Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/9a7d3b35-cfd1-3e1b-b8aa-ca281b83412d.roa
File:                     9a7d3b35-cfd1-3e1b-b8aa-ca281b83412d.roa (raw, json)
Hash identifier:          J2z1R+3wj1hWpgKjVxMM5no2mYXZZOZz0RDEZyKaFgI=
Subject key identifier:   35:1A:9F:6E:A1:54:C0:D6:65:0A:EB:0F:57:28:05:FD:51:68:4F:FF
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F43285849BB0F790E4F36CC518D152500
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/9a7d3b35-cfd1-3e1b-b8aa-ca281b83412d.roa
Signing time:             Sat 03 May 2025 13:01:01 +0000
ROA not before:           Sat 03 May 2025 13:01:01 +0000
ROA not after:            Fri 01 Aug 2025 13:01:01 +0000
asID:                     54113
IP address blocks:        157.52.64.224/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bb:0f:79:0e:4f:36:cc:51:8d:15:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: May  3 13:01:01 2025 GMT
            Not After : Aug  1 13:01:01 2025 GMT
        Subject: CN=30037704-db6e-4ae0-b13c-9fad2e825695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:56:65:32:39:ce:64:50:cf:19:7d:5d:0c:c0:
                    b4:22:b0:f9:d5:f3:bb:90:06:28:af:75:55:81:58:
                    ee:11:5d:c9:c9:15:8d:88:98:49:59:e6:7c:1d:65:
                    8b:ef:38:3a:28:8a:75:30:c7:d9:a9:22:e1:95:c2:
                    fa:4c:5f:76:bd:da:d7:67:e6:5a:0f:8c:d1:5d:b9:
                    03:65:73:42:f3:d5:de:77:18:5c:e6:2d:42:33:63:
                    9c:5b:84:42:04:5f:4a:1d:b7:3b:65:cf:f0:b4:2f:
                    db:95:c6:57:da:b8:74:e4:53:ac:b8:24:6c:3f:af:
                    ad:9d:be:61:b9:08:3e:65:0f:79:41:c9:30:dc:07:
                    8c:50:70:a3:cc:c1:34:32:51:e4:6a:b7:a7:d8:6f:
                    88:28:e4:cb:2b:1f:f2:d5:7c:e5:48:69:05:dd:dc:
                    e1:f5:96:8c:21:f5:50:02:44:a9:31:d9:52:89:1c:
                    7c:14:e7:a3:df:22:a1:18:06:ab:e7:02:ad:01:dd:
                    7b:26:98:3f:48:42:38:9e:1b:53:dc:dc:a0:22:70:
                    38:ce:bc:ed:e4:b2:a7:8d:24:49:46:76:b3:19:96:
                    8e:cd:1c:c8:21:cc:48:fb:4c:5b:31:40:98:fb:4b:
                    67:9a:4f:0a:3b:d5:cd:88:fd:44:91:3e:76:fc:63:
                    71:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:1A:9F:6E:A1:54:C0:D6:65:0A:EB:0F:57:28:05:FD:51:68:4F:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/9a7d3b35-cfd1-3e1b-b8aa-ca281b83412d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.52.64.224/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:65:21:2e:a2:d7:39:1d:aa:8f:71:83:8a:69:85:69:af:8c:
         3a:1a:5a:90:eb:ab:f7:df:e4:b1:21:83:38:48:7c:29:bb:19:
         13:1a:a7:bf:d7:a9:06:62:6d:dd:a6:8c:c1:c4:72:8d:bb:f3:
         2a:80:e3:90:06:68:2d:89:8b:5d:7c:f0:df:0c:b4:26:4e:ef:
         b8:3f:d3:ce:fd:ec:a6:aa:5f:38:4c:67:da:07:cd:0f:f6:97:
         4d:45:2f:a9:48:77:7c:78:bc:e9:50:f1:cd:eb:f2:7d:eb:9a:
         31:b3:7b:f3:db:d7:80:ab:c4:3a:21:6d:06:a0:9a:05:81:6d:
         42:36:70:ee:0a:58:3a:77:52:88:a5:14:0c:7d:26:d5:34:3d:
         f7:d7:da:ab:5f:f2:6b:f4:20:98:6a:52:a7:a6:cc:fe:3e:df:
         ba:7d:ac:16:66:79:b9:9f:e9:ea:ac:f8:24:5a:b5:ec:7d:1b:
         87:a8:91:e0:1e:b5:3f:a3:bf:0b:1d:d6:e3:47:9e:e7:9a:bb:
         8f:e2:99:22:c5:27:13:8f:91:99:f1:ca:0a:4b:94:af:14:01:
         72:40:c9:3c:f9:69:4a:fc:c2:69:81:50:4c:4c:d8:5e:e8:4e:
         6a:e6:11:98:04:a3:9a:10:a5:3d:dc:6e:ee:0e:2c:99:c4:af:
         7d:59:36:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:45:30 2025 by rpki-client