Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cc70bf40-8d8f-3723-a43b-f785998133e4.roa
File:                     cc70bf40-8d8f-3723-a43b-f785998133e4.roa (raw, json)
Hash identifier:          P8ymexCuAxwrWnlaQ/6DIQ6K/4hGyyH3LARwD9QuryU=
Subject key identifier:   23:13:C9:6E:94:1E:2B:60:36:82:72:12:60:96:3D:1E:3F:7A:62:C7
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F432858499F24C60F67786FE6E1233300
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cc70bf40-8d8f-3723-a43b-f785998133e4.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     54113
IP address blocks:        157.5.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 May 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:c6:0f:67:78:6f:e6:e1:23:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=9a94961e-ccb7-4b3a-9750-4c89c297ae51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e5:79:24:f8:7b:3d:83:50:2d:36:d5:cb:fd:
                    45:bf:ec:bf:f2:15:83:ba:3d:c9:bd:0f:e0:a0:02:
                    18:34:8e:49:bc:50:23:19:1f:da:b6:57:7c:3e:a1:
                    93:f5:7a:ad:7b:56:f9:35:2f:79:49:25:84:9b:1c:
                    fe:68:05:f1:91:ac:6b:0f:bb:a5:95:7b:ce:7e:c2:
                    95:23:cf:40:f0:e4:8b:3f:37:df:ae:ab:79:8d:85:
                    66:ad:c2:cd:b1:b6:39:1c:8e:fb:a9:d5:bb:36:d7:
                    74:1b:56:07:56:58:4c:8d:2b:88:95:4a:7a:57:83:
                    66:40:6a:c5:39:f3:fa:4d:6e:ee:98:e9:c2:c4:d8:
                    05:a9:52:7b:3d:72:42:34:0c:ca:d1:53:56:81:09:
                    3e:9e:f8:b8:6b:fa:d1:73:6e:35:df:94:ff:45:7a:
                    86:33:de:5e:60:b4:4f:b1:78:6f:59:ae:8e:01:ea:
                    b0:1d:42:91:02:eb:91:cd:ca:99:44:1d:0e:b4:15:
                    ce:32:80:55:9c:98:c0:7d:58:56:ab:41:a6:ea:f6:
                    c5:7a:ec:bb:25:31:2b:4a:73:97:22:1b:c9:6b:c6:
                    07:fe:40:dd:71:1b:f7:9f:85:9b:e9:e5:6c:ec:d1:
                    c7:16:b8:c1:16:58:8d:34:bf:29:1b:20:e2:4b:88:
                    68:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:13:C9:6E:94:1E:2B:60:36:82:72:12:60:96:3D:1E:3F:7A:62:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cc70bf40-8d8f-3723-a43b-f785998133e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.5.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:56:a4:ed:ee:5e:35:d9:7a:46:00:cb:5b:d7:a3:bf:f2:90:
         0b:a2:51:5c:1b:2a:26:c8:f7:e8:55:a4:04:6e:14:99:92:95:
         e0:37:36:11:3f:bb:e5:a7:9f:04:08:f3:db:bc:58:87:99:3c:
         44:ef:d3:1c:69:56:e3:db:3f:15:12:b3:fa:c0:28:1e:a3:1b:
         15:ee:23:53:9e:93:eb:68:d3:e3:26:33:69:ef:ba:6c:51:bb:
         7b:3e:d1:e2:67:66:56:a9:4f:fa:0f:7b:61:09:de:a0:84:23:
         f0:dd:23:52:bb:2e:35:ae:b4:d5:45:10:3d:d6:6d:37:2f:bd:
         a5:3e:f1:91:18:d4:b5:12:e1:ec:2d:98:5b:2a:b2:27:9f:87:
         b5:74:a8:12:bd:0b:58:db:af:1b:16:b0:4f:58:1d:ba:a2:bf:
         bb:fd:6d:9c:d3:32:8c:59:24:3f:b8:71:e7:79:b4:61:41:60:
         f0:b2:07:ba:73:0a:e8:ed:0c:79:e7:66:71:31:67:de:a2:a2:
         59:7d:89:3b:4e:ae:39:ac:25:05:0a:e1:92:16:bc:e9:a8:f3:
         4b:86:02:c4:95:ba:90:1c:1b:11:99:a7:ee:9d:e8:55:11:60:
         82:b2:7f:73:7d:eb:c8:96:10:24:21:72:7d:48:0a:a8:d3:b0:
         92:a9:4d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 09:57:18 2025 by rpki-client