Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a94e6faa-4c75-3ba1-82ac-7e7b7400c0fc.roa
File:                     a94e6faa-4c75-3ba1-82ac-7e7b7400c0fc.roa (raw, json)
Hash identifier:          hfTl1D1Knefd9UScyShlh/ch7PwSsCEPjNog3ZGz/Lw=
Subject key identifier:   1E:24:51:38:D4:C3:9D:7B:FA:62:5B:18:2A:25:59:1A:A4:00:34:C3
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584A49705A1FE36F259172833700
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a94e6faa-4c75-3ba1-82ac-7e7b7400c0fc.roa
Signing time:             Mon 23 Jun 2025 13:01:03 +0000
ROA not before:           Mon 23 Jun 2025 13:01:03 +0000
ROA not after:            Sun 21 Sep 2025 13:01:03 +0000
asID:                     0
IP address blocks:        157.133.192.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:49:70:5a:1f:e3:6f:25:91:72:83:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Jun 23 13:01:03 2025 GMT
            Not After : Sep 21 13:01:03 2025 GMT
        Subject: CN=34b8d436-10c0-49ee-919b-e7756ef64d1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d8:9f:b4:ee:1c:b6:2c:89:63:3b:d9:c5:bd:
                    0e:d0:f6:f0:d2:a1:d9:1c:2a:ad:9f:8b:d2:6c:e3:
                    3f:64:41:87:97:a6:39:99:6a:9b:97:47:8f:29:68:
                    f6:be:d4:bb:96:21:d8:0c:37:c6:eb:55:9a:c8:3a:
                    05:a6:6c:06:f2:87:ee:a2:8b:4d:c1:dd:74:4f:c1:
                    8f:83:4e:cc:83:28:44:af:59:00:3b:94:10:d9:50:
                    66:1b:56:c0:e8:11:c4:4f:1b:3e:ee:09:79:bc:ab:
                    81:08:0b:39:c6:22:4c:87:9a:ca:c0:c7:3e:ab:c7:
                    de:20:06:7a:d1:dd:50:86:9c:25:50:c7:fb:97:0f:
                    b9:70:d3:fd:4b:5c:24:f3:d7:8b:d1:43:fb:1f:7a:
                    95:c0:97:e3:ee:02:86:21:0e:e2:2a:73:46:b6:f9:
                    c4:09:62:26:b1:df:98:f6:6f:e9:9f:be:fb:ad:4d:
                    12:ed:fe:c6:53:cc:11:95:7e:cb:9f:7f:3c:1e:e7:
                    ab:b8:31:6d:a6:5f:75:16:b2:4e:34:71:91:f3:8e:
                    9d:ce:6a:db:67:2c:3e:80:19:12:3c:90:85:38:17:
                    21:ee:37:55:c9:ba:fc:81:28:c1:5d:33:f3:19:3b:
                    ad:b2:91:5a:de:91:6e:e3:3c:a2:f5:a1:2e:56:2c:
                    62:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:24:51:38:D4:C3:9D:7B:FA:62:5B:18:2A:25:59:1A:A4:00:34:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a94e6faa-4c75-3ba1-82ac-7e7b7400c0fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.133.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:30:3f:c4:fc:84:05:6a:8c:63:da:98:d5:70:58:5e:a4:02:
         c6:fc:67:c1:91:21:80:16:c6:c7:ee:f4:78:cf:dc:95:5a:d2:
         c8:d9:df:3f:7b:23:59:20:c8:1f:49:c2:57:0c:73:ae:48:85:
         05:79:42:c5:b6:15:77:94:cc:05:29:4d:ad:be:87:4a:a8:a8:
         57:a0:67:d9:79:ff:a1:cd:f5:66:90:6b:88:da:8f:4b:e9:f0:
         b5:50:7d:75:dd:5f:94:b4:05:dc:38:b0:80:a2:34:55:96:6c:
         bf:f5:af:9a:e4:08:bb:14:38:ec:3f:40:23:ce:d5:aa:8e:ee:
         3a:77:9b:c0:54:0b:36:a1:2c:8f:38:67:a7:96:b2:8a:12:ce:
         91:b7:43:d7:f1:69:3b:26:92:36:0b:93:16:a1:c4:85:e2:be:
         4e:73:c1:3f:86:d6:26:2b:4b:f4:03:56:51:bb:f0:38:6a:eb:
         fa:a6:4d:58:e0:9e:90:d3:09:be:8d:4c:10:4f:d2:46:bf:2f:
         a1:6a:ac:cb:12:7c:94:5d:76:f5:2f:91:76:41:ab:21:18:22:
         f1:af:66:79:79:c2:df:65:43:49:93:0a:35:5e:0e:de:75:9e:
         b8:92:d0:ec:0c:1f:85:53:56:08:48:15:c2:0a:eb:99:84:24:
         5b:70:50:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:25:56 2025 by rpki-client