Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6530b2ba-43cb-3fe1-809b-ad9047cabb5a.roa
File:                     6530b2ba-43cb-3fe1-809b-ad9047cabb5a.roa (raw, json)
Hash identifier:          MuOHfYOBBrOngw0yh0R6MSuY8ZHg0hApxdNHYGo1P1A=
Subject key identifier:   93:30:0C:E1:C4:65:09:4C:9A:40:FF:4B:21:D6:DE:85:B6:2E:34:33
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584993F9E73C69ACE7C79E194E00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6530b2ba-43cb-3fe1-809b-ad9047cabb5a.roa
Signing time:             Sat 19 Apr 2025 13:01:02 +0000
ROA not before:           Sat 19 Apr 2025 13:01:02 +0000
ROA not after:            Fri 18 Jul 2025 13:01:02 +0000
asID:                     54113
IP address blocks:        157.5.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:93:f9:e7:3c:69:ac:e7:c7:9e:19:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Apr 19 13:01:02 2025 GMT
            Not After : Jul 18 13:01:02 2025 GMT
        Subject: CN=eff84cb0-09a0-4374-bf3c-18fe841352f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:19:f5:62:d5:00:d8:50:f5:15:c2:31:47:07:
                    e8:7b:ef:0b:2b:fc:7c:97:cf:d6:63:e7:07:1b:64:
                    f4:99:4d:fd:ec:85:5e:4f:82:36:76:05:36:91:fd:
                    30:7c:c3:da:ae:db:75:47:84:30:9f:78:ea:cf:59:
                    79:c8:0a:35:79:e1:60:b8:be:59:c4:60:e2:d5:68:
                    ce:ef:90:c8:1a:ce:b8:54:83:b8:76:ee:c7:b5:7b:
                    7c:e6:17:0c:b9:a5:51:1d:e3:bb:5c:35:d6:97:ff:
                    61:e2:10:fc:36:05:67:b8:d7:e1:a1:2e:a9:c4:75:
                    68:d9:9b:8a:a2:65:cf:ac:c8:9e:fb:87:8a:22:d7:
                    df:17:0c:9d:e9:98:48:f8:f9:66:2c:cb:00:5e:7f:
                    2a:d8:9c:9c:68:2d:b8:76:20:b1:2a:17:d4:78:63:
                    88:f3:1e:f0:44:ce:a9:0c:cf:ca:12:b7:d6:1f:33:
                    f8:e1:d1:7d:c3:e2:fe:e3:23:71:d6:0b:fd:3d:62:
                    ad:45:4b:1c:8b:c3:f9:25:9b:48:31:16:c4:4b:9e:
                    43:08:46:69:f2:80:ae:65:87:08:94:a4:01:76:d1:
                    43:f3:19:13:55:f1:af:c0:ce:c6:f4:2a:4d:3a:b2:
                    81:7a:b6:c5:e8:75:6c:14:5e:56:12:0b:13:1a:0f:
                    c4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:30:0C:E1:C4:65:09:4C:9A:40:FF:4B:21:D6:DE:85:B6:2E:34:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6530b2ba-43cb-3fe1-809b-ad9047cabb5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.5.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:04:1a:5c:80:09:d7:9e:22:96:7e:9e:5d:70:7a:00:3c:d9:
         57:15:bb:96:ea:b0:61:9a:14:77:21:d0:0b:e0:2a:1d:c5:fe:
         1f:6c:6a:50:b6:6b:60:c0:d4:72:40:e6:c4:b9:a3:77:2d:81:
         0b:0a:49:9b:3d:6c:bd:8f:76:11:67:fc:c7:e0:e3:89:f7:47:
         f5:2e:d7:34:5c:04:a3:6d:47:c8:cb:91:c4:51:6c:fa:28:38:
         8f:4b:88:e5:a0:c3:ea:e3:75:8e:23:16:f3:d7:45:b5:48:57:
         46:5c:a1:be:d1:44:ac:f1:ce:3c:0d:b3:fc:4a:f5:fd:b4:c7:
         d6:40:e2:7e:1b:df:43:86:d1:58:d8:87:81:d5:c3:49:b1:2c:
         5b:8c:5a:ed:5f:16:ac:9b:4f:72:07:e8:6f:a1:d2:fe:25:92:
         64:75:48:d0:ed:96:b6:32:b0:d7:00:50:68:2f:95:81:a7:b9:
         ec:a2:70:53:67:26:79:f2:8b:0f:16:56:48:c3:4a:2b:bf:9d:
         73:37:a6:a9:c6:7e:fa:8e:44:3f:08:de:a0:67:ac:49:3d:54:
         fd:f3:2d:d9:a0:79:40:3e:7d:34:97:c7:08:ad:1d:c8:d9:fa:
         13:6e:ba:9f:fb:39:fc:56:35:c9:8a:6b:86:1f:8c:ee:d2:82:
         6f:a9:ba:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 21:03:47 2025 by rpki-client