Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/62553cd3-bcfe-3fed-8595-f182b4457346.roa
File:                     62553cd3-bcfe-3fed-8595-f182b4457346.roa (raw, json)
Hash identifier:          xHUPG+GbkonGZrwAo6+DabxDsuWy2srxqtXuvPWw8PM=
Subject key identifier:   27:AA:FC:7A:86:53:53:20:8C:B5:D1:E9:2E:96:93:AC:09:0B:85:5A
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584B540C6F6BC822B419F81AAC80
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/62553cd3-bcfe-3fed-8595-f182b4457346.roa
Signing time:             Sat 27 Sep 2025 01:00:33 +0000
ROA not before:           Sat 27 Sep 2025 01:00:33 +0000
ROA not after:            Fri 26 Dec 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        157.5.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:54:0c:6f:6b:c8:22:b4:19:f8:1a:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Sep 27 01:00:33 2025 GMT
            Not After : Dec 26 02:00:33 2025 GMT
        Subject: CN=bf374c75-dde1-4c92-ba28-171cf1a393bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e2:6a:73:3d:dd:99:dd:12:57:62:1e:cc:11:
                    65:f9:b8:59:e0:d8:62:1f:3c:2f:cc:ec:55:fc:74:
                    00:0e:f1:73:21:f4:b6:8c:de:d9:64:c8:40:90:fa:
                    c0:aa:64:3f:8d:42:78:bc:e1:62:bb:19:48:dc:3b:
                    bc:4f:2f:35:01:9b:bd:ff:14:26:12:ed:f6:6b:4e:
                    3d:06:29:31:0b:38:1d:c1:02:c6:d1:a7:b4:0d:59:
                    a1:d0:bd:37:08:13:9d:5f:59:86:8a:69:f1:33:82:
                    10:2e:96:04:e8:f7:d9:66:45:ec:43:1a:95:d8:1a:
                    b0:cc:e0:48:5d:8c:67:b2:49:96:2f:5c:8a:93:96:
                    76:73:e0:90:60:f8:f8:ad:5a:70:9e:6d:b3:86:ff:
                    89:7e:fd:0d:3f:4e:aa:c3:a4:a2:cd:9f:6b:52:fc:
                    d7:47:61:63:09:f4:f4:36:ad:db:dd:33:08:81:26:
                    e0:63:41:67:9c:73:09:15:e2:e7:c4:99:10:53:f1:
                    ac:f9:2f:f0:51:32:f2:4a:02:ad:68:7b:ea:4b:3c:
                    b3:18:0c:c6:4c:4f:69:29:c7:3a:5c:ee:bb:9f:bb:
                    4f:b8:87:78:12:46:1f:cc:4a:9c:01:6c:83:85:26:
                    5f:74:7b:8c:e3:de:f6:88:01:59:19:61:7b:1b:2e:
                    e9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:AA:FC:7A:86:53:53:20:8C:B5:D1:E9:2E:96:93:AC:09:0B:85:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/62553cd3-bcfe-3fed-8595-f182b4457346.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.5.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:1c:06:d1:af:ff:32:be:86:a6:2a:63:67:fc:48:26:36:fe:
         78:7f:22:fb:e8:c6:85:57:d1:eb:62:b5:cf:6b:52:0b:2a:a4:
         80:20:5c:0b:43:2b:6c:40:80:cc:a2:23:94:bc:7e:bf:1a:d9:
         91:41:80:92:88:63:8b:bf:70:a3:42:f2:2d:db:66:ae:58:cc:
         92:7e:3a:6b:25:26:db:ec:31:16:1d:94:f9:31:26:2a:f7:52:
         d9:2b:b9:26:e2:7e:4f:a7:61:35:66:05:f3:60:a1:76:4e:22:
         3e:09:4b:ac:64:12:43:fc:13:97:3c:f6:53:fb:5f:32:0d:ee:
         4c:6b:a9:10:d1:5e:74:04:37:c7:98:12:b5:e8:ea:c0:1c:36:
         0a:e6:8c:cd:11:0c:ad:51:2f:33:07:c0:a3:3a:9a:99:a5:55:
         db:c7:f8:d2:d3:63:9f:24:8f:4d:29:71:bc:7b:2f:a7:78:b2:
         19:67:39:66:0c:2c:5f:af:2d:12:02:f8:5c:19:55:71:ff:2c:
         74:d6:ec:e3:88:1b:10:c3:cc:fc:9e:d5:a8:a4:5a:83:4b:f6:
         67:ed:96:63:f6:32:33:e5:8f:1d:9c:d7:6e:39:8f:0a:4d:e0:
         fb:aa:97:47:46:3e:b3:3e:50:f3:20:33:a4:9d:e7:f5:9d:34:
         20:aa:3d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:07:53 2025 by rpki-client