Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5424cc07-aebd-3064-9999-b42c486ad460.roa
File:                     5424cc07-aebd-3064-9999-b42c486ad460.roa (raw, json)
Hash identifier:          4V1whDmWm9CEeXj4XwRsN/GksVHcjsqA8cseBTi2+AI=
Subject key identifier:   0A:1F:B4:42:0F:2D:16:FA:2F:9F:33:8E:09:67:48:6D:3F:77:5C:D4
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584ACF710242E0F80397CBBEE2D8
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5424cc07-aebd-3064-9999-b42c486ad460.roa
Signing time:             Sun 10 Aug 2025 13:00:41 +0000
ROA not before:           Sun 10 Aug 2025 13:00:41 +0000
ROA not after:            Sat 08 Nov 2025 14:00:41 +0000
asID:                     54113
IP address blocks:        131.125.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cf:71:02:42:e0:f8:03:97:cb:be:e2:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Aug 10 13:00:41 2025 GMT
            Not After : Nov  8 14:00:41 2025 GMT
        Subject: CN=59c33293-d107-432b-978a-e5f17315ed88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9d:68:c5:eb:61:ef:9e:45:55:1c:b0:ed:ff:
                    80:8c:b7:20:76:a4:13:91:45:fb:92:01:42:05:7d:
                    c7:99:ae:dc:57:a8:21:ab:f6:ca:4c:ba:12:e6:9d:
                    61:0a:7d:32:f9:57:1e:dd:83:43:8e:b8:5a:81:bd:
                    b3:b9:ca:6e:fe:1c:81:ab:09:ed:21:4b:d8:06:a1:
                    88:08:57:99:9e:59:0b:1d:95:2d:cf:2e:a3:60:c6:
                    d7:b8:c7:da:06:c1:f7:67:f7:fd:2a:3c:7c:9d:51:
                    80:3f:b1:66:73:96:23:98:3f:57:69:3b:f0:62:dc:
                    95:47:74:23:5f:e1:18:0c:ba:4d:2c:38:a2:9f:67:
                    b1:f0:0f:64:53:09:19:f5:ae:e2:9a:e5:ed:7c:7e:
                    1f:7b:00:df:55:21:e1:a7:bc:6b:36:8a:38:c6:67:
                    fc:e9:27:c7:8d:1a:2f:11:f9:c2:1f:fd:e0:9f:d1:
                    dc:9c:07:bf:d0:c2:f8:44:ea:56:48:72:5b:77:39:
                    06:db:96:78:13:95:de:90:f0:20:02:12:d7:0f:4f:
                    d3:7f:71:8c:a1:90:ac:aa:da:78:60:f4:3e:b2:af:
                    67:25:9d:d6:74:d0:54:93:72:27:a5:6f:c8:6e:b6:
                    3b:f2:da:d9:ac:2a:0c:2e:72:e6:ef:27:e3:8b:53:
                    6d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:1F:B4:42:0F:2D:16:FA:2F:9F:33:8E:09:67:48:6D:3F:77:5C:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5424cc07-aebd-3064-9999-b42c486ad460.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.125.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:25:15:dd:b6:04:3d:c4:a5:ab:5b:b3:6e:fe:01:6d:96:6e:
         40:95:17:50:1c:c1:3b:9d:c7:c7:6c:05:cd:4e:9b:51:fb:48:
         cc:7a:0a:a0:76:2f:a1:9c:b0:80:9b:08:ce:14:c5:5e:98:2d:
         ac:a0:1e:21:68:42:33:64:b8:69:16:39:52:e1:3c:5a:8f:fb:
         f4:be:25:bc:9e:a6:f1:b2:2b:d1:57:99:c9:38:98:a3:4e:8c:
         8a:f7:2a:96:47:07:a0:c3:eb:da:99:9e:61:a5:46:5e:45:a7:
         d3:ef:87:b3:4a:3a:1b:ae:0b:b6:e1:f5:8e:a9:33:ed:be:3b:
         12:ed:dd:4c:69:7a:0c:18:42:40:36:b7:06:e9:32:99:ef:09:
         28:d7:c8:91:8e:c3:64:dc:8e:1f:33:c8:04:ec:b5:88:bb:b1:
         ab:cb:86:31:18:02:36:cd:6a:46:bf:e4:c3:a2:6a:d0:f9:1b:
         1c:f2:c7:09:67:1e:0e:c2:ca:25:a9:43:bb:a6:d0:31:e8:be:
         76:e2:10:cd:64:73:49:e3:7e:75:27:9a:10:a6:7f:f3:f4:7c:
         2d:c5:9e:98:bd:cf:9e:30:1f:74:f2:15:f8:a7:ad:5a:1a:87:
         d1:77:b0:f5:ed:9f:ac:26:25:84:a0:3d:ec:56:4d:cf:e1:fb:
         03:77:6d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:23:21 2025 by rpki-client