-client