Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/783675a5-7ea4-3da3-a42d-7e9b6f0e7805.roa
File:                     783675a5-7ea4-3da3-a42d-7e9b6f0e7805.roa (raw, json)
Hash identifier:          LJtSe7Hwh80bZySfV6zu06BF9ajOovHwp7IWH/fl0HI=
Subject key identifier:   37:F4:3F:0F:9C:BC:BC:30:48:93:B2:9F:16:02:E7:5A:06:58:D6:02
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584A497057A6AA9A20C10100C820
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/783675a5-7ea4-3da3-a42d-7e9b6f0e7805.roa
Signing time:             Mon 23 Jun 2025 13:01:03 +0000
ROA not before:           Mon 23 Jun 2025 13:01:03 +0000
ROA not after:            Sun 21 Sep 2025 13:01:03 +0000
asID:                     35039
IP address blocks:        157.133.96.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:49:70:57:a6:aa:9a:20:c1:01:00:c8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Jun 23 13:01:03 2025 GMT
            Not After : Sep 21 13:01:03 2025 GMT
        Subject: CN=b378a87f-c5ab-45e7-864e-04aecf865a86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:0f:bb:24:77:f9:d9:cd:14:15:11:82:64:d4:
                    24:28:ff:c5:ae:7b:c8:17:57:01:9c:c6:ae:e9:2f:
                    72:f3:01:dd:ff:f8:22:ce:bd:f7:1e:c3:b5:45:a1:
                    10:af:6d:6d:a8:d0:25:10:48:2b:9c:58:66:8c:10:
                    8a:df:f6:92:2c:01:c1:02:e6:8f:fd:09:7b:63:f8:
                    66:c8:27:28:52:75:d2:44:ea:4f:02:ed:47:f2:8c:
                    b4:a5:d8:cc:14:87:30:bc:4f:c8:7b:33:c2:99:f0:
                    df:f2:d6:aa:c6:a2:66:2a:c9:8d:16:c6:e7:50:32:
                    84:a4:04:8f:71:b2:31:ba:39:1b:7f:a4:a7:b6:8b:
                    1c:82:0f:e3:0c:df:b2:c6:e1:55:eb:fd:26:30:d9:
                    b8:3f:51:bd:67:7e:b6:b3:86:a3:b4:ff:ab:0e:7d:
                    c5:0b:27:fe:ac:b3:70:c3:fe:8a:bf:a5:ce:be:a5:
                    78:bc:47:06:a3:03:03:dd:fd:77:72:7c:b7:38:9d:
                    03:c7:83:01:88:3d:42:8e:7c:c1:92:09:bd:44:a8:
                    3a:a7:c3:3b:7a:d8:19:4c:02:69:bd:f1:56:f9:5f:
                    12:fa:fb:11:c6:43:4a:3b:4f:28:8a:ed:1e:34:5b:
                    c2:cb:1e:3c:32:a8:5d:5c:f7:0f:df:63:f2:e4:51:
                    ff:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:F4:3F:0F:9C:BC:BC:30:48:93:B2:9F:16:02:E7:5A:06:58:D6:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/783675a5-7ea4-3da3-a42d-7e9b6f0e7805.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.133.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:25:24:c7:e8:c8:5e:0f:25:46:c0:66:d4:e4:97:fb:e2:8f:
         2d:60:85:9d:3c:8e:89:17:b7:98:60:3d:35:bd:98:60:f3:0a:
         3d:8d:b8:25:00:e2:a0:c4:21:8b:d6:b0:d2:be:c7:95:6a:a7:
         7c:08:fb:20:92:2b:8e:b7:36:05:42:80:37:cf:70:14:50:33:
         b2:6e:a5:34:e2:55:49:be:a4:13:56:02:e2:5c:f7:a8:d7:b8:
         3f:39:48:cd:14:1b:2a:96:81:d5:d2:83:e4:87:45:0a:9e:64:
         53:f8:5c:bc:9c:dd:e4:e0:b6:59:e5:0e:b8:f8:9b:e8:29:05:
         6f:f5:dd:90:d3:95:69:c7:0c:91:cb:1d:21:4e:2d:a6:ef:90:
         cf:b2:98:f8:a7:16:47:99:37:ee:86:da:37:6f:e4:32:38:65:
         5d:de:80:9d:fc:21:c9:ff:27:f4:33:b0:05:aa:ea:76:0d:cd:
         c5:26:1c:df:09:de:c1:d7:50:2b:90:7f:dd:4f:4f:e4:1c:d6:
         0c:b7:77:a6:ef:8d:e7:d3:4c:5b:b0:6c:ec:a5:7e:a2:54:fe:
         c7:57:a0:a5:49:7b:71:b6:cd:2c:de:85:c0:83:cf:0d:8c:45:
         b2:6b:80:9a:ca:1c:8b:20:91:c1:01:d5:cc:ff:01:d5:9c:95:
         9a:b3:15:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 22:25:01 2025 by rpki-client