Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d2001e7d-c16b-3759-984b-235a50540d9b.roa
File:                     d2001e7d-c16b-3759-984b-235a50540d9b.roa (raw, json)
Hash identifier:          5rKO6wfOapyspUNofIczVpiQ3GLHpqB/psxtDRu21X0=
Subject key identifier:   49:64:78:8D:6F:67:CA:4F:E5:DA:FD:79:3F:FF:8C:69:A8:EF:D7:0E
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584B540C6AB36B0AC2F78C099B00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d2001e7d-c16b-3759-984b-235a50540d9b.roa
Signing time:             Sat 27 Sep 2025 01:00:33 +0000
ROA not before:           Sat 27 Sep 2025 01:00:33 +0000
ROA not after:            Fri 26 Dec 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        157.5.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:54:0c:6a:b3:6b:0a:c2:f7:8c:09:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Sep 27 01:00:33 2025 GMT
            Not After : Dec 26 02:00:33 2025 GMT
        Subject: CN=31a54b4f-58a0-4f33-9b68-556f4714ce81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:17:a3:39:12:e5:83:c7:c2:5a:7d:cc:e5:46:
                    ef:2c:c0:7e:21:a9:9e:c2:a5:79:b6:ad:07:2b:e5:
                    13:42:2b:4f:c1:30:ad:a8:79:d4:f8:9a:e1:4f:54:
                    4a:aa:3b:5d:6f:79:f3:95:ae:14:a1:b7:6a:9f:a1:
                    5d:31:64:22:19:55:00:8a:20:18:8d:8d:a6:90:25:
                    bc:3d:c1:d6:63:b5:d2:e2:1e:8f:3a:01:c5:15:85:
                    86:08:d1:1e:d1:a0:2c:06:52:e6:f6:99:3e:f0:c0:
                    7e:98:e2:8b:86:cc:f4:89:77:cf:50:16:c2:90:eb:
                    6f:70:a2:32:95:0a:94:be:73:38:a3:04:ab:1f:aa:
                    4c:d5:80:f6:a3:93:d1:08:b4:4b:15:9f:b1:9c:58:
                    c6:e1:ca:ff:2f:99:a3:60:7f:71:9b:c1:49:6c:c6:
                    df:1f:f0:66:c1:4c:96:46:21:78:40:ee:ba:c6:1e:
                    09:ee:1c:fe:df:a9:9f:49:45:42:a9:7b:18:a9:61:
                    fc:e9:bb:56:8f:83:19:3e:02:88:16:eb:66:71:f8:
                    40:4e:05:7c:ca:ba:37:38:bb:5e:c2:e2:6a:91:85:
                    95:c5:14:91:a1:f8:4f:a4:f1:d0:2b:5a:c5:ac:91:
                    fc:e2:0c:c8:c6:30:e8:8f:c4:07:3a:44:14:bb:68:
                    96:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:64:78:8D:6F:67:CA:4F:E5:DA:FD:79:3F:FF:8C:69:A8:EF:D7:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d2001e7d-c16b-3759-984b-235a50540d9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.5.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:6b:68:cd:40:db:0e:7e:55:4a:31:e4:fd:8a:5d:24:8e:10:
         76:04:b3:7c:fb:6e:1a:c0:af:89:eb:37:b8:93:4f:ac:ed:25:
         de:38:56:ab:45:43:a0:8f:59:5b:2a:d5:e7:25:24:c6:6c:6d:
         c3:34:f4:43:93:34:76:84:a7:f1:9b:1e:f6:23:04:53:46:42:
         f0:56:e3:ba:80:bd:d6:3f:54:5f:41:68:45:1a:8d:85:68:d3:
         4d:37:f2:9f:ef:b4:14:bb:60:b0:c2:95:50:25:ba:be:39:8e:
         e7:8d:7c:d5:7c:01:9e:cb:ad:2f:a4:97:78:f5:51:ec:a3:6b:
         21:5e:10:c9:db:fb:45:d6:4b:b6:ef:0d:6d:53:a9:d3:6e:01:
         f6:9d:12:7a:3a:a6:dd:9a:31:3c:65:82:b4:8c:02:51:b4:ff:
         8c:9e:e7:28:51:75:8c:69:87:b9:02:68:8f:2f:4d:96:08:08:
         13:44:fd:49:f3:69:09:a0:b4:c0:f7:d6:aa:46:f2:9b:c6:e2:
         a3:fd:f1:33:7c:fd:ad:f2:61:25:5c:43:57:18:50:cd:e1:e9:
         99:68:7b:6a:c6:34:6b:b6:af:0c:7d:c3:b2:ce:23:14:e1:5c:
         28:74:2f:03:ce:9c:c9:2d:5d:0b:c0:53:b4:8f:a4:01:e7:3d:
         39:ef:33:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:32:54 2025 by rpki-client