Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4f0a59d7-5ab6-3440-bc96-f74fd4487dbb.roa
File:                     4f0a59d7-5ab6-3440-bc96-f74fd4487dbb.roa (raw, json)
Hash identifier:          Ex7s6R+P4WDbcvp4SCFhCNgTRI8sp4srZ3xN0d+JHqU=
Subject key identifier:   69:77:FB:EB:4A:71:40:14:91:4C:E4:92:1F:3E:51:B2:E7:4D:88:B4
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584B540C6DF5B20A512248A8E200
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4f0a59d7-5ab6-3440-bc96-f74fd4487dbb.roa
Signing time:             Sat 27 Sep 2025 01:00:33 +0000
ROA not before:           Sat 27 Sep 2025 01:00:33 +0000
ROA not after:            Fri 26 Dec 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        157.5.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:54:0c:6d:f5:b2:0a:51:22:48:a8:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Sep 27 01:00:33 2025 GMT
            Not After : Dec 26 02:00:33 2025 GMT
        Subject: CN=1d16aab5-309a-42af-8df1-c44eb4fb5c46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bd:19:d3:ce:51:0d:ac:24:a1:d0:28:3a:d2:
                    75:bd:71:67:11:00:48:e7:ca:24:25:7e:8d:e5:30:
                    ad:8f:47:33:46:41:50:67:11:86:33:f4:74:17:34:
                    e8:d2:bd:ea:71:c9:c7:26:5b:3a:1c:17:5b:27:3c:
                    eb:3b:ac:aa:51:41:15:20:30:e2:5f:18:6c:ed:ff:
                    13:ae:a7:f9:e7:e8:d3:5b:a4:14:3b:f2:2f:fc:b3:
                    35:90:33:05:9c:4c:72:9c:e6:43:62:35:01:fa:3d:
                    4e:22:d5:65:04:15:fc:f7:b1:dd:cd:75:e2:e6:93:
                    e6:3a:7b:74:28:51:93:64:4b:25:78:b8:b0:76:81:
                    b6:6c:ea:90:8e:07:b1:4c:38:fb:61:84:3d:a3:14:
                    0c:38:00:da:da:f9:1f:a8:c0:1d:d4:5d:4d:ab:d0:
                    ed:8e:88:b4:aa:29:13:b7:2b:35:e7:08:6a:89:eb:
                    7a:62:61:48:9d:7f:e4:cf:51:e8:6e:96:ec:72:e1:
                    01:75:7d:fa:c2:56:7e:dc:38:5b:f5:63:f8:c0:d0:
                    21:5f:c3:a2:13:09:d0:92:8b:42:5f:b5:45:66:bb:
                    40:32:7d:92:89:8f:6e:29:01:b7:56:22:53:12:30:
                    b3:84:5d:21:17:d9:78:bc:ed:a9:38:30:79:c7:a6:
                    dd:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:77:FB:EB:4A:71:40:14:91:4C:E4:92:1F:3E:51:B2:E7:4D:88:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4f0a59d7-5ab6-3440-bc96-f74fd4487dbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.5.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:43:25:a9:78:97:5d:ec:2a:f0:ed:c3:09:9a:e4:78:8f:a4:
         3f:5f:f0:17:7a:c9:42:a9:e9:2e:71:55:81:d6:36:a5:02:0b:
         ce:9e:3c:42:ea:3f:43:12:5f:83:80:c5:86:64:59:1d:d5:d4:
         80:da:a9:6b:50:12:d9:8e:29:87:e7:fa:18:1e:e7:94:0c:52:
         a4:e9:eb:7b:40:df:44:31:34:20:8c:72:c2:03:be:21:97:d0:
         d3:3f:10:16:43:10:fe:74:f0:82:85:ed:7c:60:ad:1f:e4:c0:
         82:39:a9:f6:eb:ea:b1:15:1d:ce:f6:10:3b:e5:13:fa:2a:af:
         fd:46:ba:e6:48:9a:a1:7b:99:7e:39:1d:5b:bc:bf:f5:1f:86:
         f4:da:9c:d9:3d:9f:2d:47:ef:ef:9f:c0:52:0d:b4:d8:74:e3:
         69:49:cb:70:f8:5f:b7:05:7f:44:08:22:81:d1:4e:e0:f4:9f:
         a7:5d:a6:77:a8:27:a6:2e:f6:ad:fa:a3:3d:33:a9:df:2e:df:
         3f:c9:4c:39:ad:5d:cc:f8:6d:7d:26:2f:25:d6:90:8e:13:61:
         63:e1:5f:25:3a:95:ec:d7:5d:45:2a:64:82:fc:02:90:4d:08:
         cc:f5:50:f6:4d:21:fe:50:5c:9d:db:5f:13:d3:e7:4d:b0:69:
         16:f3:3f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:54:41 2025 by rpki-client