Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9ed666d9-d6d7-3102-80ea-a4f643ad84d1.roa
File:                     9ed666d9-d6d7-3102-80ea-a4f643ad84d1.roa (raw, json)
Hash identifier:          ie29jnGeo4IQxtjkWGkbzGuTJFwEBipvd5C48/BiEFA=
Subject key identifier:   EA:AB:62:FB:99:6F:E4:90:42:1D:73:E8:38:93:C6:64:C4:F4:09:A3
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F432858499F24C742363C1D055713E650
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9ed666d9-d6d7-3102-80ea-a4f643ad84d1.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     54113
IP address blocks:        157.5.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:c7:42:36:3c:1d:05:57:13:e6:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=4bfe195a-2638-471f-a27c-ccd72677bf36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:6e:05:01:a8:6f:96:26:ea:62:e8:24:1f:dc:
                    d5:4b:2f:d5:5c:c9:28:8e:4e:f3:56:d8:bd:3f:9c:
                    82:5b:78:ef:d6:62:e3:65:a8:d7:0a:22:40:c0:f7:
                    26:11:4d:83:23:a6:04:34:55:f4:50:ed:7b:0a:bf:
                    d8:1c:95:46:54:4e:f4:29:ea:e8:51:e1:c7:24:0e:
                    46:ef:be:93:7b:8e:cd:ad:2f:91:cc:a0:45:fb:d1:
                    4c:ff:36:00:24:94:9f:5a:f1:b0:a3:c8:ce:16:28:
                    da:6a:77:dc:f1:d6:b9:99:89:07:de:35:6a:c0:ad:
                    45:3a:3c:0c:16:a5:01:af:d1:fc:7d:d3:65:04:2a:
                    36:57:ce:82:33:9c:d3:4d:62:49:7e:95:e3:ac:b7:
                    6a:ce:bd:a6:d0:22:f0:fb:88:91:39:5b:61:fe:bb:
                    6f:cd:f1:62:cb:60:3c:60:c1:e8:a3:04:94:95:31:
                    3a:ac:6e:a7:e5:40:b0:5a:49:38:bb:ba:4b:9d:71:
                    45:ed:e4:39:56:4a:85:d8:18:93:8c:e8:da:93:05:
                    c9:fe:97:30:c1:e1:53:a0:2c:83:3a:60:e9:73:2b:
                    0f:01:e6:7d:84:c3:c1:49:e2:bb:fe:58:8c:d0:ef:
                    d7:61:62:73:d2:d6:86:a9:b8:21:5b:b3:29:fb:21:
                    49:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:AB:62:FB:99:6F:E4:90:42:1D:73:E8:38:93:C6:64:C4:F4:09:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9ed666d9-d6d7-3102-80ea-a4f643ad84d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.5.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:f3:81:94:d9:4a:42:e1:7a:0e:3f:e8:f0:8c:04:f1:a3:0c:
         a8:8b:d5:0a:8a:e9:50:9a:66:00:e2:7a:af:16:2e:e5:3e:43:
         c9:a2:53:2d:65:ee:da:5a:e0:0c:bb:71:08:84:b6:55:b5:83:
         40:79:46:ed:d8:07:ed:a4:32:f0:57:71:7f:ea:c7:04:50:1e:
         cf:0d:39:bc:35:02:8a:ac:c2:37:a8:25:4e:26:9d:5a:e6:dd:
         f4:8e:eb:33:a1:05:df:4d:03:59:4a:a7:9e:b0:3c:69:0d:64:
         21:91:c5:e5:27:80:a4:12:17:0f:ff:db:ce:bd:06:1f:c4:6a:
         59:51:c7:af:c1:d3:cc:87:9d:0d:a3:c8:7f:8e:b2:06:f7:43:
         96:de:75:bc:b9:64:b7:dd:d8:a2:26:51:82:a5:f8:08:2f:b2:
         f9:d7:4d:5c:7f:cc:c3:de:62:3a:b5:d1:80:b3:f0:95:43:47:
         df:22:c1:8d:43:27:9e:69:e4:3f:50:e0:1f:05:f1:37:98:79:
         24:66:47:4b:0c:78:50:71:b8:37:6e:cb:b4:9c:3d:0e:6e:28:
         17:60:7c:38:27:d8:95:b9:ef:19:aa:cd:7b:da:56:c7:59:32:
         dc:49:86:c5:5a:72:92:e4:d8:bd:bb:e1:9c:a4:91:51:4a:9a:
         7a:df:42:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 20:45:30 2025 by rpki-client