Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/8cdc9ace-5255-3f8d-8979-c48477c57f3a.roa
File:                     8cdc9ace-5255-3f8d-8979-c48477c57f3a.roa (raw, json)
Hash identifier:          szoK4WmRCGxZPUljcnPLjwLmneGHZmBJ/FrfzqVgawI=
Subject key identifier:   27:DD:C3:E2:2D:BA:DA:86:54:88:FC:FC:53:3F:39:65:58:0A:D6:E4
Certificate issuer:       /CN=c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b
Certificate serial:       010D0C9F43285849F44A594E627FC6A10F55F500
Authority key identifier: 60:87:0B:AF:04:2C:FC:75:F9:1A:BB:8B:C4:9E:4C:35:6F:F7:5F:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/8cdc9ace-5255-3f8d-8979-c48477c57f3a.roa
Signing time:             Sat 24 May 2025 01:00:49 +0000
ROA not before:           Sat 24 May 2025 01:00:49 +0000
ROA not after:            Fri 22 Aug 2025 01:00:49 +0000
asID:                     22252
IP address blocks:        157.188.0.0/16 maxlen: 16
                          157.188.0.0/18 maxlen: 18
                          157.188.12.0/23 maxlen: 23
                          157.188.128.0/19 maxlen: 19
                          157.188.192.0/20 maxlen: 20
                          157.188.208.0/20 maxlen: 20
                          157.188.252.0/22 maxlen: 22
                          161.185.0.0/16 maxlen: 16
                          161.185.0.0/17 maxlen: 17
                          161.185.4.0/24 maxlen: 24
                          161.185.7.0/24 maxlen: 24
                          161.185.30.0/23 maxlen: 23
                          161.185.32.0/20 maxlen: 20
                          161.185.150.0/23 maxlen: 23
                          161.185.151.0/24 maxlen: 24
                          161.185.152.0/23 maxlen: 23
                          161.185.160.0/24 maxlen: 24
                          161.185.161.0/24 maxlen: 24
                          161.185.182.0/24 maxlen: 24
                          161.185.208.0/23 maxlen: 23
                          161.185.224.0/23 maxlen: 23
                          167.153.0.0/16 maxlen: 16
                          167.153.0.0/17 maxlen: 17
                          167.153.128.0/17 maxlen: 17
                          167.153.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f4:4a:59:4e:62:7f:c6:a1:0f:55:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b
        Validity
            Not Before: May 24 01:00:49 2025 GMT
            Not After : Aug 22 01:00:49 2025 GMT
        Subject: CN=b081c20b-6876-4e4a-8803-320666ee473b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b1:00:eb:ee:98:d2:cb:f1:20:09:9d:cb:34:
                    a6:76:f8:d7:22:61:cc:cb:5e:ca:a0:eb:44:bc:e9:
                    50:83:63:1e:c6:22:b6:fd:10:31:04:e9:c8:f8:56:
                    26:5c:6e:57:8a:b5:71:96:d0:9c:4e:0f:e2:26:d7:
                    87:3e:5a:ed:d0:07:bc:74:81:c5:82:a1:5a:e4:45:
                    a5:72:06:68:7a:90:65:b2:49:b3:bb:fb:ed:16:31:
                    14:b6:15:0d:7c:f6:ce:00:b1:f8:68:18:05:1b:99:
                    81:2c:a9:41:8b:6d:79:16:c1:e0:a9:85:97:64:53:
                    a5:06:00:6b:56:20:8c:5e:8d:38:c0:ce:36:4d:ea:
                    c8:04:c9:8c:0d:58:b5:05:86:a1:10:53:56:3e:bb:
                    be:58:33:ec:f9:ce:72:e3:c0:44:09:ab:fb:74:cf:
                    5a:4b:d3:71:a9:54:1e:2e:3a:8b:e9:78:74:6e:ac:
                    af:b4:50:23:76:a3:c1:88:af:cf:5f:3c:4e:e3:ef:
                    d1:13:93:a6:1e:2f:eb:50:51:56:36:b9:b2:e0:3c:
                    8a:b2:b8:ee:89:54:ce:4d:a2:2f:46:d5:9f:88:6f:
                    d6:cc:eb:45:72:62:c5:cf:ca:e2:70:56:92:09:4f:
                    5e:38:2a:4c:d4:c6:93:74:58:d9:20:30:ca:14:32:
                    74:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:DD:C3:E2:2D:BA:DA:86:54:88:FC:FC:53:3F:39:65:58:0A:D6:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/8cdc9ace-5255-3f8d-8979-c48477c57f3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.crl

            X509v3 Authority Key Identifier:
                keyid:60:87:0B:AF:04:2C:FC:75:F9:1A:BB:8B:C4:9E:4C:35:6F:F7:5F:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.188.0.0/16
                  161.185.0.0/16
                  167.153.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:01:8e:2f:86:ca:2e:19:fa:73:65:c3:68:be:7a:77:dd:c4:
         20:dd:d4:98:26:a0:e2:76:f4:a5:02:2f:48:46:6c:8d:a2:4f:
         80:7a:06:3e:2c:15:2e:1b:12:f9:db:03:b8:72:3b:e9:13:62:
         e8:89:40:04:7b:69:80:c4:72:f9:d4:11:f3:d4:21:01:98:e0:
         d0:3e:92:c9:d9:2f:14:d0:0b:71:52:08:e7:5c:71:fd:e2:04:
         bd:94:2d:2f:0b:28:3e:ff:d6:0f:8e:17:0b:bc:56:6f:e8:9b:
         f4:03:c5:0e:3d:f2:83:15:24:08:1c:e7:45:32:1a:61:e5:be:
         ea:e8:06:f0:8a:83:8f:5f:1b:9a:66:13:93:6b:49:62:91:6a:
         6b:42:97:b4:81:93:80:ed:e7:e5:08:57:08:03:eb:08:58:00:
         24:cc:4b:25:ae:24:9b:87:a9:33:e1:30:38:0a:42:63:0d:a8:
         db:2b:7c:4d:f1:f2:fa:68:ae:a0:eb:28:d5:84:bb:a8:3c:71:
         a0:92:4f:07:57:b9:95:7a:34:80:52:ee:f3:95:1f:1c:53:b8:
         9a:6b:9e:00:18:a8:36:df:ec:9f:63:f9:2f:39:ff:74:9d:8e:
         fe:81:34:61:b2:3a:02:c9:79:4a:eb:b4:5b:46:a4:c1:7f:fc:
         3d:47:5d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:06:49 2025 by rpki-client