Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1757d4c8-870e-3a94-8978-0cf9aa872ff2.roa
File:                     1757d4c8-870e-3a94-8978-0cf9aa872ff2.roa (raw, json)
Hash identifier:          D+fJTjKkrq45RZq1lrU6LySZeZvTY10SvIs0IQDENy0=
Subject key identifier:   B5:15:3F:2E:D2:65:73:B8:3F:47:86:C6:E1:61:2B:16:C0:37:94:04
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584D143D81FB0282E26F81F98080
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1757d4c8-870e-3a94-8978-0cf9aa872ff2.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     54113
IP address blocks:        157.5.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:81:fb:02:82:e2:6f:81:f9:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=2a62cc18-f733-49ed-8359-1aab9d998c13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:2c:92:30:98:2b:97:aa:8a:0c:e5:71:05:c6:
                    99:06:c4:c3:1e:d6:07:be:29:dc:cd:ee:04:63:65:
                    d2:07:dc:cf:8d:ec:b7:f4:2c:aa:cd:72:94:b6:da:
                    a3:8d:2d:a3:ad:c6:e1:2a:70:88:95:38:d5:ad:bf:
                    af:34:59:22:ed:da:8d:b9:e7:ba:c2:29:a2:10:c5:
                    5b:ce:c2:6a:27:2c:b3:49:e6:2e:8c:40:1c:a6:f7:
                    f3:2a:22:72:0a:74:94:5e:23:03:fa:ca:97:5d:45:
                    f6:87:ab:4e:22:68:8b:7d:08:fb:98:69:5c:43:1c:
                    d4:68:83:b2:3e:7d:9b:c3:10:fc:98:22:63:fe:34:
                    2e:62:20:4b:3f:49:67:eb:ff:53:65:ec:f0:9d:ff:
                    83:77:e8:91:e8:0b:64:3c:76:e3:aa:f3:12:f1:a1:
                    9e:a5:7d:f5:d4:51:21:99:be:c0:68:76:cc:5b:07:
                    51:41:8d:2b:5e:30:75:a5:41:03:2a:92:fa:26:41:
                    00:36:09:aa:43:ad:9c:9e:d9:30:83:12:21:49:7a:
                    ee:b3:51:23:56:2c:0c:93:0e:18:ef:23:d3:9a:d8:
                    df:2f:cf:a6:33:02:d8:ab:dd:fe:09:1e:5c:88:de:
                    29:58:99:0d:45:2e:9c:7c:ca:43:ed:50:0b:57:28:
                    34:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:15:3F:2E:D2:65:73:B8:3F:47:86:C6:E1:61:2B:16:C0:37:94:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1757d4c8-870e-3a94-8978-0cf9aa872ff2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.5.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:cb:96:fe:69:0f:b5:67:eb:63:5c:d0:f1:58:59:9f:6e:0d:
         c0:9f:c6:76:47:0e:e0:ae:88:cc:fc:11:fd:45:01:7a:53:ae:
         e5:ef:c5:09:a2:3b:24:fa:03:3e:19:43:15:80:4a:04:8f:07:
         d7:37:da:47:e5:08:3b:36:2b:6e:a8:6d:b7:85:3c:65:85:fe:
         bd:da:2a:c3:eb:68:e9:2e:d8:2b:3e:bf:87:c3:5e:c1:c2:89:
         0e:48:cb:1d:8f:31:4a:b3:f2:36:32:6c:a6:62:4e:f0:2a:82:
         ec:b0:43:fb:f7:b1:71:90:90:88:1f:ad:49:39:41:e1:24:27:
         60:77:a1:b2:fe:f9:bb:97:93:98:f9:58:ab:f5:58:ff:7b:4c:
         e3:ad:b5:e6:a1:64:23:99:71:a6:c7:58:f6:c8:f1:67:05:51:
         bf:de:34:4f:a4:1b:20:bb:a1:a0:28:e9:ed:c0:63:d2:61:93:
         fe:5a:71:e6:ed:df:30:67:c7:ed:4a:df:05:8d:52:40:f9:f7:
         11:1e:a2:b7:62:09:7c:98:b4:ac:9c:93:32:1f:64:c4:c1:30:
         15:7b:4b:3a:32:88:be:e5:fe:4f:0c:53:4b:a9:fd:32:4f:ed:
         a2:ed:e2:8c:3b:6b:3e:74:dc:85:6f:02:71:6b:8b:5e:5d:23:
         4d:bd:d5:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:27:25 2026 by rpki-client