Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/b3643a84-ea5d-357c-8bd6-98991f1c19e7.roa
File:                     b3643a84-ea5d-357c-8bd6-98991f1c19e7.roa (raw, json)
Hash identifier:          CV2A+c+S3x3F/8RGeaBlW04r7Pf560fsXKerX0BUzPA=
Subject key identifier:   84:4D:7A:05:99:16:F8:85:A5:08:31:B3:34:45:3C:79:2B:0E:E2:B8
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584A497058C098D7D442B88D1F00
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/b3643a84-ea5d-357c-8bd6-98991f1c19e7.roa
Signing time:             Mon 23 Jun 2025 13:01:03 +0000
ROA not before:           Mon 23 Jun 2025 13:01:03 +0000
ROA not after:            Sun 21 Sep 2025 13:01:03 +0000
asID:                     14114
IP address blocks:        157.133.180.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:49:70:58:c0:98:d7:d4:42:b8:8d:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Jun 23 13:01:03 2025 GMT
            Not After : Sep 21 13:01:03 2025 GMT
        Subject: CN=c2996c42-7bd9-4774-acf7-35a138bfd200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:bb:0e:6f:f0:e7:3b:3e:a5:f1:ee:a8:9c:bd:
                    37:01:2e:26:44:0a:7f:3e:24:c6:17:6f:85:14:dc:
                    46:e2:f5:42:8e:89:86:93:77:f6:34:08:01:dd:6a:
                    12:c6:7d:98:cf:fb:23:3d:07:74:dc:6f:9b:81:d1:
                    e4:ae:ba:e6:0a:12:0b:f2:37:f6:76:de:a5:fd:79:
                    0b:69:e6:29:3c:a2:d4:4d:64:2f:c4:00:34:ac:43:
                    51:5d:e5:5a:aa:d0:58:fa:b6:b8:de:16:58:fc:d4:
                    af:d7:16:d5:63:e9:61:dd:f8:af:04:0f:c5:a8:43:
                    ea:3f:aa:57:82:d0:8c:d7:0d:84:91:bf:9d:18:84:
                    b0:c4:1b:bf:a0:c6:05:09:74:1c:75:dc:87:39:1e:
                    ae:92:9b:90:78:3b:d8:b5:c2:8a:52:ce:d4:f7:6f:
                    6c:9e:9c:58:99:20:da:7c:52:1f:d2:00:6f:41:48:
                    04:f2:7b:98:93:1c:b5:28:c0:46:9c:d5:53:94:93:
                    7f:1b:b1:f5:80:99:ab:65:c5:90:41:1e:d8:2e:20:
                    bd:06:2e:83:e7:ad:b4:84:15:a3:cd:04:c9:0b:5b:
                    88:8e:10:39:01:35:3e:ea:02:fd:d3:55:ef:a1:7f:
                    a0:d6:c5:93:b2:0a:dc:be:9c:46:77:13:53:7d:84:
                    16:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:4D:7A:05:99:16:F8:85:A5:08:31:B3:34:45:3C:79:2B:0E:E2:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/b3643a84-ea5d-357c-8bd6-98991f1c19e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.133.180.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:84:d5:57:95:4d:ef:88:ca:f8:f4:17:a7:74:6f:1f:62:cd:
         ac:53:91:65:84:63:f6:91:ab:eb:ac:9e:57:1e:45:cf:a2:53:
         3f:34:37:d4:9c:54:8f:7b:33:5d:52:16:4c:14:5c:82:5d:c2:
         5f:56:43:ee:29:1f:dd:ac:86:07:b0:cd:ba:f6:78:c9:d9:8c:
         34:47:df:bc:f8:49:52:63:12:cd:01:0d:0f:b3:e2:c3:4f:42:
         d9:c5:37:82:50:47:34:66:99:51:e9:e8:e7:af:49:4c:52:7d:
         1d:16:ff:86:29:da:ee:cc:90:fa:e3:9f:e4:bd:e1:cb:a0:b5:
         91:ac:ed:c4:8e:7e:a2:1b:21:9b:96:a9:fc:a9:73:81:50:71:
         7f:33:20:e0:d8:a9:9b:d1:18:d3:c9:5a:96:5f:e0:a3:10:ca:
         02:9b:4d:16:10:28:7d:4e:fd:10:d3:fa:e9:c1:d7:93:a1:54:
         2c:9c:70:a9:8a:77:06:a5:ba:0e:6a:3a:de:36:b1:71:c3:0e:
         75:96:e6:f2:cc:8e:8f:58:1b:00:ac:c5:57:2c:09:ce:68:70:
         b4:6a:a7:bc:f0:ed:a7:2a:a6:03:c7:fe:ee:21:1b:81:48:10:
         6a:32:db:b3:f0:cb:3a:22:74:b3:1f:f6:7a:85:22:9b:e1:6a:
         5c:c4:f5:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 23:20:51 2025 by rpki-client