Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/c531d429-9d9d-3e5e-8eef-d976649f2cfd.roa
File:                     c531d429-9d9d-3e5e-8eef-d976649f2cfd.roa (raw, json)
Hash identifier:          H+Ja2n2NuyG5Oq81W4Jof3zqekrMSXzH08vYS9RxxzE=
Subject key identifier:   D7:ED:A7:46:7D:FC:93:3F:6C:BE:1A:07:E8:3C:EA:91:5E:93:65:D5
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584AEE2697037067A3CA61516E00
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/c531d429-9d9d-3e5e-8eef-d976649f2cfd.roa
Signing time:             Thu 21 Aug 2025 13:00:41 +0000
ROA not before:           Thu 21 Aug 2025 13:00:41 +0000
ROA not after:            Wed 19 Nov 2025 14:00:41 +0000
asID:                     0
IP address blocks:        157.133.240.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ee:26:97:03:70:67:a3:ca:61:51:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Aug 21 13:00:41 2025 GMT
            Not After : Nov 19 14:00:41 2025 GMT
        Subject: CN=426cbc63-e0fb-4cc5-b3cb-0b6b88e8c17f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:28:24:44:70:8d:cb:25:81:59:d1:7c:d2:7c:
                    b3:5d:fb:b9:30:40:1d:dd:b8:43:48:41:25:d1:85:
                    82:6c:00:1d:4f:5a:02:7d:e8:04:05:eb:4d:d0:3a:
                    28:da:ae:29:10:cc:66:aa:3c:8f:71:19:0d:8d:9c:
                    b7:b5:88:c0:0e:8e:12:d3:f1:ae:8b:13:9d:1b:9b:
                    b4:d6:20:78:4f:4e:9c:75:58:c7:43:09:90:f8:a4:
                    98:10:2f:87:54:8a:87:d7:dc:5c:21:17:5b:e5:81:
                    72:64:b4:4c:92:a6:9f:55:43:6f:ed:c3:ab:c8:65:
                    b0:4c:07:af:78:ad:b0:1d:49:43:7c:ed:ef:96:18:
                    81:db:e5:72:35:c8:10:89:45:5c:ac:60:74:eb:3b:
                    b7:36:45:ef:3a:0a:13:62:07:3a:4f:a2:df:ea:82:
                    52:e1:8b:4e:da:8b:a2:3e:ee:d7:12:fa:59:32:12:
                    93:7a:8f:e1:d7:4e:ca:8c:5a:4f:a7:f6:bf:50:5e:
                    d7:4f:42:61:0a:a7:25:ce:6a:21:b3:83:e1:09:00:
                    bd:81:ca:2c:51:f6:78:28:a7:5c:28:01:8c:85:e6:
                    4d:29:8e:52:a3:76:42:96:93:cf:4d:09:9d:9f:15:
                    eb:8e:e4:b5:f0:ec:6e:c5:09:d1:87:97:fe:97:e4:
                    1f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:ED:A7:46:7D:FC:93:3F:6C:BE:1A:07:E8:3C:EA:91:5E:93:65:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/c531d429-9d9d-3e5e-8eef-d976649f2cfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.133.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:1c:b1:40:9b:50:1c:74:cd:fb:1b:a3:4f:de:22:3b:b9:f3:
         31:02:fc:5e:fb:6f:8e:38:0c:7e:0a:5e:3f:93:44:89:e5:6b:
         ce:b2:ff:a1:c7:0b:18:88:15:5a:60:ea:9d:0b:f4:1c:7c:1f:
         a0:c6:6a:7a:68:70:55:c6:18:ae:d6:3e:69:92:e2:1d:0e:74:
         3d:aa:93:9b:c0:a2:d4:24:22:1d:72:93:8c:f6:38:b0:59:dc:
         42:1d:d8:01:2f:cc:67:65:b8:9b:53:0d:22:96:7e:66:1f:36:
         df:7e:57:53:37:e3:9e:a8:8b:2b:00:0d:5c:a5:f2:44:ea:75:
         9f:fb:e2:26:d9:35:f4:a2:c1:95:61:22:23:e3:1f:a3:5b:2a:
         10:6a:fa:37:f2:e6:c7:e4:bf:60:d4:14:ae:ee:d8:e1:a4:b0:
         5b:62:c4:fc:a1:00:1e:c4:ce:a6:3e:ef:dd:aa:2f:22:7f:53:
         68:2a:62:e1:e8:3e:19:57:af:2b:11:9c:09:00:9f:71:92:5f:
         29:52:8b:6a:fa:52:bf:dd:37:dd:84:8a:95:17:f6:e2:48:d2:
         d4:61:64:30:44:62:18:56:26:23:8c:9e:05:e9:2c:ff:d6:7e:
         99:5e:57:00:83:8f:c3:f4:36:8e:8d:ca:66:b4:bd:f8:ec:da:
         8e:b3:df:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:32:22 2025 by rpki-client